Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Mc5lFTol78W2ikgZTeimo42PuFE.roa
File:                     Mc5lFTol78W2ikgZTeimo42PuFE.roa (raw, json)
Hash identifier:          ZIum60lEDNBQlrpYl3lxxrfrnu/lpPbQUhAiOD5+xdU=
Subject key identifier:   31:CE:65:15:3A:25:EF:C5:B6:8A:48:19:4D:E8:A6:A3:8D:8F:B8:51
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0141
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Mc5lFTol78W2ikgZTeimo42PuFE.roa
Signing time:             Thu 01 Sep 2022 01:28:28 +0000
ROA not before:           Thu 01 Sep 2022 01:28:28 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     7684
IP address blocks:        182.48.14.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 321 (0x141)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep  1 01:28:28 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=31CE65153A25EFC5B68A48194DE8A6A38D8FB851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:00:22:4a:be:40:3e:cf:41:e2:33:da:08:25:
                    66:19:1a:89:8c:0e:ce:5a:aa:93:a9:07:46:dc:6e:
                    65:a7:bf:f1:f9:b6:ac:d6:59:9e:16:69:4c:9a:41:
                    72:e0:29:61:ed:eb:10:84:6f:2f:23:2e:5c:09:d2:
                    f2:63:21:3c:9c:88:71:92:f1:46:df:6b:00:05:dd:
                    36:64:e5:5d:5e:21:87:4e:7a:eb:3b:51:3f:06:e4:
                    7d:d3:13:87:5c:e6:45:d2:38:71:ae:2a:bb:b0:9c:
                    db:79:84:b3:93:72:1e:82:3a:7f:4c:10:2d:15:e9:
                    42:52:9d:2a:25:c4:0b:40:d3:9d:ec:8d:94:b7:ba:
                    d8:28:9b:18:c9:e7:56:74:af:7b:81:92:61:e1:2e:
                    23:52:9b:73:4b:d5:f6:28:0f:4f:70:e9:8b:41:26:
                    33:59:8f:b7:8d:b9:c5:cb:d9:99:d7:43:2f:a9:c4:
                    a4:d3:d8:5f:a3:fe:13:e9:ae:1d:a7:d1:98:10:3f:
                    72:80:ae:fa:be:11:c2:7c:12:91:d5:f7:54:ef:56:
                    ba:c2:b6:e5:d3:bd:fd:cf:78:66:a8:a5:0f:20:f8:
                    76:d1:ef:e4:60:bf:db:0b:31:c1:0a:da:1f:17:be:
                    3f:e9:ca:e9:7f:e6:0d:cf:c6:16:18:e9:95:5b:a2:
                    7e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:CE:65:15:3A:25:EF:C5:B6:8A:48:19:4D:E8:A6:A3:8D:8F:B8:51
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Mc5lFTol78W2ikgZTeimo42PuFE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:d0:57:6b:75:c9:62:8c:35:55:35:d4:2e:ba:15:ed:39:71:
         09:c0:0f:3b:fe:29:66:ab:26:db:80:3e:b2:47:5a:54:3b:4d:
         c7:b9:16:cb:23:8c:f6:10:e9:6f:f6:a3:17:14:be:7f:f5:83:
         15:65:ba:56:9d:df:06:60:e0:de:36:88:8d:4d:2f:25:d5:f7:
         62:94:ae:fb:14:96:42:65:9b:14:37:46:bb:72:ce:3d:96:10:
         1e:c0:d4:a5:6f:df:90:9b:c4:58:bd:56:aa:7b:cc:a4:20:b0:
         fb:84:7e:21:40:eb:2a:78:f8:f1:01:27:b4:e5:69:8f:b0:c8:
         e1:ca:73:67:59:a6:c0:2e:a9:83:71:3b:72:51:ed:1b:a1:a2:
         0c:a2:01:1b:fa:3c:a5:bb:b0:b7:49:04:e7:00:2c:46:12:20:
         9a:0d:47:ac:4f:08:6b:5c:40:4f:9b:46:3f:9f:44:b8:87:8c:
         71:af:f6:2e:8e:a5:62:23:5a:11:bf:6b:e5:73:9e:bc:f0:d3:
         29:ab:a3:a0:9f:43:c4:7b:a3:d5:11:e1:d3:0d:33:94:cc:70:
         99:30:a2:8b:cd:98:7e:f9:ad:2f:9e:77:ea:8f:81:14:1c:e1:
         11:f7:33:33:8e:90:5d:d3:b9:82:fb:ae:7e:c5:4b:24:9f:ff:
         29:67:da:99
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz
MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yMjA5MDEw
MTI4MjhaFw0yMzA4MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDMxQ0U2NTE1M0EyNUVG
QzVCNjhBNDgxOTRERThBNkEzOEQ4RkI4NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLACJKvkA+z0HiM9oIJWYZGomMDs5aqpOpB0bcbmWnv/H5tqzW
WZ4WaUyaQXLgKWHt6xCEby8jLlwJ0vJjITyciHGS8UbfawAF3TZk5V1eIYdOeus7
UT8G5H3TE4dc5kXSOHGuKruwnNt5hLOTch6COn9MEC0V6UJSnSolxAtA053sjZS3
utgomxjJ51Z0r3uBkmHhLiNSm3NL1fYoD09w6YtBJjNZj7eNucXL2ZnXQy+pxKTT
2F+j/hPprh2n0ZgQP3KArvq+EcJ8EpHV91TvVrrCtuXTvf3PeGaopQ8g+HbR7+Rg
v9sLMcEK2h8Xvj/pyul/5g3PxhYY6ZVbon51AgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUMc5lFTol78W2ikgZTeimo42PuFEwHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK
PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG
RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMDI0Ny9NYzVsRlRvbDc4VzJpa2daVGVpbW80MlB1RkUu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAtjAOMA0GCSqGSIb3DQEBCwUAA4IBAQBd0FdrdclijDVVNdQuuhXt
OXEJwA87/ilmqybbgD6yR1pUO03HuRbLI4z2EOlv9qMXFL5/9YMVZbpWnd8GYODe
NoiNTS8l1fdilK77FJZCZZsUN0a7cs49lhAewNSlb9+Qm8RYvVaqe8ykILD7hH4h
QOsqePjxASe05WmPsMjhynNnWabALqmDcTtyUe0boaIMogEb+jylu7C3SQTnACxG
EiCaDUesTwhrXEBPm0Y/n0S4h4xxr/YujqViI1oRv2vlc5688NMpq6Ogn0PEe6PV
EeHTDTOUzHCZMKKLzZh++a0vnnfqj4EUHOER9zMzjpBd07mC+65+xUskn/8pZ9qZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org