Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/a1TENyj7zNf0qwdsW04QD9QkT9E.roa
File:                     a1TENyj7zNf0qwdsW04QD9QkT9E.roa (raw, json)
Hash identifier:          IDzahSj9Q/5JMY4KfvC/Y0+0YhCCZhhzuNONofhPS1U=
Subject key identifier:   6B:54:C4:37:28:FB:CC:D7:F4:AB:07:6C:5B:4E:10:0F:D4:24:4F:D1
Certificate issuer:       /CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
Certificate serial:       2B
Authority key identifier: FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/a1TENyj7zNf0qwdsW04QD9QkT9E.roa
Signing time:             Fri 01 Jul 2022 01:28:07 +0000
ROA not before:           Fri 01 Jul 2022 01:28:07 +0000
ROA not after:            Thu 15 Jun 2023 01:30:04 +0000
asID:                     7684
IP address blocks:        157.17.82.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
        Validity
            Not Before: Jul  1 01:28:07 2022 GMT
            Not After : Jun 15 01:30:04 2023 GMT
        Subject: CN=6B54C43728FBCCD7F4AB076C5B4E100FD4244FD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:15:cd:5a:13:ed:28:5a:54:60:fe:da:96:90:
                    52:db:5c:86:04:7a:4d:b6:5e:cc:00:6f:3a:ea:9c:
                    0b:45:4e:85:eb:6f:5a:fa:9e:98:c8:f2:81:09:5e:
                    eb:23:bb:26:8c:54:32:2c:9e:77:ff:33:ee:44:3e:
                    2e:42:b1:3a:86:99:f8:39:5b:ad:42:7a:c3:23:34:
                    11:6b:0f:25:af:e3:1a:09:55:a0:d5:dd:61:06:0d:
                    f4:f6:55:f2:cf:de:5b:e8:b5:92:c2:6e:e2:71:d1:
                    97:67:24:73:c3:fb:38:dd:5d:09:0f:be:98:1a:17:
                    f9:8f:c2:78:82:46:0e:1d:b3:ae:02:35:4d:ec:25:
                    e6:50:83:1a:07:08:ce:8b:29:15:24:e1:2d:af:a8:
                    0d:0c:ab:d6:9c:e5:3d:c3:2a:d4:b6:16:ea:b9:da:
                    c2:81:84:47:91:45:08:f8:da:7e:88:f0:7b:dd:8e:
                    fc:8d:6d:c2:3e:26:bb:00:60:cb:30:b7:48:fe:5c:
                    67:04:a3:c8:94:6a:62:84:83:50:70:90:93:b0:20:
                    4e:e6:93:84:02:d7:77:4a:5a:9a:91:a5:39:80:31:
                    9d:86:e8:ca:48:58:5c:7d:86:6a:99:34:53:69:35:
                    30:ad:e9:5c:a1:e0:cb:55:4d:d7:b3:9b:c4:75:e8:
                    c9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:54:C4:37:28:FB:CC:D7:F4:AB:07:6C:5B:4E:10:0F:D4:24:4F:D1
            X509v3 Authority Key Identifier:
                keyid:FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/a1TENyj7zNf0qwdsW04QD9QkT9E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.17.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:e8:6f:f7:c0:9f:53:8f:65:5c:e7:12:de:7f:7e:03:b4:8b:
         ce:c2:06:3b:70:78:18:00:4c:f0:3e:27:5d:fb:a4:ce:48:33:
         fa:8c:3f:d4:f8:30:25:56:14:bb:ba:ca:05:11:f1:a4:09:4c:
         93:2e:41:16:2c:fa:42:b2:0b:e9:84:4a:91:0a:26:a4:d5:98:
         66:44:6b:84:b7:0e:10:73:02:f7:f8:2f:1a:61:44:6d:12:6f:
         0b:d5:e1:eb:52:c9:d9:d9:7c:cf:1a:f4:2e:13:25:13:8c:3d:
         4f:d7:a9:e2:3e:fd:34:23:4a:c2:4a:40:3c:e8:b6:65:13:bd:
         8f:69:3d:e1:79:ca:17:b4:f7:4d:30:3b:55:60:02:42:45:66:
         0c:c4:57:e6:33:8f:7b:5d:1d:96:93:c8:39:1e:64:99:08:86:
         f3:74:6b:92:db:3c:fc:ac:a5:1f:9b:ef:97:b1:17:74:f7:c7:
         97:de:84:41:e9:49:7b:50:5c:82:06:91:00:e3:f2:ba:c0:a0:
         08:03:b2:d5:c0:f0:23:76:9e:e6:57:0d:c8:49:15:9b:b0:b9:
         0c:77:e5:ff:0c:43:52:a3:cd:f0:3c:12:af:ed:98:44:56:f1:
         84:8a:e9:67:73:25:43:cc:d0:20:26:f5:36:a6:9f:ef:fc:6d:
         6e:c0:1f:4b
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBKzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQkM0
NjI5NEE1RDU2NDM3RTE5QTExQUVGOUZCOUI4Nzc2OTAxNDNFMB4XDTIyMDcwMTAx
MjgwN1oXDTIzMDYxNTAxMzAwNFowMzExMC8GA1UEAxMoNkI1NEM0MzcyOEZCQ0NE
N0Y0QUIwNzZDNUI0RTEwMEZENDI0NEZEMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMYVzVoT7ShaVGD+2paQUttchgR6TbZezABvOuqcC0VOhetvWvqe
mMjygQle6yO7JoxUMiyed/8z7kQ+LkKxOoaZ+DlbrUJ6wyM0EWsPJa/jGglVoNXd
YQYN9PZV8s/eW+i1ksJu4nHRl2ckc8P7ON1dCQ++mBoX+Y/CeIJGDh2zrgI1Tewl
5lCDGgcIzospFSThLa+oDQyr1pzlPcMq1LYW6rnawoGER5FFCPjafojwe92O/I1t
wj4muwBgyzC3SP5cZwSjyJRqYoSDUHCQk7AgTuaThALXd0pampGlOYAxnYboykhY
XH2Gapk0U2k1MK3pXKHgy1VN17ObxHXoye0CAwEAAaOCAigwggIkMB0GA1UdDgQW
BBRrVMQ3KPvM1/SrB2xbThAP1CRP0TAfBgNVHSMEGDAWgBT7xGKUpdVkN+GaEa75
+5uHdpAUPjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTEyNDcvLThSaWxLWFZaRGZobWhHdS1mdWJoM2FRRkQ0LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvLThSaWxLWFZaRGZobWhHdS1mdWJo
M2FRRkQ0LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzExMjQ3L2ExVEVOeWo3ek5mMHF3ZHNXMDRRRDlRa1Q5RS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAGdEVIwDQYJKoZIhvcNAQELBQADggEBAHPob/fAn1OPZVznEt5/fgO0
i87CBjtweBgATPA+J137pM5IM/qMP9T4MCVWFLu6ygUR8aQJTJMuQRYs+kKyC+mE
SpEKJqTVmGZEa4S3DhBzAvf4LxphRG0SbwvV4etSydnZfM8a9C4TJROMPU/XqeI+
/TQjSsJKQDzotmUTvY9pPeF5yhe0900wO1VgAkJFZgzEV+Yzj3tdHZaTyDkeZJkI
hvN0a5LbPPyspR+b75exF3T3x5fehEHpSXtQXIIGkQDj8rrAoAgDstXA8CN2nuZX
DchJFZuwuQx35f8MQ1KjzfA8Eq/tmERW8YSK6WdzJUPM0CAm9Tamn+/8bW7AH0s=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org