Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/nwXM8fmbVfA5zgZQ_prvnYfvcfc.roa
File:                     nwXM8fmbVfA5zgZQ_prvnYfvcfc.roa (raw, json)
Hash identifier:          lyqKtNdCtYoYsdDkBQ+RJ09mON5kErDNEC8Wxbh3/7k=
Subject key identifier:   9F:05:CC:F1:F9:9B:55:F0:39:CE:06:50:FE:9A:EF:9D:87:EF:71:F7
Certificate issuer:       /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial:       35
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/nwXM8fmbVfA5zgZQ_prvnYfvcfc.roa
Signing time:             Mon 01 Aug 2022 01:28:41 +0000
ROA not before:           Mon 01 Aug 2022 01:28:41 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     7684
IP address blocks:        153.126.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
        Validity
            Not Before: Aug  1 01:28:41 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=9F05CCF1F99B55F039CE0650FE9AEF9D87EF71F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f0:68:b5:7d:dd:f3:63:42:dc:9b:31:94:55:
                    39:a8:63:1d:32:0b:6c:49:81:ae:6c:17:04:6d:23:
                    b0:f4:6e:3c:fd:1f:05:8b:89:fa:81:13:ad:fa:66:
                    e3:a3:67:83:1d:fd:cf:25:17:9a:58:8e:a5:7d:b1:
                    24:f4:f8:19:11:f6:0c:53:95:71:c3:73:df:6b:bc:
                    65:d8:fb:be:71:1e:26:ac:e3:62:ef:c4:95:7f:c8:
                    d1:dd:47:02:8f:59:57:8d:ab:2b:1c:3c:0c:5c:d8:
                    ea:77:0d:cf:f9:0f:05:0d:5f:7c:91:20:5f:89:5d:
                    f1:33:68:87:a8:47:45:cd:75:89:65:5e:9d:57:8d:
                    1d:f4:1d:53:a9:b3:29:eb:5d:a5:62:f3:7d:19:cb:
                    3a:5d:3b:9b:73:8f:d7:f7:bb:54:a3:2f:19:bb:29:
                    d5:42:05:20:2a:b9:c8:a9:a9:49:38:00:13:83:d4:
                    2a:c1:f3:4c:f9:2d:1c:dc:6c:ae:e5:53:1f:20:4f:
                    27:f0:f2:15:c5:86:5f:b5:59:39:58:13:ec:82:86:
                    7e:60:22:ee:2a:02:f3:df:39:8d:13:cb:25:da:31:
                    5c:9b:7c:d8:32:14:f1:bb:e8:8a:c6:19:b2:4a:02:
                    e9:a7:43:a2:e9:32:74:61:f7:ae:c0:f2:7d:1f:b9:
                    be:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:05:CC:F1:F9:9B:55:F0:39:CE:06:50:FE:9A:EF:9D:87:EF:71:F7
            X509v3 Authority Key Identifier:
                keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/nwXM8fmbVfA5zgZQ_prvnYfvcfc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.126.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         88:0e:8d:45:60:3f:4c:84:46:24:d6:e0:44:20:ce:d5:ed:3c:
         5a:9d:97:3e:0d:cc:9b:1c:28:6b:b1:9c:a8:e4:ee:96:b7:d4:
         91:7f:3b:47:cc:d1:4a:2a:5d:54:ad:f4:3c:8d:7d:c9:87:fe:
         cd:e3:5e:fb:67:19:7b:80:d7:11:6c:85:cd:59:01:34:79:ba:
         a3:4b:8a:a2:1c:93:b6:4d:cb:fb:73:47:4a:84:76:c4:d0:e4:
         26:4f:c4:b5:f2:e2:68:39:fc:b7:53:f6:e6:8c:74:0d:a9:32:
         ce:97:0e:ad:60:0c:67:7b:1c:63:d3:53:61:d0:69:e3:91:3c:
         c5:19:b6:59:ff:eb:43:6c:6a:f1:30:1a:54:48:08:ac:4f:ee:
         c7:c8:dd:f1:36:56:02:e0:ca:81:09:9f:3b:72:80:bc:3f:d9:
         d0:29:09:7a:62:54:12:4e:8c:9a:43:e0:8a:a1:f0:e4:7d:33:
         23:1c:71:69:3e:09:c3:e0:38:24:2b:c3:fc:17:86:27:48:3d:
         fc:52:d9:92:e9:4e:5a:13:3b:fe:a7:36:3e:ea:39:f1:e7:c9:
         d1:6d:7d:cf:42:d1:81:af:4f:bd:8c:09:0f:d1:f5:e0:65:9f:
         82:f5:ae:b9:51:74:66:b2:66:37:5d:17:32:0e:5f:0f:ab:f2:
         73:c4:c3:e7
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBNTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFRkMx
NTY0OUE4MjU3RjY0RkM5NDIxNjdFMzEwQUQzOEFEMDJDREJDMB4XDTIyMDgwMTAx
Mjg0MVoXDTIzMDcxNTAxMzAwM1owMzExMC8GA1UEAxMoOUYwNUNDRjFGOTlCNTVG
MDM5Q0UwNjUwRkU5QUVGOUQ4N0VGNzFGNzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK/waLV93fNjQtybMZRVOahjHTILbEmBrmwXBG0jsPRuPP0fBYuJ
+oETrfpm46Nngx39zyUXmliOpX2xJPT4GRH2DFOVccNz32u8Zdj7vnEeJqzjYu/E
lX/I0d1HAo9ZV42rKxw8DFzY6ncNz/kPBQ1ffJEgX4ld8TNoh6hHRc11iWVenVeN
HfQdU6mzKetdpWLzfRnLOl07m3OP1/e7VKMvGbsp1UIFICq5yKmpSTgAE4PUKsHz
TPktHNxsruVTHyBPJ/DyFcWGX7VZOVgT7IKGfmAi7ioC8985jRPLJdoxXJt82DIU
8bvoisYZskoC6adDoukydGH3rsDyfR+5vmECAwEAAaOCAigwggIkMB0GA1UdDgQW
BBSfBczx+ZtV8DnOBlD+mu+dh+9x9zAfBgNVHSMEGDAWgBTvwVZJqCV/ZPyUIWfj
EK04rQLNvDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTEyNDcvNzhGV1NhZ2xmMlQ4bENGbjR4Q3RPSzBDemJ3LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNzhGV1NhZ2xmMlQ4bENGbjR4Q3RP
SzBDemJ3LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzExMjQ3L253WE04Zm1iVmZBNXpnWlFfcHJ2bllmdmNmYy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAeZfoAwDQYJKoZIhvcNAQELBQADggEBAIgOjUVgP0yERiTW4EQgztXt
PFqdlz4NzJscKGuxnKjk7pa31JF/O0fM0UoqXVSt9DyNfcmH/s3jXvtnGXuA1xFs
hc1ZATR5uqNLiqIck7ZNy/tzR0qEdsTQ5CZPxLXy4mg5/LdT9uaMdA2pMs6XDq1g
DGd7HGPTU2HQaeORPMUZtln/60NsavEwGlRICKxP7sfI3fE2VgLgyoEJnztygLw/
2dApCXpiVBJOjJpD4Iqh8OR9MyMccWk+CcPgOCQrw/wXhidIPfxS2ZLpTloTO/6n
Nj7qOfHnydFtfc9C0YGvT72MCQ/R9eBln4L1rrlRdGayZjddFzIOXw+r8nPEw+c=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org