Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/uC5WODVWDGzg3nrFRNfNTaQZANY.roa
File:                     uC5WODVWDGzg3nrFRNfNTaQZANY.roa (raw, json)
Hash identifier:          hwM9ud0jBxC5ZCFjFS83EzGnfP7ql78tQlefFjiefx4=
Subject key identifier:   B8:2E:56:38:35:56:0C:6C:E0:DE:7A:C5:44:D7:CD:4D:A4:19:00:D6
Certificate issuer:       /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial:       40
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/uC5WODVWDGzg3nrFRNfNTaQZANY.roa
Signing time:             Wed 20 Apr 2022 09:37:38 +0000
ROA not before:           Wed 20 Apr 2022 09:37:38 +0000
ROA not after:            Sat 15 Apr 2023 01:30:02 +0000
asID:                     4725
IP address blocks:        202.33.182.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
        Validity
            Not Before: Apr 20 09:37:38 2022 GMT
            Not After : Apr 15 01:30:02 2023 GMT
        Subject: CN=B82E563835560C6CE0DE7AC544D7CD4DA41900D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:62:76:1f:97:0b:d0:8e:de:68:b8:ec:0e:77:
                    fb:26:4e:6b:5d:17:88:29:18:94:44:18:f7:e7:80:
                    23:02:eb:4b:b9:3d:ab:46:e8:de:69:bc:e8:83:bc:
                    ba:f8:92:02:a2:df:1f:5b:0a:e5:fc:32:ac:cd:b5:
                    d1:e7:f0:c5:e7:41:f9:ad:50:32:37:01:61:c2:84:
                    6e:b8:9b:30:70:a1:2c:30:22:44:b7:04:45:94:0b:
                    e4:6b:60:f0:5c:46:29:3b:4c:8c:ea:2c:04:43:6c:
                    0e:21:77:ba:90:c0:ef:6f:94:f7:65:d7:04:e8:17:
                    5c:96:86:20:59:72:76:82:15:52:9e:d8:42:eb:3d:
                    bc:68:73:e3:be:e8:05:88:83:29:04:b1:b8:32:93:
                    a9:27:f9:f7:cd:ef:38:08:f6:2f:71:99:d1:33:e9:
                    4c:cf:ab:77:0e:ed:44:2d:79:b1:e5:6d:06:01:b5:
                    94:08:a8:1b:c9:14:75:1a:ef:a0:d9:9d:d1:8e:99:
                    d3:ca:98:67:58:46:04:df:c8:0f:e4:21:2e:01:e4:
                    6e:68:42:62:ae:89:62:21:3b:0b:6e:c1:0e:f4:2e:
                    07:b7:a9:57:3c:5b:93:e0:62:c2:ee:39:03:f9:36:
                    75:95:d0:55:71:5d:2b:57:21:da:a9:2a:4c:aa:e1:
                    a5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:2E:56:38:35:56:0C:6C:E0:DE:7A:C5:44:D7:CD:4D:A4:19:00:D6
            X509v3 Authority Key Identifier:
                keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/uC5WODVWDGzg3nrFRNfNTaQZANY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.33.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:00:bd:14:8c:4e:25:5a:74:c7:74:49:13:9e:1e:19:af:76:
         4e:37:ba:81:04:ed:71:98:d2:b1:3f:59:b5:58:eb:6d:eb:54:
         72:34:4a:55:a2:11:d0:f6:de:dd:4e:76:b2:e8:48:cd:18:46:
         32:87:16:19:8e:71:18:61:09:9a:cf:21:45:65:51:db:d7:ba:
         2d:08:28:76:21:67:0f:9b:e5:95:66:c6:c5:37:6c:db:ac:2b:
         2f:bb:83:20:94:bd:d3:ba:a2:a7:e5:64:10:bd:3a:f8:df:8b:
         56:02:0b:04:39:f1:4f:98:53:a1:48:73:34:ba:d4:2b:fd:b7:
         72:a4:40:48:c7:f0:55:a1:25:b5:94:84:23:5e:ad:b9:6f:80:
         95:ee:33:d0:3a:80:ee:3d:bc:83:e2:02:b8:0f:67:10:d9:64:
         d2:8d:a5:27:50:88:a3:6a:e6:1d:f3:d3:79:2a:ce:b7:de:a8:
         3f:1e:a9:b6:f9:c5:84:ea:51:a9:26:6f:2b:50:5e:88:88:2d:
         26:a4:fd:b7:53:9e:06:b1:60:42:31:6b:47:26:e3:44:9c:db:
         96:5a:9e:5d:b3:13:50:45:cd:06:45:f3:01:20:85:9d:0d:96:
         46:32:8f:c0:9a:8b:cc:ae:6e:59:34:8e:4e:5f:bc:87:b7:c5:
         f3:fe:29:70
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBQDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxMTY2
MDBBRDk3QzNCMThDNUJGNzEzRUM4MDBBRUVBNjkyQUM0Q0MxMB4XDTIyMDQyMDA5
MzczOFoXDTIzMDQxNTAxMzAwMlowMzExMC8GA1UEAxMoQjgyRTU2MzgzNTU2MEM2
Q0UwREU3QUM1NDREN0NENERBNDE5MDBENjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMZidh+XC9CO3mi47A53+yZOa10XiCkYlEQY9+eAIwLrS7k9q0bo
3mm86IO8uviSAqLfH1sK5fwyrM210efwxedB+a1QMjcBYcKEbribMHChLDAiRLcE
RZQL5Gtg8FxGKTtMjOosBENsDiF3upDA72+U92XXBOgXXJaGIFlydoIVUp7YQus9
vGhz477oBYiDKQSxuDKTqSf5983vOAj2L3GZ0TPpTM+rdw7tRC15seVtBgG1lAio
G8kUdRrvoNmd0Y6Z08qYZ1hGBN/ID+QhLgHkbmhCYq6JYiE7C27BDvQuB7epVzxb
k+Biwu45A/k2dZXQVXFdK1ch2qkqTKrhpSUCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBS4LlY4NVYMbODeesVE181NpBkA1jAfBgNVHSMEGDAWgBQRZgCtl8OxjFv3E+yA
Cu6mkqxMwTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTMxL0VXWUFyWmZEc1l4Yjl4UHNnQXJ1cHBLc1RNRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0VXWUFyWmZEc1l4Yjl4UHNnQXJ1cHBL
c1RNRS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC85MzEvdUM1V09EVldER3pnM25yRlJOZk5UYVFaQU5ZLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMohtjANBgkqhkiG9w0BAQsFAAOCAQEA
GgC9FIxOJVp0x3RJE54eGa92Tje6gQTtcZjSsT9ZtVjrbetUcjRKVaIR0Pbe3U52
suhIzRhGMocWGY5xGGEJms8hRWVR29e6LQgodiFnD5vllWbGxTds26wrL7uDIJS9
07qip+VkEL06+N+LVgILBDnxT5hToUhzNLrUK/23cqRASMfwVaEltZSEI16tuW+A
le4z0DqA7j28g+ICuA9nENlk0o2lJ1CIo2rmHfPTeSrOt96oPx6ptvnFhOpRqSZv
K1BeiIgtJqT9t1OeBrFgQjFrRybjRJzbllqeXbMTUEXNBkXzASCFnQ2WRjKPwJqL
zK5uWTSOTl+8h7fF8/4pcA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org