Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10762/coMVZ9QI-Y77NUKWLj022YR3khQ.roa
File:                     coMVZ9QI-Y77NUKWLj022YR3khQ.roa (raw, json)
Hash identifier:          ZFnFHIovdUaeAaPtv4Qa249Qo7wAmO43uevyGuSJPlI=
Subject key identifier:   72:83:15:67:D4:08:F9:8E:FB:35:42:96:2E:3D:36:D9:84:77:92:14
Certificate issuer:       /CN=28393FAE129B501824696BAE24B64734A203C376
Certificate serial:       3D
Authority key identifier: 28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/coMVZ9QI-Y77NUKWLj022YR3khQ.roa
Signing time:             Thu 01 Dec 2022 01:28:49 +0000
ROA not before:           Thu 01 Dec 2022 01:28:49 +0000
ROA not after:            Wed 15 Nov 2023 01:30:02 +0000
asID:                     7514
IP address blocks:        211.13.192.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28393FAE129B501824696BAE24B64734A203C376
        Validity
            Not Before: Dec  1 01:28:49 2022 GMT
            Not After : Nov 15 01:30:02 2023 GMT
        Subject: CN=72831567D408F98EFB3542962E3D36D984779214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:85:07:69:8d:6d:69:d2:5c:a8:b5:67:f2:be:
                    4f:74:69:08:ad:d5:94:66:4a:62:fa:96:29:4a:c7:
                    49:43:12:48:56:bc:a7:20:55:ec:92:cd:96:0a:e3:
                    e4:5c:5b:1b:87:40:e8:29:f1:6b:9e:c5:46:67:60:
                    d9:be:5f:49:03:24:fe:9d:02:5b:7e:78:31:55:d9:
                    86:89:c3:b0:73:63:88:42:12:35:ec:df:56:11:3c:
                    ad:64:09:3f:47:a9:56:ef:fa:e7:04:3e:e7:6e:97:
                    6c:a4:a2:19:94:0f:5a:79:32:26:a9:7b:f1:1f:a9:
                    5c:cb:a8:25:2e:9f:c5:a0:86:43:22:b8:73:6b:46:
                    34:1d:58:c0:d5:2b:20:a7:ab:62:a9:8e:ec:67:49:
                    be:07:05:52:0f:23:44:cd:bb:46:8e:34:0e:31:8e:
                    db:13:23:df:ac:ac:88:58:18:80:f7:be:e8:04:da:
                    f4:78:e2:c9:4a:5c:91:47:21:5c:60:69:e7:9e:54:
                    ad:e7:ee:7b:4b:36:dd:c9:f5:2c:0c:e6:36:bf:c5:
                    5a:2e:cf:31:a8:48:18:d8:3a:14:51:69:49:c0:04:
                    79:53:fd:c2:91:20:11:1d:1b:2b:8c:2e:71:0b:5e:
                    bd:17:bb:14:3c:6a:17:10:d4:c1:ac:8d:48:f0:19:
                    79:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:83:15:67:D4:08:F9:8E:FB:35:42:96:2E:3D:36:D9:84:77:92:14
            X509v3 Authority Key Identifier:
                keyid:28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/coMVZ9QI-Y77NUKWLj022YR3khQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.13.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         82:44:fd:2e:3e:37:5a:89:f5:96:a5:71:4b:12:34:b3:33:a8:
         b3:d1:5a:57:f4:75:5e:f7:58:cd:4f:ca:c1:a9:cd:dc:cb:55:
         3b:d7:d1:17:44:14:05:9c:b3:ff:59:f1:29:e5:61:49:1c:14:
         9d:fc:b3:e6:fc:86:5a:a1:c4:36:e2:31:b8:a5:71:eb:6a:42:
         f5:a8:13:0b:d7:b9:63:09:47:76:54:2e:df:d3:17:f4:fd:29:
         14:dd:b7:5e:b3:3b:79:31:ee:d7:fb:0f:1d:4b:e5:08:64:ba:
         f5:2c:79:c9:63:e9:99:54:6e:d8:2b:4c:a0:67:d2:d7:1c:66:
         17:93:36:a9:d4:b0:f8:e1:75:4d:61:02:5c:68:6d:41:27:fc:
         dd:67:24:ba:25:c7:3a:64:1d:a7:0f:17:6d:75:18:e9:88:53:
         86:33:76:e0:30:8c:60:d5:df:9c:aa:21:6e:aa:1b:05:ad:4c:
         e8:da:e5:b3:05:11:e1:db:35:0e:7c:1f:7e:7a:4a:99:f6:ad:
         36:79:5b:7b:f9:cf:cd:88:17:9a:0d:d9:67:ee:34:0d:6f:8e:
         9d:26:84:2f:f2:d3:5a:2d:38:db:a8:55:12:1b:99:8e:94:fc:
         bc:d2:7c:98:98:6d:63:91:b4:4a:00:fc:b9:37:82:09:6a:8f:
         49:5c:21:fb
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBPTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyODM5
M0ZBRTEyOUI1MDE4MjQ2OTZCQUUyNEI2NDczNEEyMDNDMzc2MB4XDTIyMTIwMTAx
Mjg0OVoXDTIzMTExNTAxMzAwMlowMzExMC8GA1UEAxMoNzI4MzE1NjdENDA4Rjk4
RUZCMzU0Mjk2MkUzRDM2RDk4NDc3OTIxNDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM6FB2mNbWnSXKi1Z/K+T3RpCK3VlGZKYvqWKUrHSUMSSFa8pyBV
7JLNlgrj5FxbG4dA6Cnxa57FRmdg2b5fSQMk/p0CW354MVXZhonDsHNjiEISNezf
VhE8rWQJP0epVu/65wQ+526XbKSiGZQPWnkyJql78R+pXMuoJS6fxaCGQyK4c2tG
NB1YwNUrIKerYqmO7GdJvgcFUg8jRM27Ro40DjGO2xMj36ysiFgYgPe+6ATa9Hji
yUpckUchXGBp555Urefue0s23cn1LAzmNr/FWi7PMahIGNg6FFFpScAEeVP9wpEg
ER0bK4wucQtevRe7FDxqFxDUwayNSPAZeQECAwEAAaOCAigwggIkMB0GA1UdDgQW
BBRygxVn1Aj5jvs1QpYuPTbZhHeSFDAfBgNVHSMEGDAWgBQoOT+uEptQGCRpa64k
tkc0ogPDdjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTA3NjIvS0RrX3JoS2JVQmdrYVd1dUpMWkhOS0lEdzNZLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS0RrX3JoS2JVQmdrYVd1dUpMWkhO
S0lEdzNZLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzEwNzYyL2NvTVZaOVFJLVk3N05VS1dMajAyMllSM2toUS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAXTDcAwDQYJKoZIhvcNAQELBQADggEBAIJE/S4+N1qJ9ZalcUsSNLMz
qLPRWlf0dV73WM1PysGpzdzLVTvX0RdEFAWcs/9Z8SnlYUkcFJ38s+b8hlqhxDbi
MbilcetqQvWoEwvXuWMJR3ZULt/TF/T9KRTdt16zO3kx7tf7Dx1L5QhkuvUseclj
6ZlUbtgrTKBn0tccZheTNqnUsPjhdU1hAlxobUEn/N1nJLolxzpkHacPF211GOmI
U4YzduAwjGDV35yqIW6qGwWtTOja5bMFEeHbNQ58H356Spn2rTZ5W3v5z82IF5oN
2WfuNA1vjp0mhC/y01otONuoVRIbmY6U/LzSfJiYbWORtEoA/Lk3gglqj0lcIfs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org