Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/6HLX-SE92kmW_mWW8IOqMB-A8J8.roa
File:                     6HLX-SE92kmW_mWW8IOqMB-A8J8.roa (raw, json)
Hash identifier:          POoRsMD6eAwlKoD68NX/RRVDeaaH9Z7h7Ms28b/+TK8=
Subject key identifier:   E8:72:D7:F9:21:3D:DA:49:96:FE:65:96:F0:83:AA:30:1F:80:F0:9F
Certificate issuer:       /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Certificate serial:       2A
Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/6HLX-SE92kmW_mWW8IOqMB-A8J8.roa
Signing time:             Wed 11 May 2022 01:48:25 +0000
ROA not before:           Wed 11 May 2022 01:48:25 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     18260
IP address blocks:        219.109.48.0/20 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
        Validity
            Not Before: May 11 01:48:25 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=E872D7F9213DDA4996FE6596F083AA301F80F09F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fe:0d:9d:81:1a:48:7e:3c:fe:dd:d4:ff:3a:
                    53:6d:90:70:14:b4:14:c5:bb:2e:a1:5c:73:76:81:
                    23:5b:24:e3:15:49:90:2e:4c:60:7a:48:45:d8:1e:
                    b5:9e:26:81:40:3f:d5:77:81:2e:cf:6a:52:cd:fc:
                    d4:8f:b8:23:b3:e3:8f:20:9f:26:92:9c:46:36:78:
                    98:fa:40:13:00:ab:20:dc:73:bd:ae:c3:88:26:f4:
                    83:2d:78:b8:be:5d:1d:72:d7:cc:ae:a5:9e:41:c8:
                    57:8c:e9:d4:bf:83:3d:fc:2e:43:16:fb:eb:32:88:
                    13:8a:bf:40:13:44:4f:ce:0d:b5:c6:df:ae:aa:9c:
                    6f:84:4c:1e:6d:f6:e6:19:90:f6:bd:97:f3:01:b1:
                    51:32:ea:9d:c7:8e:52:d8:aa:7b:44:24:07:9a:f4:
                    10:8b:9e:36:d2:93:9a:6e:48:14:0c:a6:83:e3:3d:
                    d6:08:a9:05:21:51:42:10:9e:23:d7:2b:4c:8b:bb:
                    2e:d6:48:0e:c9:24:66:00:1f:7d:59:09:dc:97:aa:
                    3a:1e:08:d4:ee:3e:b5:d0:e6:20:ec:e4:38:1c:93:
                    f6:58:b1:12:4e:60:cf:12:88:23:62:71:a2:35:da:
                    2e:5f:37:3a:53:b2:4b:0c:6f:fd:37:b2:e8:95:99:
                    47:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:72:D7:F9:21:3D:DA:49:96:FE:65:96:F0:83:AA:30:1F:80:F0:9F
            X509v3 Authority Key Identifier:
                keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/6HLX-SE92kmW_mWW8IOqMB-A8J8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.109.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         71:91:fe:db:d7:24:b2:23:a2:81:01:77:bb:82:10:b5:e5:c0:
         be:ef:fe:8e:95:91:b7:ab:fd:23:3a:af:65:41:ae:cc:6a:b2:
         70:44:bf:97:e9:19:ec:dc:80:70:1c:a2:55:2e:61:05:6f:c9:
         52:d9:7e:e0:f4:64:5c:93:38:d9:c1:9d:92:b4:60:84:e9:7f:
         9a:c5:33:47:a4:34:13:77:c4:79:6c:96:f4:d4:6e:17:02:0b:
         71:2c:de:b7:57:40:c6:f3:20:57:7a:96:11:5e:3b:a7:ea:66:
         ff:27:14:ca:2b:38:6a:85:b2:43:1d:07:75:b1:f1:2b:2d:51:
         fd:f8:31:ca:ea:e3:c0:5d:63:ad:5f:34:5a:fc:eb:a1:28:14:
         40:8b:52:76:84:f2:58:7c:10:db:38:53:02:0e:8a:79:d6:bb:
         0d:4d:fe:ba:a6:b4:91:14:9d:38:2b:ae:77:1a:51:38:01:a4:
         a9:93:3a:57:ae:25:84:9a:65:9b:e2:22:71:13:37:07:1e:73:
         dd:18:3c:3d:52:35:ce:08:24:1e:e6:f2:75:be:cf:61:13:c9:
         fc:98:bd:30:ea:b1:be:0d:e9:29:d6:4a:4c:57:0c:54:fd:31:
         11:7d:65:72:07:c6:81:dd:57:7f:41:00:29:d4:e1:cc:46:e0:
         a8:7a:bf:d3
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBKjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5MUFD
QTQ0Mjc1RUMwNTcyQkM2OTIxNTAyQjI0MUMxNEQ0NEE5QUExMB4XDTIyMDUxMTAx
NDgyNVoXDTIzMDQyNzA5NTIzNFowMzExMC8GA1UEAxMoRTg3MkQ3RjkyMTNEREE0
OTk2RkU2NTk2RjA4M0FBMzAxRjgwRjA5RjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL/+DZ2BGkh+PP7d1P86U22QcBS0FMW7LqFcc3aBI1sk4xVJkC5M
YHpIRdgetZ4mgUA/1XeBLs9qUs381I+4I7PjjyCfJpKcRjZ4mPpAEwCrINxzva7D
iCb0gy14uL5dHXLXzK6lnkHIV4zp1L+DPfwuQxb76zKIE4q/QBNET84Ntcbfrqqc
b4RMHm325hmQ9r2X8wGxUTLqnceOUtiqe0QkB5r0EIueNtKTmm5IFAymg+M91gip
BSFRQhCeI9crTIu7LtZIDskkZgAffVkJ3JeqOh4I1O4+tdDmIOzkOByT9lixEk5g
zxKII2JxojXaLl83OlOySwxv/Tey6JWZR/0CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBToctf5IT3aSZb+ZZbwg6owH4DwnzAfBgNVHSMEGDAWgBSRrKRCdewFcrxpIVAr
JBwU1EqaoTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNzMxL2theWtRblhzQlhLOGFTRlFLeVFjRk5SS21xRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2theWtRblhzQlhLOGFTRlFLeVFjRk5S
S21xRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC83MzEvNkhMWC1TRTkya21XX21XVzhJT3FNQi1BOEo4LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBNttMDANBgkqhkiG9w0BAQsFAAOCAQEAcZH+29cksiOigQF3u4IQteXAvu/+
jpWRt6v9IzqvZUGuzGqycES/l+kZ7NyAcByiVS5hBW/JUtl+4PRkXJM42cGdkrRg
hOl/msUzR6Q0E3fEeWyW9NRuFwILcSzet1dAxvMgV3qWEV47p+pm/ycUyis4aoWy
Qx0HdbHxKy1R/fgxyurjwF1jrV80WvzroSgUQItSdoTyWHwQ2zhTAg6Keda7DU3+
uqa0kRSdOCuudxpROAGkqZM6V64lhJplm+IicRM3Bx5z3Rg8PVI1zggkHubydb7P
YRPJ/Ji9MOqxvg3pKdZKTFcMVP0xEX1lcgfGgd1Xf0EAKdThzEbgqHq/0w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org