Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10207/acDEOE3eeo4uJlaLgnxKzosl8z4.roa
File:                     acDEOE3eeo4uJlaLgnxKzosl8z4.roa (raw, json)
Hash identifier:          kvpuvF0qNng8ARzyjsMygPvayt+Is3Hr3sVLtPFUkCY=
Subject key identifier:   69:C0:C4:38:4D:DE:7A:8E:2E:26:56:8B:82:7C:4A:CE:8B:25:F3:3E
Certificate issuer:       /CN=C3A03D286196CB3388028B4047BE4F1F9B0FEBAC
Certificate serial:       3C
Authority key identifier: C3:A0:3D:28:61:96:CB:33:88:02:8B:40:47:BE:4F:1F:9B:0F:EB:AC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/acDEOE3eeo4uJlaLgnxKzosl8z4.roa
Signing time:             Sun 01 May 2022 01:29:52 +0000
ROA not before:           Sun 01 May 2022 01:29:52 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     55392
IP address blocks:        115.69.236.0/22 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3A03D286196CB3388028B4047BE4F1F9B0FEBAC
        Validity
            Not Before: May  1 01:29:52 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=69C0C4384DDE7A8E2E26568B827C4ACE8B25F33E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:02:fe:d8:05:7e:69:f9:a2:d5:e6:69:52:52:
                    a6:c5:2a:dc:57:d4:02:29:31:45:34:57:e2:b8:80:
                    b7:e9:8e:d7:9d:a5:e8:03:92:4b:31:f1:ba:7e:ed:
                    ec:92:fc:c5:70:57:44:4f:0e:c6:9f:d0:f5:a6:bf:
                    00:b6:6a:5b:94:c4:1b:3e:4b:0a:7e:02:2b:c0:56:
                    a5:fe:a6:a4:18:84:b0:74:21:70:65:34:aa:44:53:
                    98:c6:3f:59:63:32:3f:cc:6f:44:eb:f0:ef:e1:ae:
                    05:f9:5c:f7:0e:8a:ba:78:2f:d5:16:04:47:df:fe:
                    86:d7:1a:01:e3:de:7d:35:c9:4c:92:d3:ef:33:6d:
                    17:ae:0b:52:e5:83:c7:79:85:95:8c:b0:a9:dd:5b:
                    ad:e0:e8:ca:ac:a9:38:24:a4:6c:cd:f4:b8:5a:80:
                    4d:41:4b:63:9b:21:dc:0a:db:49:45:e0:65:35:79:
                    ac:97:19:27:a9:ec:f9:b3:67:8a:d7:2d:67:0d:94:
                    cb:e6:30:91:3c:e5:29:53:bd:90:0d:0c:d1:93:7a:
                    20:da:84:19:ce:51:78:58:e0:f5:7b:e9:93:1e:7f:
                    1e:1f:7a:40:93:b4:52:07:82:71:f4:44:9a:15:c7:
                    e1:78:0f:96:46:17:90:9d:ea:fa:59:aa:98:59:5b:
                    d1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C0:C4:38:4D:DE:7A:8E:2E:26:56:8B:82:7C:4A:CE:8B:25:F3:3E
            X509v3 Authority Key Identifier:
                keyid:C3:A0:3D:28:61:96:CB:33:88:02:8B:40:47:BE:4F:1F:9B:0F:EB:AC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/acDEOE3eeo4uJlaLgnxKzosl8z4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.69.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:58:07:dd:f3:dc:11:a5:b5:9a:c3:43:4f:77:39:3a:d1:33:
         0c:a2:ea:d4:71:82:a9:83:21:7a:a3:2a:ab:87:04:b6:41:45:
         f5:b2:18:e1:71:48:f2:db:ed:4e:6f:56:8c:d0:46:7e:db:af:
         3d:64:6d:e4:6f:cd:39:e1:74:66:3c:51:6c:81:ea:45:66:40:
         0a:fa:ad:68:b9:24:79:7b:d7:dd:13:57:45:b8:e3:e1:56:06:
         c1:d2:ff:c8:d4:66:d1:6b:00:04:ba:54:e5:95:0b:83:13:ca:
         72:0a:db:4d:21:f1:6b:f0:96:d2:bc:dd:a9:ba:ce:60:19:42:
         66:67:a2:a9:0e:d3:71:50:68:37:cb:0b:24:7a:d3:21:a3:ff:
         bc:0e:1e:0c:26:0e:b1:24:a1:c8:8d:98:08:0b:9d:c1:9e:35:
         d5:55:be:ec:2c:39:c1:b7:62:72:28:1a:72:ee:d5:e6:c6:5e:
         41:d2:76:94:95:b9:a1:cc:5d:d5:d6:41:2d:5e:8f:c9:d9:37:
         b1:f2:a2:24:bd:4a:e9:a8:ff:74:cd:c3:cd:73:f7:ad:6b:26:
         4e:8b:05:01:ae:16:99:22:fa:df:a8:db:67:03:67:66:ce:d1:
         2b:fc:7f:78:6a:ae:bd:6d:3b:ce:f1:b7:bb:49:83:f9:51:6d:
         e7:d1:23:45
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBPDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDM0Ew
M0QyODYxOTZDQjMzODgwMjhCNDA0N0JFNEYxRjlCMEZFQkFDMB4XDTIyMDUwMTAx
Mjk1MloXDTIzMDQyNzA5NTIzNFowMzExMC8GA1UEAxMoNjlDMEM0Mzg0RERFN0E4
RTJFMjY1NjhCODI3QzRBQ0U4QjI1RjMzRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALAC/tgFfmn5otXmaVJSpsUq3FfUAikxRTRX4riAt+mO152l6AOS
SzHxun7t7JL8xXBXRE8Oxp/Q9aa/ALZqW5TEGz5LCn4CK8BWpf6mpBiEsHQhcGU0
qkRTmMY/WWMyP8xvROvw7+GuBflc9w6Kungv1RYER9/+htcaAePefTXJTJLT7zNt
F64LUuWDx3mFlYywqd1breDoyqypOCSkbM30uFqATUFLY5sh3ArbSUXgZTV5rJcZ
J6ns+bNnitctZw2Uy+YwkTzlKVO9kA0M0ZN6INqEGc5ReFjg9Xvpkx5/Hh96QJO0
UgeCcfREmhXH4XgPlkYXkJ3q+lmqmFlb0T8CAwEAAaOCAigwggIkMB0GA1UdDgQW
BBRpwMQ4Td56ji4mVouCfErOiyXzPjAfBgNVHSMEGDAWgBTDoD0oYZbLM4gCi0BH
vk8fmw/rrDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTAyMDcvdzZBOUtHR1d5ek9JQW90QVI3NVBINXNQNjZ3LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdzZBOUtHR1d5ek9JQW90QVI3NVBI
NXNQNjZ3LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzEwMjA3L2FjREVPRTNlZW80dUpsYUxnbnhLem9zbDh6NC5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAJzRewwDQYJKoZIhvcNAQELBQADggEBAJNYB93z3BGltZrDQ093OTrR
Mwyi6tRxgqmDIXqjKquHBLZBRfWyGOFxSPLb7U5vVozQRn7brz1kbeRvzTnhdGY8
UWyB6kVmQAr6rWi5JHl7190TV0W44+FWBsHS/8jUZtFrAAS6VOWVC4MTynIK200h
8WvwltK83am6zmAZQmZnoqkO03FQaDfLCyR60yGj/7wOHgwmDrEkociNmAgLncGe
NdVVvuwsOcG3YnIoGnLu1ebGXkHSdpSVuaHMXdXWQS1ej8nZN7HyoiS9Sumo/3TN
w81z961rJk6LBQGuFpki+t+o22cDZ2bO0Sv8f3hqrr1tO87xt7tJg/lRbefRI0U=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:31 2024 by rpki-client on console-ams.rpki-client.org