Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30367/rHh8KLXWZjFDzrlxpWC7iiEUSNA.roa
File:                     rHh8KLXWZjFDzrlxpWC7iiEUSNA.roa (raw, json)
Hash identifier:          12AUyAT6YWRSC1+X7oW6ySQqaK5X4ayl/U8B53GkJ70=
Subject key identifier:   AC:78:7C:28:B5:D6:66:31:43:CE:B9:71:A5:60:BB:8A:21:14:48:D0
Certificate issuer:       /CN=82E5B28A20F4C6A62A4612F6C5DFB7A3D64D9DEA
Certificate serial:       14
Authority key identifier: 82:E5:B2:8A:20:F4:C6:A6:2A:46:12:F6:C5:DF:B7:A3:D6:4D:9D:EA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/rHh8KLXWZjFDzrlxpWC7iiEUSNA.roa
Signing time:             Mon 07 Nov 2022 05:41:00 +0000
ROA not before:           Mon 07 Nov 2022 05:41:00 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     131921
IP address blocks:        2406:a1c0:200::/40 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82E5B28A20F4C6A62A4612F6C5DFB7A3D64D9DEA
        Validity
            Not Before: Nov  7 05:41:00 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=AC787C28B5D6663143CEB971A560BB8A211448D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:81:ca:1e:4e:34:fe:1c:34:38:6d:19:45:16:
                    b0:2a:10:cd:d9:44:e1:d0:82:cd:dc:15:17:2c:99:
                    2e:fa:7e:01:48:2b:ea:38:c7:99:d9:23:31:8c:10:
                    dd:36:ce:bf:f9:c4:8f:02:c3:70:e3:d3:3a:0c:32:
                    90:10:2d:f7:6a:65:fa:2e:11:ae:c5:5f:1d:cb:b6:
                    75:0a:e2:00:c3:db:cd:02:0b:91:ac:26:ac:89:b0:
                    b6:40:c1:0b:31:39:ea:a5:47:2f:ab:2f:d5:66:fb:
                    88:5a:b0:92:dc:f9:2d:4e:1c:53:c8:7f:a4:22:95:
                    36:d0:6f:a2:ab:94:4f:0d:b3:fa:e4:31:85:0f:eb:
                    c6:11:fe:73:ab:c4:14:44:2b:7b:63:5d:83:31:88:
                    f6:35:b4:07:52:35:62:97:21:87:03:1b:b0:8a:84:
                    25:fa:45:7e:eb:6d:6c:8c:4c:c4:59:5c:8e:83:e9:
                    14:47:7d:04:dd:a0:56:15:19:73:57:c2:0b:ed:e4:
                    67:ea:2f:37:62:7e:a7:3b:9e:23:b2:56:d4:9f:e9:
                    51:5e:17:a5:d1:73:fa:c6:b3:65:44:22:39:6e:3f:
                    9e:12:35:ee:e5:ac:b6:72:28:b6:e6:a0:07:1d:81:
                    c0:eb:50:8b:cb:29:7f:9d:c4:a4:7e:e8:e4:31:e7:
                    fb:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:78:7C:28:B5:D6:66:31:43:CE:B9:71:A5:60:BB:8A:21:14:48:D0
            X509v3 Authority Key Identifier:
                keyid:82:E5:B2:8A:20:F4:C6:A6:2A:46:12:F6:C5:DF:B7:A3:D6:4D:9D:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/rHh8KLXWZjFDzrlxpWC7iiEUSNA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:a1c0:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         cb:08:38:7a:44:85:2c:28:db:a3:0d:50:19:82:5a:da:60:9f:
         5c:8f:33:b9:00:51:9e:28:9c:fc:70:8e:b4:34:2d:7c:00:a9:
         66:bc:e8:c8:37:91:06:84:b4:92:a5:1f:ca:51:6f:ca:f5:c4:
         c3:f8:da:3d:0b:55:b7:f1:f4:e8:d9:2f:43:25:be:e7:aa:d4:
         2d:62:d1:f5:96:1a:11:57:f7:f5:d7:eb:87:2b:6b:4a:84:72:
         c7:49:c5:dd:d2:45:ee:5f:e0:db:ec:30:94:3e:fa:27:b6:28:
         88:57:a1:1c:98:bf:0f:98:b2:db:fc:35:7f:7a:78:bd:a4:4a:
         be:ec:35:4c:2e:60:d6:55:13:67:1b:27:e9:02:14:0c:9e:39:
         71:1a:32:9f:6b:f3:9a:5c:22:0f:56:69:3c:a1:a8:0e:a9:d8:
         4c:bc:67:d3:a6:49:84:05:23:f7:20:5c:3d:16:ac:85:89:f7:
         01:be:54:df:54:57:4a:63:16:19:ab:50:68:a7:dd:21:90:ca:
         66:33:61:58:61:0e:6f:a4:9a:e7:8e:06:50:57:38:56:c7:d4:
         9d:8a:ec:5b:ac:37:7b:ec:18:55:5b:fd:a4:bd:f9:c9:ce:1c:
         b9:23:fe:79:53:e3:d0:5a:7d:b7:ce:35:7d:c9:2c:65:c1:66:
         46:c5:41:41
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIBFDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4MkU1
QjI4QTIwRjRDNkE2MkE0NjEyRjZDNURGQjdBM0Q2NEQ5REVBMB4XDTIyMTEwNzA1
NDEwMFoXDTIzMTAxNTAxMzAwMlowMzExMC8GA1UEAxMoQUM3ODdDMjhCNUQ2NjYz
MTQzQ0VCOTcxQTU2MEJCOEEyMTE0NDhEMDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJ2Byh5ONP4cNDhtGUUWsCoQzdlE4dCCzdwVFyyZLvp+AUgr6jjH
mdkjMYwQ3TbOv/nEjwLDcOPTOgwykBAt92pl+i4RrsVfHcu2dQriAMPbzQILkawm
rImwtkDBCzE56qVHL6sv1Wb7iFqwktz5LU4cU8h/pCKVNtBvoquUTw2z+uQxhQ/r
xhH+c6vEFEQre2NdgzGI9jW0B1I1YpchhwMbsIqEJfpFfuttbIxMxFlcjoPpFEd9
BN2gVhUZc1fCC+3kZ+ovN2J+pzueI7JW1J/pUV4XpdFz+sazZUQiOW4/nhI17uWs
tnIotuagBx2BwOtQi8spf53EpH7o5DHn+xcCAwEAAaOCAiowggImMB0GA1UdDgQW
BBSseHwotdZmMUPOuXGlYLuKIRRI0DAfBgNVHSMEGDAWgBSC5bKKIPTGpipGEvbF
37ej1k2d6jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAzNjcvZ3VXeWlpRDB4cVlxUmhMMnhkLTNvOVpObmVvLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvZ3VXeWlpRDB4cVlxUmhMMnhkLTNv
OVpObmVvLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMzY3L3JIaDhLTFhXWmpGRHpybHhwV0M3aWlFVVNOQS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAkBqHAAjANBgkqhkiG9w0BAQsFAAOCAQEAywg4ekSFLCjbow1QGYJa
2mCfXI8zuQBRniic/HCOtDQtfACpZrzoyDeRBoS0kqUfylFvyvXEw/jaPQtVt/H0
6NkvQyW+56rULWLR9ZYaEVf39dfrhytrSoRyx0nF3dJF7l/g2+wwlD76J7YoiFeh
HJi/D5iy2/w1f3p4vaRKvuw1TC5g1lUTZxsn6QIUDJ45cRoyn2vzmlwiD1ZpPKGo
DqnYTLxn06ZJhAUj9yBcPRashYn3Ab5U31RXSmMWGatQaKfdIZDKZjNhWGEOb6Sa
544GUFc4VsfUnYrsW6w3e+wYVVv9pL35yc4cuSP+eVPj0Fp9t841fcksZcFmRsVB
QQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:00 2024 by rpki-client on console-ams.rpki-client.org