Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1003/7DEjLe7zIA-Davvhw3MnMQAduP4.roa
File:                     7DEjLe7zIA-Davvhw3MnMQAduP4.roa (raw, json)
Hash identifier:          VgfZMbcPoZb527Y9B0fffcMPGuxyXJuwEd8nvsLYzII=
Subject key identifier:   EC:31:23:2D:EE:F3:20:0F:83:6A:FB:E1:C3:73:27:31:00:1D:B8:FE
Certificate issuer:       /CN=8ACDAB1E1EA633BA8AD18A2ACB72360E9280C4B6
Certificate serial:       2C
Authority key identifier: 8A:CD:AB:1E:1E:A6:33:BA:8A:D1:8A:2A:CB:72:36:0E:92:80:C4:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/is2rHh6mM7qK0Yoqy3I2DpKAxLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/7DEjLe7zIA-Davvhw3MnMQAduP4.roa
Signing time:             Mon 14 Nov 2022 07:35:57 +0000
ROA not before:           Mon 14 Nov 2022 07:35:57 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2515
IP address blocks:        202.12.30.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ACDAB1E1EA633BA8AD18A2ACB72360E9280C4B6
        Validity
            Not Before: Nov 14 07:35:57 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=EC31232DEEF3200F836AFBE1C3732731001DB8FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f5:bd:c3:b2:ba:e1:e7:ea:1e:07:cd:be:c4:
                    ce:7b:9d:60:d9:a4:93:78:5d:9c:92:ea:73:a3:29:
                    36:da:38:93:a3:5c:24:31:31:61:5d:7e:4f:55:cc:
                    f5:3c:c9:bd:9d:0f:89:49:d5:b6:41:a5:42:ff:31:
                    e0:2f:9c:26:c0:74:e2:cc:04:61:0e:f2:7f:fb:a9:
                    86:55:e1:19:aa:03:05:ba:15:7d:e5:c2:e7:bc:93:
                    d2:19:46:23:e8:5f:57:fb:55:7a:f6:b1:8c:5f:01:
                    d2:9c:d7:83:f5:94:ce:a2:a6:21:02:d8:b3:9c:4e:
                    f2:9a:ea:d0:4f:97:db:82:35:b3:9c:f8:03:8c:79:
                    55:98:70:8b:60:93:c5:50:3e:35:c3:3b:96:49:11:
                    dd:08:e3:6e:79:2a:90:10:76:0d:ea:47:37:c6:4b:
                    ba:60:a5:ba:b7:8b:2f:0b:6b:3b:c9:60:17:9b:a6:
                    0e:0a:5d:e0:0e:11:4b:00:ad:69:95:78:0b:44:6a:
                    b1:9a:55:e8:3c:73:d1:a3:32:2a:fb:36:92:b9:39:
                    d6:05:54:cf:56:9b:e8:be:6f:53:6e:7c:c1:43:d9:
                    b6:14:41:f3:9a:0f:ae:6b:1c:d5:98:02:88:cd:df:
                    91:5a:53:48:59:58:29:5e:46:16:f0:92:8e:ce:54:
                    c6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:31:23:2D:EE:F3:20:0F:83:6A:FB:E1:C3:73:27:31:00:1D:B8:FE
            X509v3 Authority Key Identifier:
                keyid:8A:CD:AB:1E:1E:A6:33:BA:8A:D1:8A:2A:CB:72:36:0E:92:80:C4:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/is2rHh6mM7qK0Yoqy3I2DpKAxLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/is2rHh6mM7qK0Yoqy3I2DpKAxLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/7DEjLe7zIA-Davvhw3MnMQAduP4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.12.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:cd:6b:18:4b:71:e0:e1:26:b3:21:c3:42:e9:39:11:d7:91:
         22:5f:4d:1b:e2:a6:f0:95:e6:7c:ff:8b:53:4f:26:32:53:5d:
         e4:b5:76:72:70:5b:14:27:e8:0a:cc:50:b3:ff:f5:6a:7d:6e:
         b7:98:a8:d9:6f:b6:34:a1:37:8e:5a:c2:88:63:b2:1d:d1:31:
         e1:70:67:c1:66:b0:95:52:22:ce:c3:db:6a:4d:03:4c:b8:f1:
         10:ea:90:b6:64:86:88:ee:ef:22:11:c6:20:a7:6c:c9:6a:c1:
         6d:28:6f:13:88:04:40:d5:18:cc:2b:a9:55:f5:fb:95:e8:ef:
         54:46:19:31:86:39:f3:71:21:2f:0b:b7:3d:ac:5e:11:9c:3c:
         83:29:e2:f7:63:b8:1a:96:3f:d5:fc:ca:33:bf:a1:d9:e5:d8:
         cd:42:1c:55:2e:14:ea:c8:ca:61:89:f6:8e:8e:5f:6b:6d:16:
         70:b1:17:95:a3:67:27:9c:fe:f9:9a:43:17:af:59:6f:60:e8:
         50:49:d5:ed:c0:fd:ac:b7:51:a0:c7:f8:30:74:9b:45:a5:40:
         47:77:58:ea:8d:86:ba:e6:b7:ab:ce:c9:d7:08:57:bf:cc:12:
         2f:3e:be:94:6b:cc:ff:e0:6d:83:3c:2e:7c:70:22:ef:ea:83:
         f3:04:36:09
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIBLDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4QUNE
QUIxRTFFQTYzM0JBOEFEMThBMkFDQjcyMzYwRTkyODBDNEI2MB4XDTIyMTExNDA3
MzU1N1oXDTIzMTAxNTAxMzAwMlowMzExMC8GA1UEAxMoRUMzMTIzMkRFRUYzMjAw
RjgzNkFGQkUxQzM3MzI3MzEwMDFEQjhGRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM71vcOyuuHn6h4Hzb7EznudYNmkk3hdnJLqc6MpNto4k6NcJDEx
YV1+T1XM9TzJvZ0PiUnVtkGlQv8x4C+cJsB04swEYQ7yf/uphlXhGaoDBboVfeXC
57yT0hlGI+hfV/tVevaxjF8B0pzXg/WUzqKmIQLYs5xO8prq0E+X24I1s5z4A4x5
VZhwi2CTxVA+NcM7lkkR3QjjbnkqkBB2DepHN8ZLumClureLLwtrO8lgF5umDgpd
4A4RSwCtaZV4C0RqsZpV6Dxz0aMyKvs2krk51gVUz1ab6L5vU258wUPZthRB85oP
rmsc1ZgCiM3fkVpTSFlYKV5GFvCSjs5Uxm0CAwEAAaOCAiYwggIiMB0GA1UdDgQW
BBTsMSMt7vMgD4Nq++HDcycxAB24/jAfBgNVHSMEGDAWgBSKzaseHqYzuorRiirL
cjYOkoDEtjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTAwMy9pczJySGg2bU03cUswWW9xeTNJMkRwS0F4TFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9pczJySGg2bU03cUswWW9xeTNJMkRw
S0F4TFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI
KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTAwMy83REVqTGU3eklBLURhdnZodzNNbk1RQWR1UDQucm9h
MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv
cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQAygweMA0GCSqGSIb3DQEBCwUAA4IBAQAkzWsYS3Hg4SazIcNC6TkR15Ei
X00b4qbwleZ8/4tTTyYyU13ktXZycFsUJ+gKzFCz//VqfW63mKjZb7Y0oTeOWsKI
Y7Id0THhcGfBZrCVUiLOw9tqTQNMuPEQ6pC2ZIaI7u8iEcYgp2zJasFtKG8TiARA
1RjMK6lV9fuV6O9URhkxhjnzcSEvC7c9rF4RnDyDKeL3Y7galj/V/Mozv6HZ5djN
QhxVLhTqyMphifaOjl9rbRZwsReVo2cnnP75mkMXr1lvYOhQSdXtwP2st1Ggx/gw
dJtFpUBHd1jqjYa65rerzsnXCFe/zBIvPr6Ua8z/4G2DPC58cCLv6oPzBDYJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org