Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/Vr23ARY28KWLUKRfGptp2Vas_sg.roa
File:                     Vr23ARY28KWLUKRfGptp2Vas_sg.roa (raw, json)
Hash identifier:          xWLPX/4lP0BLw9ywGRe6BUSaxtcAIUTgw6et266t71Q=
Subject key identifier:   56:BD:B7:01:16:36:F0:A5:8B:50:A4:5F:1A:9B:69:D9:56:AC:FE:C8
Certificate issuer:       /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial:       3B
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/Vr23ARY28KWLUKRfGptp2Vas_sg.roa
Signing time:             Mon 01 Aug 2022 01:28:43 +0000
ROA not before:           Mon 01 Aug 2022 01:28:43 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     7684
IP address blocks:        153.120.0.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
        Validity
            Not Before: Aug  1 01:28:43 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=56BDB7011636F0A58B50A45F1A9B69D956ACFEC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6e:22:e9:15:1e:a3:82:d0:7a:ec:ce:4d:02:
                    68:98:1b:93:db:fb:f5:88:84:91:0e:87:fc:d2:98:
                    42:d1:13:de:60:50:cc:75:3b:81:10:4d:14:c9:cf:
                    d3:a0:9c:38:b7:46:40:4e:df:af:83:6e:b4:9f:a1:
                    a9:11:d0:22:2d:97:02:2d:ed:fe:72:3d:35:c8:47:
                    cf:25:7b:11:30:4c:df:ac:36:3c:fc:3c:53:e2:68:
                    6d:ca:55:cb:a6:b4:f5:cd:9e:51:95:8a:7d:6b:08:
                    7f:25:64:19:12:a3:42:ea:4e:22:97:1a:b1:4c:8a:
                    aa:55:03:f7:a5:ef:5d:5a:bb:19:eb:dd:97:87:91:
                    f2:d1:91:1e:cc:19:16:c6:b2:31:33:5a:5a:32:92:
                    9a:a9:20:8c:2b:b2:52:79:f0:a9:fe:21:87:1a:ff:
                    39:1b:da:23:72:55:38:75:90:ba:19:9b:9d:8f:9c:
                    7e:39:ca:67:75:f5:30:e2:34:da:fc:7d:4a:3b:1e:
                    18:47:82:e7:ac:52:33:f7:35:70:4c:39:2d:88:41:
                    0e:6b:41:14:63:09:6c:20:98:dc:81:e0:96:64:de:
                    e8:7b:c5:ce:d3:b1:52:d6:1f:f1:94:95:67:16:52:
                    fa:83:a2:5c:6e:be:0b:d7:f5:d5:4c:e2:c8:f0:6b:
                    ad:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:BD:B7:01:16:36:F0:A5:8B:50:A4:5F:1A:9B:69:D9:56:AC:FE:C8
            X509v3 Authority Key Identifier:
                keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/Vr23ARY28KWLUKRfGptp2Vas_sg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.120.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         34:6f:aa:d2:6c:5b:5b:42:c1:4e:4d:e7:bc:cd:3e:10:9e:cf:
         a4:38:a5:79:14:34:88:11:b0:6e:a6:ac:79:80:e6:82:69:d8:
         49:71:0b:35:a0:5c:cb:cf:30:24:3a:f9:c0:08:7e:89:87:12:
         c0:a3:49:b4:a7:4e:b6:20:c3:40:46:02:34:f4:09:41:93:b5:
         97:cc:1d:4b:4b:21:72:1d:6a:92:70:8d:e1:1c:a8:2d:25:42:
         3d:be:0d:7f:c4:44:5f:a8:95:8e:7a:a4:68:f3:dd:09:7d:70:
         30:95:5d:d4:55:fc:9f:16:dc:68:14:d5:22:a1:17:03:5e:e4:
         fa:e7:20:64:f5:0f:9d:a2:22:a6:57:b8:d9:c3:d5:db:98:22:
         5f:68:d8:f0:10:11:28:cf:0c:55:3d:40:17:52:b8:6e:19:37:
         5d:12:77:8a:ac:d8:6c:a4:d0:93:38:24:69:c0:6b:fb:ea:b7:
         a0:15:58:58:bd:bf:26:17:26:a9:cd:95:50:c9:99:81:87:03:
         5d:86:f8:d6:95:d2:9e:8e:b3:06:a2:be:98:65:a4:78:f1:c6:
         d8:90:56:8c:dd:6b:48:81:8e:09:ab:8e:bf:a4:a6:45:60:f1:
         c9:ae:6f:4b:cb:8b:8f:a9:20:4c:be:92:3a:e3:a4:ae:ba:68:
         85:cf:93:2a
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBOzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFRkMx
NTY0OUE4MjU3RjY0RkM5NDIxNjdFMzEwQUQzOEFEMDJDREJDMB4XDTIyMDgwMTAx
Mjg0M1oXDTIzMDcxNTAxMzAwM1owMzExMC8GA1UEAxMoNTZCREI3MDExNjM2RjBB
NThCNTBBNDVGMUE5QjY5RDk1NkFDRkVDODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM5uIukVHqOC0Hrszk0CaJgbk9v79YiEkQ6H/NKYQtET3mBQzHU7
gRBNFMnP06CcOLdGQE7fr4NutJ+hqRHQIi2XAi3t/nI9NchHzyV7ETBM36w2PPw8
U+JobcpVy6a09c2eUZWKfWsIfyVkGRKjQupOIpcasUyKqlUD96XvXVq7Gevdl4eR
8tGRHswZFsayMTNaWjKSmqkgjCuyUnnwqf4hhxr/ORvaI3JVOHWQuhmbnY+cfjnK
Z3X1MOI02vx9SjseGEeC56xSM/c1cEw5LYhBDmtBFGMJbCCY3IHglmTe6HvFztOx
UtYf8ZSVZxZS+oOiXG6+C9f11UziyPBrrVUCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBRWvbcBFjbwpYtQpF8am2nZVqz+yDAfBgNVHSMEGDAWgBTvwVZJqCV/ZPyUIWfj
EK04rQLNvDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTEyNDcvNzhGV1NhZ2xmMlQ4bENGbjR4Q3RPSzBDemJ3LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNzhGV1NhZ2xmMlQ4bENGbjR4Q3RP
SzBDemJ3LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzExMjQ3L1ZyMjNBUlkyOEtXTFVLUmZHcHRwMlZhc19zZy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAeZeAAwDQYJKoZIhvcNAQELBQADggEBADRvqtJsW1tCwU5N57zNPhCe
z6Q4pXkUNIgRsG6mrHmA5oJp2ElxCzWgXMvPMCQ6+cAIfomHEsCjSbSnTrYgw0BG
AjT0CUGTtZfMHUtLIXIdapJwjeEcqC0lQj2+DX/ERF+olY56pGjz3Ql9cDCVXdRV
/J8W3GgU1SKhFwNe5PrnIGT1D52iIqZXuNnD1duYIl9o2PAQESjPDFU9QBdSuG4Z
N10Sd4qs2Gyk0JM4JGnAa/vqt6AVWFi9vyYXJqnNlVDJmYGHA12G+NaV0p6Oswai
vphlpHjxxtiQVozda0iBjgmrjr+kpkVg8cmub0vLi4+pIEy+kjrjpK66aIXPkyo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org