Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/dH4Ql8pYUuHRCTOAs2dayBcWMcU.roa
File:                     dH4Ql8pYUuHRCTOAs2dayBcWMcU.roa (raw, json)
Hash identifier:          t5G0LefQ+YO27zTSZ/MWVuDiIwNiwySuwryzQcOHC+o=
Subject key identifier:   74:7E:10:97:CA:58:52:E1:D1:09:33:80:B3:67:5A:C8:17:16:31:C5
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0138
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/dH4Ql8pYUuHRCTOAs2dayBcWMcU.roa
Signing time:             Mon 01 Aug 2022 01:28:38 +0000
ROA not before:           Mon 01 Aug 2022 01:28:38 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     7684
IP address blocks:        112.78.212.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 312 (0x138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Aug  1 01:28:38 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=747E1097CA5852E1D1093380B3675AC8171631C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3c:4e:f8:06:42:a1:65:90:51:5d:bc:3b:b2:
                    c7:e0:b0:98:56:8c:81:be:5f:ad:b1:8f:40:b7:87:
                    e7:27:4d:68:3c:5f:9c:5e:fb:39:07:ea:47:4f:c4:
                    6e:65:5f:d2:04:ae:1a:92:c1:cd:70:f9:4f:73:c5:
                    00:04:14:85:70:79:28:76:42:63:69:78:2c:d6:81:
                    90:af:c3:9d:05:b6:af:de:09:25:b5:2e:61:c7:76:
                    12:18:6b:1e:80:2a:ba:be:b2:3f:2d:67:74:80:49:
                    48:9b:79:34:6b:77:3c:1f:87:a5:f1:27:1f:f9:87:
                    75:6a:c2:96:30:33:95:d3:77:90:8d:bd:06:68:0c:
                    a1:d0:03:10:a4:63:38:5a:a2:c8:e9:4f:20:01:8b:
                    d9:7a:07:14:70:ba:37:ce:f6:de:68:de:bd:14:5c:
                    42:c2:2c:a9:54:60:67:56:c7:7d:ca:fc:b5:9c:61:
                    66:d6:51:40:45:5b:e2:aa:68:e0:59:8e:39:fc:a3:
                    d2:e9:9d:f5:76:a0:43:b7:3d:b0:6f:74:ce:7e:6b:
                    44:e2:ce:31:30:4f:8f:bc:29:cf:20:d4:58:42:3f:
                    5a:71:83:3a:38:45:a1:b0:2b:56:f6:b2:6a:33:fb:
                    7d:56:a4:9b:44:1b:24:a3:60:7c:80:f3:c2:9b:ee:
                    96:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:7E:10:97:CA:58:52:E1:D1:09:33:80:B3:67:5A:C8:17:16:31:C5
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/dH4Ql8pYUuHRCTOAs2dayBcWMcU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:08:83:9d:8c:38:03:89:44:bd:64:86:8c:bb:9f:3e:7c:07:
         bd:8a:ee:95:bc:1a:66:7d:96:76:19:fc:67:0b:c2:20:d3:e0:
         2b:16:95:b2:ea:3c:9c:9d:87:0e:fa:32:30:2f:ba:f4:2b:ad:
         a8:94:d8:40:f9:f7:b3:f4:78:8c:7f:4f:b8:c2:c3:11:12:1f:
         99:c0:00:ad:54:21:fc:71:f0:1c:4c:00:31:b6:ae:dc:e5:45:
         36:cb:9a:50:10:b1:46:8e:42:b9:74:b7:4b:87:d7:80:41:e1:
         59:74:2a:2a:9c:7d:6a:50:db:22:d8:12:ff:c0:0f:d9:e5:f8:
         2c:b7:cd:74:9a:07:ce:03:5c:db:ec:3a:b0:8a:38:1f:92:87:
         c4:1d:dd:5b:62:53:af:6b:88:b8:e1:32:0f:f4:bb:f4:c8:54:
         15:0d:f3:0a:44:9b:34:f8:c8:01:c5:10:ba:11:ba:2e:8e:0f:
         da:e9:dc:2e:00:44:66:75:70:3d:b5:c4:24:a2:4a:29:da:90:
         cd:8f:0f:69:b0:41:21:67:d8:c9:72:07:67:6a:64:c0:f9:ea:
         8e:e2:df:ae:bd:a3:1c:96:c3:d6:3e:32:d8:81:c3:a8:20:64:
         bf:38:29:26:7d:36:92:f1:aa:4c:26:1a:92:6c:3a:98:e6:1f:
         54:9b:d0:17
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICATgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz
MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yMjA4MDEw
MTI4MzhaFw0yMzA3MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDc0N0UxMDk3Q0E1ODUy
RTFEMTA5MzM4MEIzNjc1QUM4MTcxNjMxQzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQPE74BkKhZZBRXbw7ssfgsJhWjIG+X62xj0C3h+cnTWg8X5xe
+zkH6kdPxG5lX9IErhqSwc1w+U9zxQAEFIVweSh2QmNpeCzWgZCvw50Ftq/eCSW1
LmHHdhIYax6AKrq+sj8tZ3SASUibeTRrdzwfh6XxJx/5h3VqwpYwM5XTd5CNvQZo
DKHQAxCkYzhaosjpTyABi9l6BxRwujfO9t5o3r0UXELCLKlUYGdWx33K/LWcYWbW
UUBFW+KqaOBZjjn8o9LpnfV2oEO3PbBvdM5+a0TizjEwT4+8Kc8g1FhCP1pxgzo4
RaGwK1b2smoz+31WpJtEGySjYHyA88Kb7pbPAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUdH4Ql8pYUuHRCTOAs2dayBcWMcUwHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK
PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG
RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMDI0Ny9kSDRRbDhwWVV1SFJDVE9BczJkYXlCY1dNY1Uu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAcE7UMA0GCSqGSIb3DQEBCwUAA4IBAQBUCIOdjDgDiUS9ZIaMu58+
fAe9iu6VvBpmfZZ2GfxnC8Ig0+ArFpWy6jycnYcO+jIwL7r0K62olNhA+fez9HiM
f0+4wsMREh+ZwACtVCH8cfAcTAAxtq7c5UU2y5pQELFGjkK5dLdLh9eAQeFZdCoq
nH1qUNsi2BL/wA/Z5fgst810mgfOA1zb7DqwijgfkofEHd1bYlOva4i44TIP9Lv0
yFQVDfMKRJs0+MgBxRC6Eboujg/a6dwuAERmdXA9tcQkokop2pDNjw9psEEhZ9jJ
cgdnamTA+eqO4t+uvaMclsPWPjLYgcOoIGS/OCkmfTaS8apMJhqSbDqY5h9Um9AX
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org