Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/602/SGzOKSsYh9c5qWd2eEHQcy4dHa4.roa
File:                     SGzOKSsYh9c5qWd2eEHQcy4dHa4.roa (raw, json)
Hash identifier:          w3lc0o8fHFPrGPmV0qvNxn0asCOvUUb6YFjplPrqIgk=
Subject key identifier:   48:6C:CE:29:2B:18:87:D7:39:A9:67:76:78:41:D0:73:2E:1D:1D:AE
Certificate issuer:       /CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Certificate serial:       1B
Authority key identifier: 4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/SGzOKSsYh9c5qWd2eEHQcy4dHa4.roa
Signing time:             Wed 18 Aug 2021 07:54:17 +0000
ROA not before:           Wed 18 Aug 2021 07:54:17 +0000
ROA not after:            Mon 15 Aug 2022 01:30:03 +0000
asID:                     17675
IP address blocks:        218.40.144.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
        Validity
            Not Before: Aug 18 07:54:17 2021 GMT
            Not After : Aug 15 01:30:03 2022 GMT
        Subject: CN=486CCE292B1887D739A967767841D0732E1D1DAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:fa:6d:ff:e4:ac:cb:1c:2a:2f:69:d1:7f:5a:
                    62:ad:6d:ba:fd:0f:a6:30:0f:8e:fe:01:3a:3d:9b:
                    96:2b:db:9f:2d:24:e6:69:bc:92:7d:c0:cf:5c:18:
                    6b:4e:c2:ee:30:af:78:89:26:02:3d:d8:25:9c:67:
                    7a:21:e8:c4:d6:0f:75:48:80:fe:16:7c:97:bc:b5:
                    20:84:f1:b2:aa:a3:e9:f8:11:2d:66:f2:12:c5:8a:
                    03:4f:e4:02:24:7f:78:bd:9d:3d:43:e4:d4:b4:92:
                    f0:f1:a7:6d:5b:95:58:65:ae:68:f5:27:16:28:b3:
                    02:db:15:1b:99:ab:39:83:ef:20:35:cb:1d:a7:21:
                    74:28:3b:7e:79:72:bb:b8:77:de:17:53:78:3d:5c:
                    33:64:e5:8a:cc:f5:1c:40:00:50:9f:75:5e:71:14:
                    e0:09:5d:c0:cf:1b:5b:c5:ad:dd:77:fb:b3:64:6d:
                    c7:57:c1:70:0b:ce:df:ee:58:b2:bb:04:bd:86:d6:
                    76:5a:18:4c:3e:78:84:85:c9:0b:91:96:31:05:10:
                    be:f5:b7:03:9a:f6:52:21:c9:43:2f:9e:66:c2:f6:
                    d7:b1:6e:0a:4b:0e:96:7d:5f:5a:38:41:47:6d:d4:
                    3a:90:90:e7:1d:01:e8:e8:8b:41:d4:2a:46:7f:fb:
                    6f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:6C:CE:29:2B:18:87:D7:39:A9:67:76:78:41:D0:73:2E:1D:1D:AE
            X509v3 Authority Key Identifier:
                keyid:4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/SGzOKSsYh9c5qWd2eEHQcy4dHa4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.40.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         86:77:79:60:f0:61:e8:80:3f:87:d1:d4:65:63:70:4e:5e:5e:
         4e:70:8d:84:28:80:9b:b8:84:00:52:c6:6d:6f:e7:70:27:82:
         13:c0:cf:de:3c:18:97:6f:be:c2:22:d2:e6:ee:93:02:a6:05:
         6d:78:f9:e6:75:06:43:d4:dc:29:9a:f6:18:e2:52:44:99:6d:
         c3:db:a9:ad:0f:57:fb:e7:29:66:e1:59:2b:ad:7b:b6:1a:35:
         ac:d9:d1:5f:a5:e5:14:8b:76:78:b6:30:f3:c5:f7:3b:c8:2a:
         47:21:c8:5c:0e:fb:53:9f:43:1c:52:dd:34:82:9c:44:1a:9e:
         27:35:38:67:6d:09:3b:29:d6:d5:f3:65:11:84:f8:6e:4d:47:
         35:fc:4a:e4:25:91:45:73:6b:fc:b7:c6:d1:dc:2c:22:d1:82:
         ae:eb:91:d8:b7:25:03:7f:33:4e:8d:ea:df:4e:c4:b8:f1:13:
         54:b6:2c:77:38:fc:82:fc:a3:18:14:db:41:5f:23:10:87:2d:
         ef:8a:1f:f3:58:d9:67:c3:2d:d1:0c:a0:0c:78:df:a7:19:2a:
         da:17:49:8f:45:db:d1:0c:6b:41:cb:3b:bf:b9:9d:7c:95:e0:
         bb:b2:e8:ab:ff:dc:f9:b6:f6:14:76:25:00:a2:76:11:09:f6:
         e0:67:c4:26
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBGzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0RUZG
MUFCNkVBREEyNzNCQTA2NkRCMEY3N0I3OUQ2QTBEOTAxNTQyMB4XDTIxMDgxODA3
NTQxN1oXDTIyMDgxNTAxMzAwM1owMzExMC8GA1UEAxMoNDg2Q0NFMjkyQjE4ODdE
NzM5QTk2Nzc2Nzg0MUQwNzMyRTFEMURBRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAO76bf/krMscKi9p0X9aYq1tuv0PpjAPjv4BOj2blivbny0k5mm8
kn3Az1wYa07C7jCveIkmAj3YJZxneiHoxNYPdUiA/hZ8l7y1IITxsqqj6fgRLWby
EsWKA0/kAiR/eL2dPUPk1LSS8PGnbVuVWGWuaPUnFiizAtsVG5mrOYPvIDXLHach
dCg7fnlyu7h33hdTeD1cM2Tlisz1HEAAUJ91XnEU4AldwM8bW8Wt3Xf7s2Rtx1fB
cAvO3+5YsrsEvYbWdloYTD54hIXJC5GWMQUQvvW3A5r2UiHJQy+eZsL217FuCksO
ln1fWjhBR23UOpCQ5x0B6OiLQdQqRn/7b1sCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBRIbM4pKxiH1zmpZ3Z4QdBzLh0drjAfBgNVHSMEGDAWgBRO/xq26tonO6Bm2w93
t51qDZAVQjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjAyL1R2OGF0dXJhSnp1Z1p0c1BkN2VkYWcyUUZVSS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1R2OGF0dXJhSnp1Z1p0c1BkN2VkYWcy
UUZVSS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC82MDIvU0d6T0tTc1loOWM1cVdkMmVFSFFjeTRkSGE0LnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBNookDANBgkqhkiG9w0BAQsFAAOCAQEA
hnd5YPBh6IA/h9HUZWNwTl5eTnCNhCiAm7iEAFLGbW/ncCeCE8DP3jwYl2++wiLS
5u6TAqYFbXj55nUGQ9TcKZr2GOJSRJltw9uprQ9X++cpZuFZK617tho1rNnRX6Xl
FIt2eLYw88X3O8gqRyHIXA77U59DHFLdNIKcRBqeJzU4Z20JOynW1fNlEYT4bk1H
NfxK5CWRRXNr/LfG0dwsItGCruuR2LclA38zTo3q307EuPETVLYsdzj8gvyjGBTb
QV8jEIct74of81jZZ8Mt0QygDHjfpxkq2hdJj0Xb0QxrQcs7v7mdfJXgu7Loq//c
+bb2FHYlAKJ2EQn24GfEJg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org