Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10762/41EJSrIITXedlXWZJXtvIRKVWEE.roa
File:                     41EJSrIITXedlXWZJXtvIRKVWEE.roa (raw, json)
Hash identifier:          fjMCHm/NcLmyU3NwQpywyjPxsU7ll/JIby1ZKtTz6WQ=
Subject key identifier:   E3:51:09:4A:B2:08:4D:77:9D:95:75:99:25:7B:6F:21:12:95:58:41
Certificate issuer:       /CN=28393FAE129B501824696BAE24B64734A203C376
Certificate serial:       43
Authority key identifier: 28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/41EJSrIITXedlXWZJXtvIRKVWEE.roa
Signing time:             Fri 06 Jan 2023 09:35:53 +0000
ROA not before:           Fri 06 Jan 2023 09:35:53 +0000
ROA not after:            Fri 15 Dec 2023 01:30:02 +0000
asID:                     7514
IP address blocks:        113.192.128.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28393FAE129B501824696BAE24B64734A203C376
        Validity
            Not Before: Jan  6 09:35:53 2023 GMT
            Not After : Dec 15 01:30:02 2023 GMT
        Subject: CN=E351094AB2084D779D957599257B6F2112955841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2f:fa:cb:64:fa:3f:1e:3d:6b:b2:00:e5:a4:
                    de:a9:bb:58:49:88:69:0f:cf:21:90:05:41:36:ce:
                    de:bc:37:f4:6c:a2:10:e6:72:55:3d:6f:2c:c4:3b:
                    27:39:17:ea:f1:17:c1:d5:72:a9:30:d0:4a:6e:9e:
                    39:64:63:f8:db:9f:94:1b:1c:2d:47:4e:04:3e:fd:
                    09:ac:ee:e1:bf:30:7f:d4:14:ee:3d:71:4c:53:aa:
                    68:2b:eb:16:a6:62:c9:65:af:0b:4b:93:d9:1d:fb:
                    a2:24:bf:2a:5a:f2:e5:21:7d:9f:f2:f2:77:31:35:
                    ac:c2:7a:7a:ad:00:dc:32:f5:1e:1e:2e:0e:17:0c:
                    40:0b:8c:ea:d5:76:9f:78:c3:15:5e:68:ef:a8:9c:
                    8b:c1:7b:eb:80:5c:34:6b:6d:3f:4b:77:cd:ed:62:
                    86:bd:c8:7f:21:5d:5c:b4:f7:9b:27:1f:2a:d2:1e:
                    bc:f3:2f:25:cb:ee:e9:24:e8:e0:88:83:82:b7:92:
                    f8:c1:f2:8d:79:17:66:b5:f9:cb:95:88:e3:13:d8:
                    9c:7d:1a:d8:b8:33:ad:27:51:96:a2:41:96:92:2b:
                    38:f1:54:bf:dd:a3:ce:8c:5f:e5:f5:89:44:4b:c9:
                    9e:ac:3b:7e:31:dd:89:23:69:10:86:34:a2:f7:db:
                    f0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:51:09:4A:B2:08:4D:77:9D:95:75:99:25:7B:6F:21:12:95:58:41
            X509v3 Authority Key Identifier:
                keyid:28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/41EJSrIITXedlXWZJXtvIRKVWEE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.192.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         32:07:27:d4:68:8f:16:d3:9d:cb:c9:b8:89:cc:24:ee:c1:a8:
         d6:d8:5e:a2:f8:0f:46:cd:51:b0:74:de:92:d3:28:02:5d:1a:
         d3:87:1c:1c:c8:90:ca:73:69:58:e9:d4:43:85:79:a3:2e:41:
         f3:44:15:6f:dc:55:13:8b:8e:e6:17:4b:e6:01:15:78:7a:4e:
         4f:dc:37:30:87:3b:57:e6:81:82:6a:e0:b7:10:f7:89:49:0d:
         ab:b6:ee:63:82:fa:ed:29:98:4d:c5:80:c4:b1:1d:05:2f:df:
         f5:36:a6:a7:b7:48:1f:ed:76:02:72:f4:2b:e8:7b:42:12:dd:
         1d:b7:b5:8b:6b:a4:ad:c2:d3:8d:00:08:ba:bc:d4:ec:ba:33:
         8c:c0:96:3f:1f:70:75:e2:53:6b:93:c6:54:7c:fc:e1:b7:7b:
         f7:59:f2:27:89:48:ff:f4:74:97:ac:52:61:af:0c:d8:62:57:
         0f:1b:2c:81:a8:07:8f:d6:18:31:1b:ed:de:9c:bd:81:09:2d:
         f4:57:48:ff:b3:d1:66:e9:d3:b4:8b:a2:fd:1d:73:59:bf:0f:
         d1:19:a5:ea:a8:0a:ca:a0:1d:7e:7b:73:c5:c9:b5:d9:41:9f:
         24:65:85:c8:40:98:8d:12:e0:c9:f4:94:ee:8f:ce:69:a4:ad:
         96:e1:c9:00
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBQzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyODM5
M0ZBRTEyOUI1MDE4MjQ2OTZCQUUyNEI2NDczNEEyMDNDMzc2MB4XDTIzMDEwNjA5
MzU1M1oXDTIzMTIxNTAxMzAwMlowMzExMC8GA1UEAxMoRTM1MTA5NEFCMjA4NEQ3
NzlEOTU3NTk5MjU3QjZGMjExMjk1NTg0MTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANUv+stk+j8ePWuyAOWk3qm7WEmIaQ/PIZAFQTbO3rw39GyiEOZy
VT1vLMQ7JzkX6vEXwdVyqTDQSm6eOWRj+NuflBscLUdOBD79Cazu4b8wf9QU7j1x
TFOqaCvrFqZiyWWvC0uT2R37oiS/Klry5SF9n/LydzE1rMJ6eq0A3DL1Hh4uDhcM
QAuM6tV2n3jDFV5o76ici8F764BcNGttP0t3ze1ihr3IfyFdXLT3mycfKtIevPMv
Jcvu6STo4IiDgreS+MHyjXkXZrX5y5WI4xPYnH0a2LgzrSdRlqJBlpIrOPFUv92j
zoxf5fWJREvJnqw7fjHdiSNpEIY0ovfb8C0CAwEAAaOCAigwggIkMB0GA1UdDgQW
BBTjUQlKsghNd52VdZkle28hEpVYQTAfBgNVHSMEGDAWgBQoOT+uEptQGCRpa64k
tkc0ogPDdjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTA3NjIvS0RrX3JoS2JVQmdrYVd1dUpMWkhOS0lEdzNZLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS0RrX3JoS2JVQmdrYVd1dUpMWkhO
S0lEdzNZLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzEwNzYyLzQxRUpTcklJVFhlZGxYV1pKWHR2SVJLVldFRS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAdxwIAwDQYJKoZIhvcNAQELBQADggEBADIHJ9RojxbTncvJuInMJO7B
qNbYXqL4D0bNUbB03pLTKAJdGtOHHBzIkMpzaVjp1EOFeaMuQfNEFW/cVROLjuYX
S+YBFXh6Tk/cNzCHO1fmgYJq4LcQ94lJDau27mOC+u0pmE3FgMSxHQUv3/U2pqe3
SB/tdgJy9Cvoe0IS3R23tYtrpK3C040ACLq81Oy6M4zAlj8fcHXiU2uTxlR8/OG3
e/dZ8ieJSP/0dJesUmGvDNhiVw8bLIGoB4/WGDEb7d6cvYEJLfRXSP+z0Wbp07SL
ov0dc1m/D9EZpeqoCsqgHX57c8XJtdlBnyRlhchAmI0S4Mn0lO6PzmmkrZbhyQA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org