Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10762/y80wor5jT5OI0CrmeqZBgJ6IT3o.roa
File:                     y80wor5jT5OI0CrmeqZBgJ6IT3o.roa (raw, json)
Hash identifier:          tWdqC3fr2qiZWQBRWiC2dUzpZFzNHSz4/7ghiHItWs8=
Subject key identifier:   CB:CD:30:A2:BE:63:4F:93:88:D0:2A:E6:7A:A6:41:80:9E:88:4F:7A
Certificate issuer:       /CN=28393FAE129B501824696BAE24B64734A203C376
Certificate serial:       3E
Authority key identifier: 28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/y80wor5jT5OI0CrmeqZBgJ6IT3o.roa
Signing time:             Thu 01 Dec 2022 01:28:49 +0000
ROA not before:           Thu 01 Dec 2022 01:28:49 +0000
ROA not after:            Wed 15 Nov 2023 01:30:02 +0000
asID:                     7514
IP address blocks:        113.192.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28393FAE129B501824696BAE24B64734A203C376
        Validity
            Not Before: Dec  1 01:28:49 2022 GMT
            Not After : Nov 15 01:30:02 2023 GMT
        Subject: CN=CBCD30A2BE634F9388D02AE67AA641809E884F7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:28:d3:22:52:e9:73:c7:05:94:17:a0:30:7c:
                    6c:a2:c2:f5:af:e0:4b:c9:d5:7e:4b:19:4a:0b:e1:
                    bb:30:8e:16:79:0c:ed:68:86:92:c4:fc:cd:24:75:
                    03:fd:9b:38:3a:f3:d6:ac:60:1d:c3:16:63:72:64:
                    46:bb:3e:8b:9f:1d:9b:12:20:55:40:88:36:34:d1:
                    e4:ca:b1:cb:73:50:52:f9:b3:96:7c:11:47:8d:07:
                    ed:10:82:2d:11:46:38:e0:27:15:5f:39:68:a9:2a:
                    3e:50:c1:5c:65:73:e2:7a:22:ed:d2:8c:51:ba:0a:
                    c8:bf:3d:b8:3b:28:8b:1c:33:d9:58:7a:b2:84:d3:
                    14:15:40:07:b8:bc:07:6c:cb:e1:78:4d:f0:76:98:
                    df:a1:76:61:34:aa:85:66:01:ce:2b:c7:d3:ab:b3:
                    0c:34:20:70:64:46:f0:84:dd:fe:83:f1:4a:10:1e:
                    bc:e8:dd:10:06:2c:6d:2d:7e:83:d5:fb:27:38:d3:
                    c6:3f:92:49:25:53:03:72:85:94:bc:a1:23:f9:fa:
                    4e:c7:79:6d:16:d7:df:f1:d9:4e:87:8c:3e:bf:2b:
                    f1:d4:25:ec:4b:36:b8:43:32:f5:3f:fc:b4:8d:33:
                    4b:77:6b:62:c5:25:8a:cf:e9:96:bf:e7:a2:0c:8e:
                    1c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:CD:30:A2:BE:63:4F:93:88:D0:2A:E6:7A:A6:41:80:9E:88:4F:7A
            X509v3 Authority Key Identifier:
                keyid:28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/y80wor5jT5OI0CrmeqZBgJ6IT3o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.192.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         05:df:79:0a:e9:f8:91:e6:ef:0c:57:84:ee:04:4e:f4:3b:2d:
         ff:66:08:1d:e7:b4:16:8d:48:c5:a0:b2:61:7f:22:22:b1:58:
         4e:c9:5c:b1:28:4d:f1:55:ca:91:97:bd:3f:38:b6:ed:f5:97:
         02:05:a4:ef:70:e6:06:f7:44:14:d9:46:bb:5c:ca:e2:47:28:
         b7:20:9d:5e:34:8d:ea:81:09:46:7f:13:4e:d6:85:8b:09:05:
         a0:04:13:12:ad:78:e5:24:83:90:d3:04:17:18:6a:70:9c:f5:
         24:b5:84:50:05:0a:8c:b7:f4:13:62:e0:d0:b5:eb:de:28:71:
         fe:6d:16:96:fa:c8:66:db:c8:b9:9d:79:d1:bf:df:cf:46:91:
         be:dd:0d:fc:fe:31:95:d9:98:4d:71:a6:2a:88:8e:f8:13:27:
         26:dd:ca:73:50:f0:f8:b9:f6:83:c0:57:ba:84:e3:92:ab:4c:
         7b:8e:48:12:d1:24:83:b4:bf:5d:74:7f:63:3c:89:b9:fc:19:
         2e:3c:da:cc:a1:7f:79:a8:a1:2a:d8:e4:25:28:b3:af:cd:c0:
         24:60:9a:33:03:78:7e:57:af:d1:9f:fa:42:63:9b:f7:de:27:
         68:7e:39:ea:14:8e:52:d5:c7:5a:9e:bf:3b:27:61:14:b2:85:
         bb:d9:db:51
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBPjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyODM5
M0ZBRTEyOUI1MDE4MjQ2OTZCQUUyNEI2NDczNEEyMDNDMzc2MB4XDTIyMTIwMTAx
Mjg0OVoXDTIzMTExNTAxMzAwMlowMzExMC8GA1UEAxMoQ0JDRDMwQTJCRTYzNEY5
Mzg4RDAyQUU2N0FBNjQxODA5RTg4NEY3QTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMso0yJS6XPHBZQXoDB8bKLC9a/gS8nVfksZSgvhuzCOFnkM7WiG
ksT8zSR1A/2bODrz1qxgHcMWY3JkRrs+i58dmxIgVUCINjTR5Mqxy3NQUvmzlnwR
R40H7RCCLRFGOOAnFV85aKkqPlDBXGVz4noi7dKMUboKyL89uDsoixwz2Vh6soTT
FBVAB7i8B2zL4XhN8HaY36F2YTSqhWYBzivH06uzDDQgcGRG8ITd/oPxShAevOjd
EAYsbS1+g9X7JzjTxj+SSSVTA3KFlLyhI/n6Tsd5bRbX3/HZToeMPr8r8dQl7Es2
uEMy9T/8tI0zS3drYsUlis/plr/nogyOHJECAwEAAaOCAigwggIkMB0GA1UdDgQW
BBTLzTCivmNPk4jQKuZ6pkGAnohPejAfBgNVHSMEGDAWgBQoOT+uEptQGCRpa64k
tkc0ogPDdjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTA3NjIvS0RrX3JoS2JVQmdrYVd1dUpMWkhOS0lEdzNZLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS0RrX3JoS2JVQmdrYVd1dUpMWkhO
S0lEdzNZLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzEwNzYyL3k4MHdvcjVqVDVPSTBDcm1lcVpCZ0o2SVQzby5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAdxwIAwDQYJKoZIhvcNAQELBQADggEBAAXfeQrp+JHm7wxXhO4ETvQ7
Lf9mCB3ntBaNSMWgsmF/IiKxWE7JXLEoTfFVypGXvT84tu31lwIFpO9w5gb3RBTZ
RrtcyuJHKLcgnV40jeqBCUZ/E07WhYsJBaAEExKteOUkg5DTBBcYanCc9SS1hFAF
Coy39BNi4NC1694ocf5tFpb6yGbbyLmdedG/389Gkb7dDfz+MZXZmE1xpiqIjvgT
JybdynNQ8Pi59oPAV7qE45KrTHuOSBLRJIO0v110f2M8ibn8GS482syhf3mooSrY
5CUos6/NwCRgmjMDeH5Xr9Gf+kJjm/feJ2h+OeoUjlLVx1qevzsnYRSyhbvZ21E=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org