Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30367/vrISE73DGFGpVreHR3wQFxGKtqs.roa
File:                     vrISE73DGFGpVreHR3wQFxGKtqs.roa (raw, json)
Hash identifier:          Sh2uCRLyD+aBtUPjPtT2EQUTS0MXDG9nzTMt0FN0+ro=
Subject key identifier:   BE:B2:12:13:BD:C3:18:51:A9:56:B7:87:47:7C:10:17:11:8A:B6:AB
Certificate issuer:       /CN=82E5B28A20F4C6A62A4612F6C5DFB7A3D64D9DEA
Certificate serial:       15
Authority key identifier: 82:E5:B2:8A:20:F4:C6:A6:2A:46:12:F6:C5:DF:B7:A3:D6:4D:9D:EA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/vrISE73DGFGpVreHR3wQFxGKtqs.roa
Signing time:             Mon 07 Nov 2022 05:43:00 +0000
ROA not before:           Mon 07 Nov 2022 05:43:00 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     131921
IP address blocks:        2406:a1c0:300::/40 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82E5B28A20F4C6A62A4612F6C5DFB7A3D64D9DEA
        Validity
            Not Before: Nov  7 05:43:00 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=BEB21213BDC31851A956B787477C1017118AB6AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:89:19:f6:90:49:ca:00:a6:b7:8a:79:aa:83:
                    08:80:e1:61:09:c6:41:2e:a2:66:e6:3c:fc:2a:06:
                    c4:e8:65:79:4b:27:71:48:fc:15:22:01:0b:26:c6:
                    a2:24:c4:8a:56:ba:e3:95:1c:3f:83:9a:eb:99:8d:
                    01:18:cb:74:b4:5e:69:05:05:40:ce:c3:54:a0:11:
                    69:bf:78:d7:f3:57:34:cd:f0:43:99:f1:e3:64:cf:
                    f1:f8:22:dd:c4:88:5e:aa:9b:c8:82:af:14:30:75:
                    fc:f3:96:92:a4:52:bc:6f:a1:eb:83:16:a5:83:44:
                    2e:63:78:d1:c6:6c:d9:0d:17:ef:e2:f6:7e:00:9b:
                    9f:02:d3:98:18:07:8e:ec:6b:a9:62:a5:27:c0:8b:
                    81:9d:c5:59:17:a4:f8:6a:60:50:61:d4:bb:43:aa:
                    5e:44:13:7e:52:96:79:b3:5e:70:27:66:68:ec:94:
                    54:73:25:a4:9d:5b:46:f5:7a:04:4a:9d:4f:2c:ae:
                    e1:30:30:e5:ef:a2:85:f7:82:7a:9c:20:04:9b:f3:
                    fa:fa:3d:67:60:60:c5:77:59:60:73:e4:c8:4a:36:
                    68:b4:f2:05:b0:f4:58:51:49:eb:8d:cd:a1:b9:91:
                    18:1e:d7:4a:04:c0:75:f6:98:33:70:26:c2:0d:30:
                    42:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B2:12:13:BD:C3:18:51:A9:56:B7:87:47:7C:10:17:11:8A:B6:AB
            X509v3 Authority Key Identifier:
                keyid:82:E5:B2:8A:20:F4:C6:A6:2A:46:12:F6:C5:DF:B7:A3:D6:4D:9D:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/vrISE73DGFGpVreHR3wQFxGKtqs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:a1c0:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         76:44:0e:a1:24:75:79:d4:4b:7e:0b:f0:90:ff:7c:69:c2:ab:
         6c:87:02:99:a7:5f:c3:ac:d4:83:26:11:c3:cd:95:bf:d2:a9:
         e0:5d:61:c6:bc:8f:9f:ee:76:1e:63:de:23:ba:28:c4:1e:f6:
         18:31:88:80:2f:d9:ec:c1:4d:7a:19:09:4a:85:7c:10:38:46:
         6d:fd:c0:14:8d:48:bd:0c:99:f7:0e:5d:9f:82:db:54:8a:d1:
         b0:47:09:d1:ba:e4:0f:19:dd:b6:8f:67:5d:c7:6d:cb:5e:f8:
         67:ff:87:1f:5e:e5:77:11:fd:3a:67:c8:c3:f5:15:99:11:c5:
         be:de:dc:29:4e:db:e3:db:36:2b:48:58:94:02:da:4b:27:c8:
         41:75:0e:51:a2:41:17:36:7e:88:2e:e6:ec:0e:7b:ff:08:0f:
         84:32:77:08:8b:c7:c9:ba:50:9b:70:a3:55:67:da:75:b4:f2:
         ef:9e:fc:e4:46:31:e3:5c:1b:9d:b3:32:ba:db:8a:c1:ea:c5:
         08:c0:7c:54:6b:1d:5f:35:d9:b8:8e:2d:22:89:1d:ee:1b:72:
         e7:e1:ec:7c:a2:4a:ef:72:b0:30:3f:11:8c:f9:a9:59:82:95:
         ce:7e:09:44:33:42:e4:9c:98:73:80:1e:cc:c6:d7:a9:ea:ab:
         e9:91:56:b9
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIBFTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4MkU1
QjI4QTIwRjRDNkE2MkE0NjEyRjZDNURGQjdBM0Q2NEQ5REVBMB4XDTIyMTEwNzA1
NDMwMFoXDTIzMTAxNTAxMzAwMlowMzExMC8GA1UEAxMoQkVCMjEyMTNCREMzMTg1
MUE5NTZCNzg3NDc3QzEwMTcxMThBQjZBQjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALOJGfaQScoApreKeaqDCIDhYQnGQS6iZuY8/CoGxOhleUsncUj8
FSIBCybGoiTEila645UcP4Oa65mNARjLdLReaQUFQM7DVKARab941/NXNM3wQ5nx
42TP8fgi3cSIXqqbyIKvFDB1/POWkqRSvG+h64MWpYNELmN40cZs2Q0X7+L2fgCb
nwLTmBgHjuxrqWKlJ8CLgZ3FWRek+GpgUGHUu0OqXkQTflKWebNecCdmaOyUVHMl
pJ1bRvV6BEqdTyyu4TAw5e+ihfeCepwgBJvz+vo9Z2BgxXdZYHPkyEo2aLTyBbD0
WFFJ643NobmRGB7XSgTAdfaYM3Amwg0wQjsCAwEAAaOCAiowggImMB0GA1UdDgQW
BBS+shITvcMYUalWt4dHfBAXEYq2qzAfBgNVHSMEGDAWgBSC5bKKIPTGpipGEvbF
37ej1k2d6jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAzNjcvZ3VXeWlpRDB4cVlxUmhMMnhkLTNvOVpObmVvLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvZ3VXeWlpRDB4cVlxUmhMMnhkLTNv
OVpObmVvLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMzY3L3ZySVNFNzNER0ZHcFZyZUhSM3dRRnhHS3Rxcy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAkBqHAAzANBgkqhkiG9w0BAQsFAAOCAQEAdkQOoSR1edRLfgvwkP98
acKrbIcCmadfw6zUgyYRw82Vv9Kp4F1hxryPn+52HmPeI7ooxB72GDGIgC/Z7MFN
ehkJSoV8EDhGbf3AFI1IvQyZ9w5dn4LbVIrRsEcJ0brkDxndto9nXcdty174Z/+H
H17ldxH9OmfIw/UVmRHFvt7cKU7b49s2K0hYlALaSyfIQXUOUaJBFzZ+iC7m7A57
/wgPhDJ3CIvHybpQm3CjVWfadbTy75785EYx41wbnbMyutuKwerFCMB8VGsdXzXZ
uI4tIokd7hty5+HsfKJK73KwMD8RjPmpWYKVzn4JRDNC5JyYc4AezMbXqeqr6ZFW
uQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:00 2024 by rpki-client on console-ams.rpki-client.org