Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/OgqT8I700bEX-EcSszk-U7L7evs.roa
File:                     OgqT8I700bEX-EcSszk-U7L7evs.roa (raw, json)
Hash identifier:          ddzp79nx15x8y84L7mX+Ayl+gzLbXB5NKzGHLEogXIc=
Subject key identifier:   3A:0A:93:F0:8E:F4:D1:B1:17:F8:47:12:B3:39:3E:53:B2:FB:7A:FB
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       011D
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/OgqT8I700bEX-EcSszk-U7L7evs.roa
Signing time:             Fri 05 Aug 2022 04:26:38 +0000
ROA not before:           Fri 05 Aug 2022 04:26:38 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     4713
IP address blocks:        153.252.0.0/15 maxlen: 15

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 285 (0x11d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Aug  5 04:26:38 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=3A0A93F08EF4D1B117F84712B3393E53B2FB7AFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b2:16:f8:28:e0:37:dc:5a:9c:08:5b:a8:9d:
                    1d:3b:46:c7:87:86:bc:61:d6:76:4a:43:88:d1:8c:
                    bf:61:bb:37:57:90:04:5f:e3:be:62:9b:18:10:c4:
                    42:ca:99:80:17:92:c1:ad:90:ec:a2:29:ac:ad:cb:
                    a1:62:e6:11:b7:20:83:b1:b0:73:f7:b6:42:85:d8:
                    d0:af:83:04:17:b7:cb:d6:54:7a:90:f0:76:c0:b9:
                    7b:0f:84:dd:d4:39:27:3a:83:e6:3e:4b:42:1e:77:
                    12:52:68:36:10:45:64:2f:11:d5:48:3d:d3:22:42:
                    22:21:92:44:1e:44:36:91:8b:26:15:7f:b7:1f:39:
                    ab:d5:4f:83:91:46:69:12:9f:1a:7a:61:d9:9c:d2:
                    d9:8b:9e:ac:f0:29:2f:32:4c:9d:4a:78:3d:49:2f:
                    9a:4b:58:8c:6a:a0:d5:eb:9b:b1:ba:66:7f:57:7b:
                    28:20:f7:c2:84:9e:96:77:76:63:b8:68:94:bc:c2:
                    08:6f:be:c7:16:66:79:bd:c4:16:8a:52:11:98:3e:
                    86:4e:23:f8:7c:62:d6:fb:5b:78:b9:55:e5:c6:d7:
                    37:74:fe:14:05:22:d0:ba:46:88:4f:7c:07:09:57:
                    b6:f0:4b:06:74:8c:c9:70:09:fd:e5:49:d3:2f:58:
                    9d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:0A:93:F0:8E:F4:D1:B1:17:F8:47:12:B3:39:3E:53:B2:FB:7A:FB
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/OgqT8I700bEX-EcSszk-U7L7evs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.252.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         4c:f6:d6:92:55:76:18:64:fe:93:a6:62:c1:7b:05:1f:65:10:
         1b:d7:85:ae:a7:86:18:93:dd:10:60:8b:1b:87:3b:bb:d7:73:
         5e:3a:96:06:ea:34:ef:35:26:f4:51:5d:43:8e:1d:df:82:4e:
         5d:2d:cf:88:8f:57:78:df:f7:ec:8f:21:d7:30:55:0b:9d:1a:
         d8:cb:72:5a:a5:de:ba:c6:f5:2d:c6:d2:9e:b5:ef:6b:9b:96:
         51:19:0c:1f:fe:13:b0:e9:b3:a2:78:3f:c9:f6:60:53:ca:a4:
         84:bd:4d:5e:ca:c9:c0:cf:f2:eb:59:bf:2c:3d:bc:57:6d:c5:
         5c:63:8b:be:01:90:73:61:57:19:42:bb:40:5e:65:a4:98:87:
         53:fd:e9:4b:05:2a:bd:3b:8c:79:e3:b7:01:80:dd:bd:ff:ad:
         01:35:e2:7d:c3:3f:09:42:b6:e5:ff:91:c3:a4:32:8b:2c:d7:
         ae:b8:60:b7:1a:b3:6d:ac:f7:bb:f3:e3:ec:e6:26:13:61:11:
         c7:7b:54:65:73:15:77:cc:13:ec:c0:d8:97:88:ac:2f:e4:15:
         50:e9:da:31:58:29:14:6b:4e:de:18:e6:c9:4c:91:c7:06:71:
         4b:d1:4c:2a:0e:0a:06:b8:8b:92:d6:32:99:a7:1f:f0:a4:a1:
         b8:d9:06:df
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yMjA4MDUw
NDI2MzhaFw0yMzA3MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDNBMEE5M0YwOEVGNEQx
QjExN0Y4NDcxMkIzMzkzRTUzQjJGQjdBRkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDlshb4KOA33FqcCFuonR07RseHhrxh1nZKQ4jRjL9huzdXkARf
475imxgQxELKmYAXksGtkOyiKayty6Fi5hG3IIOxsHP3tkKF2NCvgwQXt8vWVHqQ
8HbAuXsPhN3UOSc6g+Y+S0IedxJSaDYQRWQvEdVIPdMiQiIhkkQeRDaRiyYVf7cf
OavVT4ORRmkSnxp6Ydmc0tmLnqzwKS8yTJ1KeD1JL5pLWIxqoNXrm7G6Zn9Xeygg
98KEnpZ3dmO4aJS8wghvvscWZnm9xBaKUhGYPoZOI/h8Ytb7W3i5VeXG1zd0/hQF
ItC6RohPfAcJV7bwSwZ0jMlwCf3lSdMvWJ2jAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUOgqT8I700bEX+EcSszk+U7L7evswHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTMxL09ncVQ4STcwMGJFWC1FY1NzemstVTdMN2V2cy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwGZ/DANBgkqhkiG9w0BAQsFAAOCAQEATPbWklV2GGT+k6ZiwXsFH2UQG9eF
rqeGGJPdEGCLG4c7u9dzXjqWBuo07zUm9FFdQ44d34JOXS3PiI9XeN/37I8h1zBV
C50a2MtyWqXeusb1LcbSnrXva5uWURkMH/4TsOmzong/yfZgU8qkhL1NXsrJwM/y
61m/LD28V23FXGOLvgGQc2FXGUK7QF5lpJiHU/3pSwUqvTuMeeO3AYDdvf+tATXi
fcM/CUK25f+Rw6QyiyzXrrhgtxqzbaz3u/Pj7OYmE2ERx3tUZXMVd8wT7MDYl4is
L+QVUOnaMVgpFGtO3hjmyUyRxwZxS9FMKg4KBriLktYymacf8KShuNkG3w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org