Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1175/c4AkednA10OEpJWUWAsIZkrSIQE.roa
File:                     c4AkednA10OEpJWUWAsIZkrSIQE.roa (raw, json)
Hash identifier:          mpWEwT1CpxdjWhKNOdDLGReT/d9roPayddl/EfMpo+M=
Subject key identifier:   73:80:24:79:D9:C0:D7:43:84:A4:95:94:58:0B:08:66:4A:D2:21:01
Certificate issuer:       /CN=8A57051C84A2BF078749E7BB34BE19678E131119
Certificate serial:       1C
Authority key identifier: 8A:57:05:1C:84:A2:BF:07:87:49:E7:BB:34:BE:19:67:8E:13:11:19
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ilcFHISivweHSee7NL4ZZ44TERk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1175/c4AkednA10OEpJWUWAsIZkrSIQE.roa
Signing time:             Fri 01 Apr 2022 01:28:32 +0000
ROA not before:           Fri 01 Apr 2022 01:28:32 +0000
ROA not after:            Fri 31 Mar 2023 13:10:57 +0000
asID:                     14418
IP address blocks:        150.35.240.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A57051C84A2BF078749E7BB34BE19678E131119
        Validity
            Not Before: Apr  1 01:28:32 2022 GMT
            Not After : Mar 31 13:10:57 2023 GMT
        Subject: CN=73802479D9C0D74384A49594580B08664AD22101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7a:c1:6c:58:32:18:01:77:18:f1:29:46:43:
                    3b:62:bd:17:ed:6a:7f:7f:21:d3:a3:a4:61:e5:1c:
                    eb:b1:52:92:e1:e1:45:c0:79:65:dd:87:79:4d:7e:
                    84:10:25:0d:93:e7:aa:e1:d6:69:63:f8:0e:51:59:
                    d7:ff:c3:3a:b6:d4:37:28:9f:39:f3:53:15:b9:58:
                    a4:f5:c0:44:11:ba:cd:3f:20:25:eb:5e:71:21:4d:
                    d5:26:39:42:ea:b0:5d:d8:54:fe:01:34:d9:a3:ac:
                    ae:18:2d:0f:d8:46:cc:6a:fb:fb:0d:8a:14:89:b1:
                    f5:ec:fa:02:81:75:35:cd:7c:b3:4b:1c:c5:72:dc:
                    a1:c5:49:be:f1:60:e5:49:95:0d:c0:a8:29:23:e7:
                    12:65:c0:46:bf:c6:42:a9:79:af:99:55:5d:1f:18:
                    1d:c0:f2:27:fc:a6:70:f2:99:f7:07:d2:01:b0:69:
                    14:96:f8:a2:d7:a0:73:b2:14:cf:79:ed:d6:78:10:
                    d2:19:a5:57:22:76:21:b8:30:05:0f:29:ec:69:0e:
                    20:fe:b5:67:f9:4a:79:9c:66:bf:ee:f0:93:69:68:
                    f1:9c:80:95:e7:cf:db:00:65:b9:52:97:ce:49:da:
                    59:78:dc:23:ef:dc:c6:8c:04:19:8e:11:0d:8e:a2:
                    4e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:80:24:79:D9:C0:D7:43:84:A4:95:94:58:0B:08:66:4A:D2:21:01
            X509v3 Authority Key Identifier:
                keyid:8A:57:05:1C:84:A2:BF:07:87:49:E7:BB:34:BE:19:67:8E:13:11:19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1175/ilcFHISivweHSee7NL4ZZ44TERk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ilcFHISivweHSee7NL4ZZ44TERk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1175/c4AkednA10OEpJWUWAsIZkrSIQE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.35.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:5d:65:57:7d:92:94:aa:c6:a7:19:aa:c6:24:5a:a7:bb:4a:
         f0:6c:2d:b2:93:ce:52:77:a7:a3:74:58:de:f0:55:e8:81:7c:
         1a:05:4f:d7:78:22:f2:b3:94:d0:f5:41:ea:1a:78:7a:48:dd:
         0c:0e:da:57:52:17:3c:70:db:0d:3b:8f:fe:39:c6:16:a8:4b:
         6b:fa:f0:a9:a9:d5:c1:1c:ee:54:3c:f3:10:c4:7d:ad:9c:ac:
         fa:95:10:e8:71:a2:05:b9:7f:57:95:26:b8:3d:be:f9:7d:36:
         f9:7b:7f:e8:ca:a3:b5:3d:76:ed:f0:10:7e:6d:2d:6c:83:e3:
         5c:96:4f:db:a0:3d:29:c6:6c:ca:ca:01:69:c1:65:80:f4:73:
         3b:02:0d:8c:bb:fc:32:65:f5:bc:e7:32:28:0e:18:9a:88:11:
         3f:17:18:50:00:48:84:3b:00:3e:69:7b:1b:c4:62:cb:b3:49:
         82:0c:a2:a9:f0:27:dc:78:bb:3f:9c:cc:a6:b6:cf:f9:02:49:
         fb:eb:66:e9:6c:c9:f9:4c:3d:02:09:f9:54:4b:31:76:db:d0:
         12:f7:1f:d4:1f:f9:bd:6d:78:2c:6e:1c:0b:7f:76:b0:b7:4f:
         d1:2a:9a:18:3d:9d:a4:74:7b:86:55:fa:8d:93:27:4e:fa:b8:
         11:dd:f6:af
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIBHDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4QTU3
MDUxQzg0QTJCRjA3ODc0OUU3QkIzNEJFMTk2NzhFMTMxMTE5MB4XDTIyMDQwMTAx
MjgzMloXDTIzMDMzMTEzMTA1N1owMzExMC8GA1UEAxMoNzM4MDI0NzlEOUMwRDc0
Mzg0QTQ5NTk0NTgwQjA4NjY0QUQyMjEwMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMN6wWxYMhgBdxjxKUZDO2K9F+1qf38h06OkYeUc67FSkuHhRcB5
Zd2HeU1+hBAlDZPnquHWaWP4DlFZ1//DOrbUNyifOfNTFblYpPXARBG6zT8gJete
cSFN1SY5QuqwXdhU/gE02aOsrhgtD9hGzGr7+w2KFImx9ez6AoF1Nc18s0scxXLc
ocVJvvFg5UmVDcCoKSPnEmXARr/GQql5r5lVXR8YHcDyJ/ymcPKZ9wfSAbBpFJb4
otegc7IUz3nt1ngQ0hmlVyJ2IbgwBQ8p7GkOIP61Z/lKeZxmv+7wk2lo8ZyAlefP
2wBluVKXzknaWXjcI+/cxowEGY4RDY6iTt8CAwEAAaOCAdswggHXMB0GA1UdDgQW
BBRzgCR52cDXQ4SklZRYCwhmStIhATAfBgNVHSMEGDAWgBSKVwUchKK/B4dJ57s0
vhlnjhMRGTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTE3NS9pbGNGSElTaXZ3ZUhTZWU3Tkw0Wlo0NFRFUmsuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9pbGNGSElTaXZ3ZUhTZWU3Tkw0Wlo0
NFRFUmsuY2VyMA4GA1UdDwEB/wQEAwIHgDByBggrBgEFBQcBCwRmMGQwYgYIKwYB
BQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTE3NS9jNEFrZWRuQTEwT0VwSldVV0FzSVprclNJUUUucm9hMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAliPwMA0GCSqGSIb3DQEBCwUAA4IB
AQAiXWVXfZKUqsanGarGJFqnu0rwbC2yk85Sd6ejdFje8FXogXwaBU/XeCLys5TQ
9UHqGnh6SN0MDtpXUhc8cNsNO4/+OcYWqEtr+vCpqdXBHO5UPPMQxH2tnKz6lRDo
caIFuX9XlSa4Pb75fTb5e3/oyqO1PXbt8BB+bS1sg+Nclk/boD0pxmzKygFpwWWA
9HM7Ag2Mu/wyZfW85zIoDhiaiBE/FxhQAEiEOwA+aXsbxGLLs0mCDKKp8CfceLs/
nMymts/5Akn762bpbMn5TD0CCflUSzF229AS9x/UH/m9bXgsbhwLf3awt0/RKpoY
PZ2kdHuGVfqNkydO+rgR3fav
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org