Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/SReavV5vDGPSLrURa9zlFbKuJ1Q.roa
File:                     SReavV5vDGPSLrURa9zlFbKuJ1Q.roa (raw, json)
Hash identifier:          x9c2mAdswVtEgxyspNODsMhyy0hEflGKsj64tKyeXNw=
Subject key identifier:   49:17:9A:BD:5E:6F:0C:63:D2:2E:B5:11:6B:DC:E5:15:B2:AE:27:54
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       016C
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/SReavV5vDGPSLrURa9zlFbKuJ1Q.roa
Signing time:             Thu 01 Dec 2022 01:28:28 +0000
ROA not before:           Thu 01 Dec 2022 01:28:28 +0000
ROA not after:            Wed 15 Nov 2023 01:30:02 +0000
asID:                     7684
IP address blocks:        49.212.65.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 364 (0x16c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Dec  1 01:28:28 2022 GMT
            Not After : Nov 15 01:30:02 2023 GMT
        Subject: CN=49179ABD5E6F0C63D22EB5116BDCE515B2AE2754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9a:7c:9d:f2:ba:e1:c1:b2:e5:2b:8b:5f:d8:
                    68:c7:af:6f:85:7d:92:5c:ae:39:05:72:b0:f9:39:
                    4a:54:49:db:f5:1d:3b:d0:60:77:41:9d:30:d8:3e:
                    6e:41:cf:44:60:42:b4:2f:f1:79:0d:da:0c:8d:07:
                    df:41:0f:43:46:71:cb:d8:18:2d:d4:1c:f0:2f:c3:
                    a1:f7:5e:71:c6:fe:4a:69:ff:f3:e9:47:cd:72:fd:
                    3d:4e:67:de:0a:2e:24:4b:84:35:62:9a:d9:18:3b:
                    1e:78:51:ee:5d:8c:17:47:53:2c:e9:c7:ef:93:f4:
                    d2:92:3e:1f:5c:8f:c3:74:00:9a:2f:c5:b9:8a:44:
                    d7:40:c1:fc:f3:4a:4e:3d:69:9e:4e:f5:bc:98:d6:
                    b0:bc:3a:c0:93:6b:df:68:0b:ff:4a:21:be:44:80:
                    ca:d1:8b:18:98:b0:28:7f:2a:9a:81:11:3f:e2:da:
                    f2:df:c9:05:65:71:98:3d:54:cd:66:37:cf:17:bf:
                    bd:cc:6d:a8:76:c4:b8:21:b9:11:7a:88:81:be:41:
                    ba:14:79:fd:f2:9b:3c:31:36:99:31:bf:41:aa:7d:
                    7a:59:14:a7:9a:e1:15:69:3e:49:8c:0d:da:f5:16:
                    97:6a:7a:6f:42:64:25:de:86:bc:59:56:bc:eb:a1:
                    59:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:17:9A:BD:5E:6F:0C:63:D2:2E:B5:11:6B:DC:E5:15:B2:AE:27:54
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/SReavV5vDGPSLrURa9zlFbKuJ1Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.212.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:03:3c:86:b8:92:7a:0b:9d:d6:c6:89:c9:62:50:41:52:d1:
         46:80:d4:64:80:9b:fe:6b:a2:32:01:66:e6:9e:39:95:3e:5b:
         70:10:23:63:2d:a7:2a:11:14:92:f3:9f:18:c6:1f:3b:78:1d:
         78:7c:4b:e8:e6:b0:09:a4:81:a7:ed:b5:f9:ac:dd:1e:81:0c:
         83:b6:81:d5:94:fb:a7:cb:22:cb:a8:21:0b:63:ec:a5:d9:7f:
         df:e3:1c:45:96:1d:87:e4:dc:07:37:0c:2b:ad:22:3f:ae:a8:
         5e:56:f6:bf:4c:c1:2e:89:d0:3b:2f:9e:ae:a2:fa:1e:cb:c5:
         ef:da:f5:b6:e4:27:55:61:36:6d:eb:45:bb:b9:fe:3e:4c:83:
         98:23:c1:b8:11:61:b8:d6:ce:c4:5d:67:30:73:49:d7:c5:7f:
         f8:c8:0d:f6:c4:37:fe:d3:91:b6:ea:33:8d:f5:35:ae:9f:40:
         e1:d3:53:ac:71:c0:91:62:43:76:48:a8:8f:c4:5e:4a:36:6f:
         97:69:25:6b:33:dd:fe:d8:ae:7f:b9:6e:44:e0:cc:2f:13:25:
         8e:e1:9f:34:17:8b:41:5b:81:46:b4:d4:a6:8c:b0:b9:ef:3e:
         19:ec:55:6d:47:b6:01:b7:81:d7:a2:87:b1:de:c4:bb:06:1f:
         d8:e4:d1:bc
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAWwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz
MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yMjEyMDEw
MTI4MjhaFw0yMzExMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQ5MTc5QUJENUU2RjBD
NjNEMjJFQjUxMTZCRENFNTE1QjJBRTI3NTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVmnyd8rrhwbLlK4tf2GjHr2+FfZJcrjkFcrD5OUpUSdv1HTvQ
YHdBnTDYPm5Bz0RgQrQv8XkN2gyNB99BD0NGccvYGC3UHPAvw6H3XnHG/kpp//Pp
R81y/T1OZ94KLiRLhDVimtkYOx54Ue5djBdHUyzpx++T9NKSPh9cj8N0AJovxbmK
RNdAwfzzSk49aZ5O9byY1rC8OsCTa99oC/9KIb5EgMrRixiYsCh/KpqBET/i2vLf
yQVlcZg9VM1mN88Xv73Mbah2xLghuRF6iIG+QboUef3ymzwxNpkxv0GqfXpZFKea
4RVpPkmMDdr1Fpdqem9CZCXehrxZVrzroVlJAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUSReavV5vDGPSLrURa9zlFbKuJ1QwHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK
PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG
RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMDI0Ny9TUmVhdlY1dkRHUFNMclVSYTl6bEZiS3VKMVEu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAMdRBMA0GCSqGSIb3DQEBCwUAA4IBAQBsAzyGuJJ6C53WxonJYlBB
UtFGgNRkgJv+a6IyAWbmnjmVPltwECNjLacqERSS858Yxh87eB14fEvo5rAJpIGn
7bX5rN0egQyDtoHVlPunyyLLqCELY+yl2X/f4xxFlh2H5NwHNwwrrSI/rqheVva/
TMEuidA7L56uovoey8Xv2vW25CdVYTZt60W7uf4+TIOYI8G4EWG41s7EXWcwc0nX
xX/4yA32xDf+05G26jON9TWun0Dh01OsccCRYkN2SKiPxF5KNm+XaSVrM93+2K5/
uW5E4MwvEyWO4Z80F4tBW4FGtNSmjLC57z4Z7FVtR7YBt4HXooex3sS7Bh/Y5NG8
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org