Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/lMMYKNgKP1eCUy4FWDzOrgZUzHM.roa
File:                     lMMYKNgKP1eCUy4FWDzOrgZUzHM.roa (raw, json)
Hash identifier:          UxJASwHqSM1XE0CBwD3ga8UW9CEBlLuWOQ//JxOP9gU=
Subject key identifier:   94:C3:18:28:D8:0A:3F:57:82:53:2E:05:58:3C:CE:AE:06:54:CC:73
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       6C
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/lMMYKNgKP1eCUy4FWDzOrgZUzHM.roa
Signing time:             Mon 01 Nov 2021 01:28:36 +0000
ROA not before:           Mon 01 Nov 2021 01:28:36 +0000
ROA not after:            Sat 15 Oct 2022 01:30:02 +0000
asID:                     2497
IP address blocks:        124.147.64.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Nov  1 01:28:36 2021 GMT
            Not After : Oct 15 01:30:02 2022 GMT
        Subject: CN=94C31828D80A3F5782532E05583CCEAE0654CC73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:75:b4:9a:a2:90:0e:70:8a:83:3f:e6:00:d2:
                    0f:bc:8d:ec:e7:eb:6b:7d:6b:b3:e0:14:f4:b0:f0:
                    81:8f:17:27:eb:99:cd:05:4b:70:6a:34:be:19:90:
                    c4:6d:a7:a1:e9:98:6e:0b:43:b1:02:59:3a:68:8f:
                    24:9c:a5:a9:3c:af:0d:22:b5:cf:2a:39:c4:1e:a6:
                    7c:c8:03:5f:b6:a7:52:d3:af:79:21:29:50:25:e0:
                    7d:fe:17:bb:45:dd:7a:38:3c:6d:cb:f9:b2:24:36:
                    de:a7:dc:68:d4:b3:2b:0b:57:51:9e:32:88:0b:b2:
                    09:3c:6e:f4:77:6c:c4:43:49:18:e5:c1:48:2b:c9:
                    3c:98:e5:07:92:69:2d:85:c6:82:d0:60:c5:e9:1a:
                    5d:72:88:7e:07:7e:81:09:9d:63:05:1e:f0:47:41:
                    dc:3e:86:8b:76:be:ca:e4:74:aa:6e:4a:02:ee:69:
                    39:fa:c3:22:2a:04:84:9c:a0:af:80:1f:88:b4:89:
                    95:7f:44:a9:ab:de:cd:6b:0b:05:96:d9:f8:c5:2d:
                    2f:c8:d1:81:fd:fc:44:d3:a9:3b:03:95:1c:0d:05:
                    2f:03:f0:98:0f:8e:fa:16:80:09:d9:b0:47:2c:dd:
                    93:31:03:42:c0:2e:e7:e4:50:3c:42:63:47:cb:6a:
                    3d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C3:18:28:D8:0A:3F:57:82:53:2E:05:58:3C:CE:AE:06:54:CC:73
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/lMMYKNgKP1eCUy4FWDzOrgZUzHM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.147.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2d:eb:7e:7b:5b:63:4d:7b:92:8b:e7:f2:f6:96:16:a8:ed:75:
         db:41:94:a0:11:0a:9b:4a:6a:ae:3a:9f:43:b9:a6:95:29:3d:
         cc:19:16:1e:c6:86:72:b8:c5:8d:dd:63:a3:cd:63:b5:be:61:
         5a:88:89:96:51:52:ed:26:f5:aa:d6:4a:db:b1:2c:66:82:de:
         c8:b3:52:e6:a8:74:44:96:a4:7e:19:8d:3d:29:75:13:63:ac:
         1a:dc:c1:92:8c:83:fe:74:6c:3a:e9:b4:58:55:7a:3d:2a:3f:
         78:e4:85:00:ec:5e:28:f1:1c:6b:89:74:8a:fc:a3:c3:5e:dc:
         d6:4b:5c:df:e9:ee:09:82:f6:62:9b:5c:90:c4:51:a9:2c:28:
         c9:92:6f:2f:2d:26:a3:74:7d:5e:16:8d:e1:38:7f:3e:be:e9:
         49:81:15:31:3f:f9:b9:b4:c5:3a:25:fc:a1:d2:63:0b:a1:03:
         68:33:49:b3:4a:a8:d7:fd:b1:c9:b0:d4:67:8c:fa:fb:d9:3e:
         19:ed:44:a0:38:76:3b:10:4a:d4:29:9c:1a:5a:80:21:12:f9:
         e1:3f:60:55:d1:30:47:34:33:f8:29:78:28:b3:ee:0c:78:2f:
         be:1a:ea:7e:7e:4a:7b:aa:66:2d:6d:7c:bb:33:aa:3b:8c:a6:
         8e:60:80:e3
-----BEGIN CERTIFICATE-----
MIIEuDCCA6CgAwIBAgIBbDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyOTgz
Q0ZENUY4Q0FGQTAwNjhEMkVCQTI1RUQwRjcwMTI0NEIxMkY5MB4XDTIxMTEwMTAx
MjgzNloXDTIyMTAxNTAxMzAwMlowMzExMC8GA1UEAxMoOTRDMzE4MjhEODBBM0Y1
NzgyNTMyRTA1NTgzQ0NFQUUwNjU0Q0M3MzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANN1tJqikA5wioM/5gDSD7yN7Ofra31rs+AU9LDwgY8XJ+uZzQVL
cGo0vhmQxG2noemYbgtDsQJZOmiPJJylqTyvDSK1zyo5xB6mfMgDX7anUtOveSEp
UCXgff4Xu0Xdejg8bcv5siQ23qfcaNSzKwtXUZ4yiAuyCTxu9HdsxENJGOXBSCvJ
PJjlB5JpLYXGgtBgxekaXXKIfgd+gQmdYwUe8EdB3D6Gi3a+yuR0qm5KAu5pOfrD
IioEhJygr4AfiLSJlX9EqavezWsLBZbZ+MUtL8jRgf38RNOpOwOVHA0FLwPwmA+O
+haACdmwRyzdkzEDQsAu5+RQPEJjR8tqPZcCAwEAAaOCAdUwggHRMB0GA1UdDgQW
BBSUwxgo2Ao/V4JTLgVYPM6uBlTMczAfBgNVHSMEGDAWgBQpg8/V+Mr6AGjS66Je
0PcBJEsS+TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGQGA1UdHwRdMFswWaBX
oFWGU3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNi9LWVBQMWZqSy1nQm8wdXVpWHREM0FTUkxFdmsuY3JsMG0GCCsGAQUF
BwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmlj
LmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9LWVBQMWZqSy1nQm8wdXVpWHREM0FTUkxF
dmsuY2VyMA4GA1UdDwEB/wQEAwIHgDBvBggrBgEFBQcBCwRjMGEwXwYIKwYBBQUH
MAuGU3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNi9sTU1ZS05nS1AxZUNVeTRGV0R6T3JnWlV6SE0ucm9hMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQGfJNAMA0GCSqGSIb3DQEBCwUAA4IBAQAt6357
W2NNe5KL5/L2lhao7XXbQZSgEQqbSmquOp9DuaaVKT3MGRYexoZyuMWN3WOjzWO1
vmFaiImWUVLtJvWq1krbsSxmgt7Is1LmqHRElqR+GY09KXUTY6wa3MGSjIP+dGw6
6bRYVXo9Kj945IUA7F4o8RxriXSK/KPDXtzWS1zf6e4JgvZim1yQxFGpLCjJkm8v
LSajdH1eFo3hOH8+vulJgRUxP/m5tMU6Jfyh0mMLoQNoM0mzSqjX/bHJsNRnjPr7
2T4Z7USgOHY7EErUKZwaWoAhEvnhP2BV0TBHNDP4KXgos+4MeC++Gup+fkp7qmYt
bXy7M6o7jKaOYIDj
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org