Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/lVMWD5pd0ybU9fa2Sq0bSRdDBZk.roa
File:                     lVMWD5pd0ybU9fa2Sq0bSRdDBZk.roa (raw, json)
Hash identifier:          6y/O3AWPcbIZynBAzeoEKwSviYAU9lxnR5pYl8Dphw8=
Subject key identifier:   95:53:16:0F:9A:5D:D3:26:D4:F5:F6:B6:4A:AD:1B:49:17:43:05:99
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       67
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/lVMWD5pd0ybU9fa2Sq0bSRdDBZk.roa
Signing time:             Mon 01 Nov 2021 01:28:35 +0000
ROA not before:           Mon 01 Nov 2021 01:28:35 +0000
ROA not after:            Sat 15 Oct 2022 01:30:02 +0000
asID:                     2497
IP address blocks:        220.100.192.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Nov  1 01:28:35 2021 GMT
            Not After : Oct 15 01:30:02 2022 GMT
        Subject: CN=9553160F9A5DD326D4F5F6B64AAD1B4917430599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1c:38:4c:43:42:2f:05:28:4c:50:f4:f3:e5:
                    6e:c6:60:a4:82:88:09:40:04:29:c4:37:0e:72:71:
                    79:f1:dc:42:c3:9f:5a:9f:ee:0e:59:35:54:63:8e:
                    9f:60:4d:a8:fd:fc:2b:18:d1:d3:c2:d8:9c:73:b0:
                    ee:e7:87:e9:75:11:9d:d8:7f:4f:5c:3c:a4:b0:05:
                    02:e8:90:5f:2c:fb:a2:81:83:66:3d:79:b9:bf:fe:
                    a3:f4:58:63:72:95:7e:3f:26:8d:c0:b7:d0:a9:50:
                    38:a3:a4:5e:96:c9:97:81:39:9e:ff:ef:e7:77:ef:
                    82:b1:b4:f8:ac:f0:6e:fd:2a:3d:59:35:17:83:66:
                    7f:b0:86:a2:57:0b:03:3b:4c:1d:96:5d:0b:00:75:
                    ba:dc:9a:0d:55:ad:bf:13:06:34:ea:91:9c:c0:d0:
                    e6:5d:d7:21:b6:fb:a1:77:9b:70:46:92:d3:d2:b9:
                    64:46:61:65:1a:e9:df:41:9b:51:5e:cd:f3:ce:bf:
                    d9:a5:16:cf:1b:d3:ec:5b:51:f4:16:ac:00:35:b4:
                    89:ee:92:ab:65:6e:98:c5:22:99:00:32:5a:38:9b:
                    e0:9c:49:c1:ed:7b:27:8c:2c:30:38:bf:25:e5:8e:
                    c2:4c:66:e7:7a:c0:1c:1d:77:6b:8a:eb:ee:2a:39:
                    24:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:53:16:0F:9A:5D:D3:26:D4:F5:F6:B6:4A:AD:1B:49:17:43:05:99
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/lVMWD5pd0ybU9fa2Sq0bSRdDBZk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.100.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         46:03:0e:7d:df:87:86:b5:34:ad:b1:d1:25:f6:8f:d0:2b:e1:
         4e:fb:e8:36:3c:2f:3e:54:cc:3f:5d:c8:9f:7b:d4:ab:83:b3:
         ea:e6:31:49:21:25:37:b1:4c:b5:21:5c:4d:e7:b9:70:07:b0:
         a2:4f:07:ff:fc:89:bb:9e:c3:a4:29:e1:a1:b9:a8:7c:97:1a:
         2b:2b:ca:6d:c6:64:fe:b8:62:1a:7e:78:9e:28:5d:02:67:98:
         9b:af:a5:55:99:09:dd:03:35:d2:d8:d8:99:54:99:c7:24:97:
         a7:7e:1f:ea:d2:af:6c:c5:42:14:bd:37:c3:db:97:70:ea:b3:
         13:69:b1:08:84:8e:91:2e:47:ba:27:16:e1:46:a4:44:04:f8:
         0c:91:01:04:5a:48:79:ef:41:bf:e3:e8:fb:2d:2a:21:86:a1:
         22:58:17:07:ca:d8:83:e1:a7:81:49:e3:b3:c5:1f:91:08:b0:
         ff:e6:c2:01:9c:be:ac:4a:d1:f8:51:fd:d3:f4:c7:09:54:ef:
         db:c3:bb:ba:9f:44:23:c0:8f:54:93:6b:ce:91:d4:b8:53:97:
         f7:2e:25:5e:e1:dd:a5:20:ba:0a:4d:17:bb:a5:91:f8:b6:1b:
         26:19:aa:7b:69:81:a0:31:6d:fc:f8:58:8c:69:8f:c4:08:d5:
         2b:92:99:40
-----BEGIN CERTIFICATE-----
MIIEuDCCA6CgAwIBAgIBZzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyOTgz
Q0ZENUY4Q0FGQTAwNjhEMkVCQTI1RUQwRjcwMTI0NEIxMkY5MB4XDTIxMTEwMTAx
MjgzNVoXDTIyMTAxNTAxMzAwMlowMzExMC8GA1UEAxMoOTU1MzE2MEY5QTVERDMy
NkQ0RjVGNkI2NEFBRDFCNDkxNzQzMDU5OTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKgcOExDQi8FKExQ9PPlbsZgpIKICUAEKcQ3DnJxefHcQsOfWp/u
Dlk1VGOOn2BNqP38KxjR08LYnHOw7ueH6XURndh/T1w8pLAFAuiQXyz7ooGDZj15
ub/+o/RYY3KVfj8mjcC30KlQOKOkXpbJl4E5nv/v53fvgrG0+Kzwbv0qPVk1F4Nm
f7CGolcLAztMHZZdCwB1utyaDVWtvxMGNOqRnMDQ5l3XIbb7oXebcEaS09K5ZEZh
ZRrp30GbUV7N886/2aUWzxvT7FtR9BasADW0ie6Sq2VumMUimQAyWjib4JxJwe17
J4wsMDi/JeWOwkxm53rAHB13a4rr7io5JNkCAwEAAaOCAdUwggHRMB0GA1UdDgQW
BBSVUxYPml3TJtT19rZKrRtJF0MFmTAfBgNVHSMEGDAWgBQpg8/V+Mr6AGjS66Je
0PcBJEsS+TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGQGA1UdHwRdMFswWaBX
oFWGU3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNi9LWVBQMWZqSy1nQm8wdXVpWHREM0FTUkxFdmsuY3JsMG0GCCsGAQUF
BwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmlj
LmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9LWVBQMWZqSy1nQm8wdXVpWHREM0FTUkxF
dmsuY2VyMA4GA1UdDwEB/wQEAwIHgDBvBggrBgEFBQcBCwRjMGEwXwYIKwYBBQUH
MAuGU3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNi9sVk1XRDVwZDB5YlU5ZmEyU3EwYlNSZERCWmsucm9hMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQG3GTAMA0GCSqGSIb3DQEBCwUAA4IBAQBGAw59
34eGtTStsdEl9o/QK+FO++g2PC8+VMw/Xcife9Srg7Pq5jFJISU3sUy1IVxN57lw
B7CiTwf//Im7nsOkKeGhuah8lxorK8ptxmT+uGIafnieKF0CZ5ibr6VVmQndAzXS
2NiZVJnHJJenfh/q0q9sxUIUvTfD25dw6rMTabEIhI6RLke6JxbhRqREBPgMkQEE
Wkh570G/4+j7LSohhqEiWBcHytiD4aeBSeOzxR+RCLD/5sIBnL6sStH4Uf3T9McJ
VO/bw7u6n0QjwI9Uk2vOkdS4U5f3LiVe4d2lILoKTRe7pZH4thsmGap7aYGgMW38
+FiMaY/ECNUrkplA
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org