Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/UNfpRGR8UvMUmGUz59dYZIB_MLc.roa
File:                     UNfpRGR8UvMUmGUz59dYZIB_MLc.roa (raw, json)
Hash identifier:          k5qRt5hkDg482Wat1vLBltPHRcYr5h8Kb4GPlAfWR4Q=
Subject key identifier:   50:D7:E9:44:64:7C:52:F3:14:98:65:33:E7:D7:58:64:80:7F:30:B7
Certificate issuer:       /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial:       24
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/UNfpRGR8UvMUmGUz59dYZIB_MLc.roa
Signing time:             Wed 20 Apr 2022 09:12:24 +0000
ROA not before:           Wed 20 Apr 2022 09:12:24 +0000
ROA not after:            Sat 15 Apr 2023 01:30:02 +0000
asID:                     4725
IP address blocks:        210.175.64.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
        Validity
            Not Before: Apr 20 09:12:24 2022 GMT
            Not After : Apr 15 01:30:02 2023 GMT
        Subject: CN=50D7E944647C52F314986533E7D75864807F30B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7a:58:f0:4d:95:a6:9e:b9:7e:cd:6b:67:0f:
                    32:ba:62:f8:6e:15:cd:b5:54:48:41:8a:0d:7c:e7:
                    0e:f2:40:02:6e:ff:36:96:b1:35:16:67:be:7c:7b:
                    28:11:33:90:02:65:6a:30:69:08:48:10:f5:9a:30:
                    9b:91:c4:a0:a0:8d:32:93:e8:17:f5:b0:64:2d:f5:
                    04:68:9e:81:f1:7c:eb:09:03:bb:a1:3a:58:2b:87:
                    e4:0b:be:27:24:db:c4:58:9f:9a:2f:02:e3:aa:2a:
                    18:52:fa:33:a8:4f:5d:bf:2d:02:8e:d8:76:1c:af:
                    e1:1d:ee:22:77:3c:c8:aa:ac:32:37:f9:48:31:9d:
                    e7:10:56:ed:b1:a6:a3:37:0d:8b:33:d4:5f:3b:43:
                    b8:cc:49:8d:38:92:bd:ee:6d:27:b3:b0:66:c3:54:
                    97:dd:f8:8e:ee:1a:13:9e:cc:e2:8c:22:50:42:9f:
                    86:6b:80:19:76:45:33:17:60:ee:b1:0a:ee:ef:b3:
                    f1:f5:ea:2e:63:fe:2d:28:c6:11:e1:b8:4a:b7:43:
                    0c:04:27:1c:2e:7e:db:a4:1e:ae:4f:87:0e:d5:af:
                    28:7b:31:15:48:a3:93:25:06:82:aa:f2:c8:36:76:
                    35:8f:23:75:d8:a5:c9:35:b2:34:ad:1e:ec:8d:e5:
                    3b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D7:E9:44:64:7C:52:F3:14:98:65:33:E7:D7:58:64:80:7F:30:B7
            X509v3 Authority Key Identifier:
                keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/UNfpRGR8UvMUmGUz59dYZIB_MLc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.175.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0a:f5:70:a5:f9:25:0e:5e:48:a8:11:cf:f3:b1:e3:06:23:24:
         ee:d0:48:fa:58:b0:6a:f0:0a:20:0a:34:d2:8a:fa:9e:f9:07:
         a8:f4:7d:1d:03:b8:5c:1d:ec:d9:99:c0:e4:41:60:0a:90:52:
         1f:bf:65:a5:97:fd:46:bf:64:64:d8:88:39:5a:5a:d1:13:d2:
         0c:73:96:79:c8:2f:88:81:84:4e:f7:60:84:93:4f:5e:2d:a4:
         10:13:58:cb:3e:31:35:db:56:82:f8:3d:e3:cd:a1:46:63:07:
         94:b9:2b:b0:a8:d6:aa:7b:3f:9c:20:fa:2f:36:13:13:03:c4:
         da:35:d1:d8:56:d5:77:dd:01:c5:be:3b:6e:29:c4:e8:c6:64:
         60:4a:6c:33:7e:3b:cf:ca:58:95:7b:69:43:11:ff:0e:ea:81:
         bc:d6:12:97:09:f3:f0:12:a2:23:de:b8:5c:b5:8c:c6:29:db:
         a2:7b:b3:f3:b0:b8:e6:0a:0e:31:98:cd:4e:fb:5f:67:99:4f:
         af:a2:63:20:54:ee:4d:97:20:48:6d:24:04:eb:68:43:b0:b3:
         19:33:27:fb:da:9a:7f:1e:f7:2d:5b:e7:7b:0a:94:81:c9:70:
         82:c3:1b:c3:3e:cb:98:9c:1f:c5:fe:22:43:03:38:c6:fc:ec:
         32:05:d5:6f
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBJDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxMTY2
MDBBRDk3QzNCMThDNUJGNzEzRUM4MDBBRUVBNjkyQUM0Q0MxMB4XDTIyMDQyMDA5
MTIyNFoXDTIzMDQxNTAxMzAwMlowMzExMC8GA1UEAxMoNTBEN0U5NDQ2NDdDNTJG
MzE0OTg2NTMzRTdENzU4NjQ4MDdGMzBCNzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALl6WPBNlaaeuX7Na2cPMrpi+G4VzbVUSEGKDXznDvJAAm7/Npax
NRZnvnx7KBEzkAJlajBpCEgQ9Zowm5HEoKCNMpPoF/WwZC31BGiegfF86wkDu6E6
WCuH5Au+JyTbxFifmi8C46oqGFL6M6hPXb8tAo7Ydhyv4R3uInc8yKqsMjf5SDGd
5xBW7bGmozcNizPUXztDuMxJjTiSve5tJ7OwZsNUl934ju4aE57M4owiUEKfhmuA
GXZFMxdg7rEK7u+z8fXqLmP+LSjGEeG4SrdDDAQnHC5+26Qerk+HDtWvKHsxFUij
kyUGgqryyDZ2NY8jddilyTWyNK0e7I3lO/8CAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBRQ1+lEZHxS8xSYZTPn11hkgH8wtzAfBgNVHSMEGDAWgBQRZgCtl8OxjFv3E+yA
Cu6mkqxMwTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTMxL0VXWUFyWmZEc1l4Yjl4UHNnQXJ1cHBLc1RNRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0VXWUFyWmZEc1l4Yjl4UHNnQXJ1cHBL
c1RNRS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC85MzEvVU5mcFJHUjhVdk1VbUdVejU5ZFlaSUJfTUxjLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBtKvQDANBgkqhkiG9w0BAQsFAAOCAQEA
CvVwpfklDl5IqBHP87HjBiMk7tBI+liwavAKIAo00or6nvkHqPR9HQO4XB3s2ZnA
5EFgCpBSH79lpZf9Rr9kZNiIOVpa0RPSDHOWecgviIGETvdghJNPXi2kEBNYyz4x
NdtWgvg9482hRmMHlLkrsKjWqns/nCD6LzYTEwPE2jXR2FbVd90Bxb47binE6MZk
YEpsM347z8pYlXtpQxH/DuqBvNYSlwnz8BKiI964XLWMxinbonuz87C45goOMZjN
TvtfZ5lPr6JjIFTuTZcgSG0kBOtoQ7CzGTMn+9qafx73LVvnewqUgclwgsMbwz7L
mJwfxf4iQwM4xvzsMgXVbw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org