Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9/Xx6nothCqfzKS0wYyiikuEbE1wU.roa
File:                     Xx6nothCqfzKS0wYyiikuEbE1wU.roa (raw, json)
Hash identifier:          gRWMPB/bj2VFFNHepqaVrPt5McfB9fUAnAitjJb33aQ=
Subject key identifier:   5F:1E:A7:A2:D8:42:A9:FC:CA:4B:4C:18:CA:28:A4:B8:46:C4:D7:05
Certificate issuer:       /CN=16851F56697ED9D56929BD0242D43B0278FC16E0
Certificate serial:       3E
Authority key identifier: 16:85:1F:56:69:7E:D9:D5:69:29:BD:02:42:D4:3B:02:78:FC:16:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/Xx6nothCqfzKS0wYyiikuEbE1wU.roa
Signing time:             Sat 20 May 2023 08:41:09 +0000
ROA not before:           Sat 20 May 2023 08:41:09 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     2500
IP address blocks:        203.178.128.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16851F56697ED9D56929BD0242D43B0278FC16E0
        Validity
            Not Before: May 20 08:41:09 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=5F1EA7A2D842A9FCCA4B4C18CA28A4B846C4D705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:92:c2:ac:8e:af:4b:57:52:20:b2:cd:c8:5f:
                    4b:20:82:01:ec:38:94:3a:f1:eb:dd:55:f6:33:23:
                    e1:ee:4f:6d:fb:8d:cc:bd:6d:ce:8f:1e:88:26:ce:
                    d8:f7:47:72:c7:3e:17:d3:92:5a:db:15:5e:9f:b7:
                    47:72:f0:97:ad:fa:85:f7:c4:60:6f:e4:db:0f:77:
                    c9:90:1c:3d:f3:61:54:a3:7f:fc:3b:4c:9d:8a:a9:
                    99:2a:ce:74:e3:c9:92:ca:19:bb:91:88:a2:79:f4:
                    3b:2a:e2:0a:70:31:57:8a:ac:ea:3d:a0:30:6d:87:
                    7c:16:72:dd:d9:8a:c0:d5:64:8f:14:37:7d:6d:ab:
                    6a:05:cb:ee:ad:33:3d:59:33:fc:75:88:0f:23:f5:
                    30:e7:55:00:61:5f:29:ac:dd:a7:18:08:b9:b9:47:
                    58:7b:4d:c8:80:72:ec:90:38:8c:1e:e0:38:a6:06:
                    07:5b:96:d1:28:9f:b0:5f:8c:b0:62:5a:64:f6:11:
                    3d:0f:f1:24:cc:2f:cb:e3:fd:23:f8:94:13:bf:de:
                    63:67:45:ff:88:4f:c3:d7:dd:6d:b0:6a:25:06:48:
                    78:b5:bd:57:61:2c:19:d2:29:bd:36:76:ca:a5:76:
                    64:f6:86:ae:e2:56:5d:ee:99:2c:ac:9c:2a:68:9e:
                    a3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:1E:A7:A2:D8:42:A9:FC:CA:4B:4C:18:CA:28:A4:B8:46:C4:D7:05
            X509v3 Authority Key Identifier:
                keyid:16:85:1F:56:69:7E:D9:D5:69:29:BD:02:42:D4:3B:02:78:FC:16:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/Xx6nothCqfzKS0wYyiikuEbE1wU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.178.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         4e:43:65:8a:bb:8d:f6:73:bc:bd:73:7d:4d:30:30:85:79:ae:
         2d:f2:d7:b8:14:7a:2b:90:93:81:0f:b0:78:6b:0a:0f:8e:81:
         3e:74:28:97:72:bc:30:e3:45:fc:b8:af:9b:db:92:1e:49:3c:
         80:cf:53:12:84:9c:e2:f1:6f:46:d0:e4:52:57:23:53:f3:a4:
         8b:d4:7d:ec:8a:40:f9:f6:ce:d0:85:3b:72:8e:b0:24:47:aa:
         2c:99:73:8d:8f:e6:0c:f3:50:ca:bc:c7:ee:5f:52:33:85:35:
         5c:bf:bc:34:12:7f:ba:1e:72:7e:31:03:60:e9:54:39:b3:87:
         d1:dc:10:12:d0:e8:32:1d:e6:2d:79:73:5e:61:c0:10:df:9f:
         dd:b7:6d:50:0c:1b:90:a0:43:74:23:88:44:c4:cc:e6:a6:05:
         b0:26:2d:b6:28:86:c9:cb:3e:11:65:97:71:ef:3f:39:23:27:
         ab:63:03:41:bd:a2:10:fc:f1:16:9a:a0:2b:3d:72:7d:d0:93:
         d0:be:a6:42:18:f0:2a:30:b6:f7:87:0d:03:14:e8:85:ff:27:
         1b:b9:0c:26:a9:78:b0:b2:14:82:96:0c:9c:3f:54:60:1e:d0:
         70:38:05:a9:1c:af:ae:b9:ca:04:dc:49:d8:57:b3:0e:aa:2b:
         73:cf:72:c0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIBPjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNjg1
MUY1NjY5N0VEOUQ1NjkyOUJEMDI0MkQ0M0IwMjc4RkMxNkUwMB4XDTIzMDUyMDA4
NDEwOVoXDTI0MDUxNDAxMzAwMlowMzExMC8GA1UEAxMoNUYxRUE3QTJEODQyQTlG
Q0NBNEI0QzE4Q0EyOEE0Qjg0NkM0RDcwNTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKSSwqyOr0tXUiCyzchfSyCCAew4lDrx691V9jMj4e5PbfuNzL1t
zo8eiCbO2PdHcsc+F9OSWtsVXp+3R3Lwl636hffEYG/k2w93yZAcPfNhVKN//DtM
nYqpmSrOdOPJksoZu5GIonn0OyriCnAxV4qs6j2gMG2HfBZy3dmKwNVkjxQ3fW2r
agXL7q0zPVkz/HWIDyP1MOdVAGFfKazdpxgIublHWHtNyIBy7JA4jB7gOKYGB1uW
0SifsF+MsGJaZPYRPQ/xJMwvy+P9I/iUE7/eY2dF/4hPw9fdbbBqJQZIeLW9V2Es
GdIpvTZ2yqV2ZPaGruJWXe6ZLKycKmieozMCAwEAAaOCAiAwggIcMB0GA1UdDgQW
BBRfHqei2EKp/MpLTBjKKKS4RsTXBTAfBgNVHSMEGDAWgBQWhR9WaX7Z1WkpvQJC
1DsCePwW4DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGQGA1UdHwRdMFswWaBX
oFWGU3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOS9Gb1VmVm1sLTJkVnBLYjBDUXRRN0FuajhGdUEuY3JsMG0GCCsGAQUF
BwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmlj
LmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9Gb1VmVm1sLTJkVnBLYjBDUXRRN0FuajhG
dUEuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuQYIKwYBBQUHAQsEgawwgakwXwYIKwYB
BQUHMAuGU3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvOS9YeDZub3RoQ3FmektTMHdZeWlpa3VFYkUxd1Uucm9hMEYGCCsG
AQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9h
cC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH
y7KAMA0GCSqGSIb3DQEBCwUAA4IBAQBOQ2WKu432c7y9c31NMDCFea4t8te4FHor
kJOBD7B4awoPjoE+dCiXcrww40X8uK+b25IeSTyAz1MShJzi8W9G0ORSVyNT86SL
1H3sikD59s7QhTtyjrAkR6osmXONj+YM81DKvMfuX1IzhTVcv7w0En+6HnJ+MQNg
6VQ5s4fR3BAS0OgyHeYteXNeYcAQ35/dt21QDBuQoEN0I4hExMzmpgWwJi22KIbJ
yz4RZZdx7z85IyerYwNBvaIQ/PEWmqArPXJ90JPQvqZCGPAqMLb3hw0DFOiF/ycb
uQwmqXiwshSClgycP1RgHtBwOAWpHK+uucoE3EnYV7MOqitzz3LA
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org