Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10762/LpbGl-8xZDji_UR2XgaquPQYthc.roa
File:                     LpbGl-8xZDji_UR2XgaquPQYthc.roa (raw, json)
Hash identifier:          dN1sRMbScELLNRbGrcolrnYjUy2IXso6pTh5MSQdSv4=
Subject key identifier:   2E:96:C6:97:EF:31:64:38:E2:FD:44:76:5E:06:AA:B8:F4:18:B6:17
Certificate issuer:       /CN=28393FAE129B501824696BAE24B64734A203C376
Certificate serial:       23
Authority key identifier: 28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/LpbGl-8xZDji_UR2XgaquPQYthc.roa
Signing time:             Sat 01 Jan 2022 01:31:39 +0000
ROA not before:           Sat 01 Jan 2022 01:31:39 +0000
ROA not after:            Thu 15 Dec 2022 01:30:02 +0000
asID:                     7514
IP address blocks:        210.166.224.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28393FAE129B501824696BAE24B64734A203C376
        Validity
            Not Before: Jan  1 01:31:39 2022 GMT
            Not After : Dec 15 01:30:02 2022 GMT
        Subject: CN=2E96C697EF316438E2FD44765E06AAB8F418B617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e4:b2:80:cb:c7:f8:1b:5e:7a:c5:72:a4:f4:
                    28:7a:80:95:c8:c8:2a:39:8d:d7:33:55:15:93:67:
                    40:c4:4c:f8:5d:44:6c:a6:da:1b:5d:2f:54:04:d6:
                    49:69:57:c8:41:b8:e9:2f:ff:06:00:13:9b:48:37:
                    b9:25:2b:00:88:67:06:82:45:d3:b0:95:db:a5:6f:
                    6c:eb:8f:9d:45:d6:23:2b:12:7b:22:3b:10:cc:77:
                    49:77:6d:cd:ea:27:86:40:37:19:99:7d:81:5f:7e:
                    10:68:27:4f:1c:81:ba:ed:af:69:eb:2a:67:22:61:
                    2c:3f:11:d9:3b:b5:ab:76:b6:2c:00:82:77:96:4d:
                    56:94:69:fc:ff:ee:12:59:1f:bc:88:5c:e0:cc:1b:
                    34:0d:9c:96:f5:8d:51:9c:bb:2d:cf:c7:d3:99:45:
                    78:12:37:b4:0c:80:5f:c7:de:4e:ba:aa:ed:ab:32:
                    13:3f:78:cb:92:08:69:73:20:87:31:b6:c4:78:78:
                    e5:3e:e3:ac:f8:2b:cb:f3:b5:f4:94:37:99:12:ad:
                    a1:f5:a9:c6:52:8b:7d:48:8e:30:26:cd:8e:4d:fb:
                    5b:64:d8:de:a3:d7:f8:23:a6:a3:51:5b:a8:dc:ff:
                    60:97:d3:89:77:62:f5:1a:8e:ec:2a:50:90:45:00:
                    cb:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:96:C6:97:EF:31:64:38:E2:FD:44:76:5E:06:AA:B8:F4:18:B6:17
            X509v3 Authority Key Identifier:
                keyid:28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/LpbGl-8xZDji_UR2XgaquPQYthc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.166.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         35:ec:cc:8b:04:db:9c:a5:c0:df:51:12:5c:0c:e5:0e:1f:69:
         62:85:59:7f:17:4e:7b:f3:e7:73:55:d7:86:c9:3d:93:96:9e:
         d8:80:79:3a:f3:7a:16:e0:e0:4f:04:6d:fc:d1:b1:7c:58:e1:
         79:80:c1:2e:ae:6d:13:23:45:5a:59:de:78:0e:40:a1:b9:72:
         bf:60:8d:45:d9:a8:41:31:34:22:b6:f3:65:80:b3:4e:5f:89:
         35:e8:1b:b8:d5:26:7d:6d:c6:eb:5d:33:fa:38:88:72:a2:bb:
         2f:e2:35:a2:ad:d1:ac:48:3c:89:a3:b9:51:8f:b7:80:d5:99:
         f4:c3:c5:b7:3b:fa:53:d1:01:33:aa:54:de:44:16:bd:2d:70:
         6a:f9:5f:d9:6a:05:a2:ba:84:a2:fc:74:d9:71:9e:8c:3f:de:
         59:d6:cd:36:73:d1:88:d9:96:50:6b:ae:f4:55:f8:80:33:f7:
         57:71:f3:91:98:0e:dd:40:c8:bf:b6:4d:fa:9a:57:dc:68:c8:
         02:95:3c:e2:84:c0:93:4f:14:bf:ec:b8:7c:58:c7:ef:ac:90:
         c9:48:a2:8a:ba:41:30:a6:de:1a:4e:1b:08:33:70:c7:67:8d:
         6f:87:16:e1:39:d4:83:4e:50:51:95:87:a5:ab:d2:7b:f1:d1:
         c1:1b:8a:70
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBIzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyODM5
M0ZBRTEyOUI1MDE4MjQ2OTZCQUUyNEI2NDczNEEyMDNDMzc2MB4XDTIyMDEwMTAx
MzEzOVoXDTIyMTIxNTAxMzAwMlowMzExMC8GA1UEAxMoMkU5NkM2OTdFRjMxNjQz
OEUyRkQ0NDc2NUUwNkFBQjhGNDE4QjYxNzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJ7ksoDLx/gbXnrFcqT0KHqAlcjIKjmN1zNVFZNnQMRM+F1EbKba
G10vVATWSWlXyEG46S//BgATm0g3uSUrAIhnBoJF07CV26VvbOuPnUXWIysSeyI7
EMx3SXdtzeonhkA3GZl9gV9+EGgnTxyBuu2vaesqZyJhLD8R2Tu1q3a2LACCd5ZN
VpRp/P/uElkfvIhc4MwbNA2clvWNUZy7Lc/H05lFeBI3tAyAX8feTrqq7asyEz94
y5IIaXMghzG2xHh45T7jrPgry/O19JQ3mRKtofWpxlKLfUiOMCbNjk37W2TY3qPX
+COmo1FbqNz/YJfTiXdi9RqO7CpQkEUAy0UCAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBQulsaX7zFkOOL9RHZeBqq49Bi2FzAfBgNVHSMEGDAWgBQoOT+uEptQGCRpa64k
tkc0ogPDdjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTA3NjIvS0RrX3JoS2JVQmdrYVd1dUpMWkhOS0lEdzNZLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS0RrX3JoS2JVQmdrYVd1dUpMWkhO
S0lEdzNZLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzEwNzYyL0xwYkdsLTh4WkRqaV9VUjJYZ2FxdVBRWXRoYy5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXSpuAwDQYJKoZIhvcNAQELBQAD
ggEBADXszIsE25ylwN9RElwM5Q4faWKFWX8XTnvz53NV14bJPZOWntiAeTrzehbg
4E8EbfzRsXxY4XmAwS6ubRMjRVpZ3ngOQKG5cr9gjUXZqEExNCK282WAs05fiTXo
G7jVJn1txutdM/o4iHKiuy/iNaKt0axIPImjuVGPt4DVmfTDxbc7+lPRATOqVN5E
Fr0tcGr5X9lqBaK6hKL8dNlxnow/3lnWzTZz0YjZllBrrvRV+IAz91dx85GYDt1A
yL+2TfqaV9xoyAKVPOKEwJNPFL/suHxYx++skMlIooq6QTCm3hpOGwgzcMdnjW+H
FuE51INOUFGVh6Wr0nvx0cEbinA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org