Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/Ea6L2q_9GH4V5oF9pR7bBPSfaWg.roa
File:                     Ea6L2q_9GH4V5oF9pR7bBPSfaWg.roa (raw, json)
Hash identifier:          x4iP5/yE7ILjeolXuDQG4fxfHYl5wEIaBJ5E067mD8g=
Subject key identifier:   11:AE:8B:DA:AF:FD:18:7E:15:E6:81:7D:A5:1E:DB:04:F4:9F:69:68
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       011E
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/Ea6L2q_9GH4V5oF9pR7bBPSfaWg.roa
Signing time:             Fri 05 Aug 2022 04:26:38 +0000
ROA not before:           Fri 05 Aug 2022 04:26:38 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     4713
IP address blocks:        180.0.0.0/10 maxlen: 10

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 286 (0x11e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Aug  5 04:26:38 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=11AE8BDAAFFD187E15E6817DA51EDB04F49F6968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0f:8a:8f:3a:21:e8:62:54:8d:e2:24:b9:4c:
                    7b:e2:4f:42:03:84:7e:2b:cc:79:ca:0e:e0:34:75:
                    c5:ab:8e:36:72:9d:90:4e:1b:ae:6f:60:d8:6d:77:
                    d9:e1:5e:27:f5:89:1c:e0:e3:89:11:bd:e9:3e:fb:
                    4b:27:ac:8f:98:09:ce:61:3e:6c:a1:b4:f5:e1:56:
                    ce:77:c6:af:28:03:f7:26:48:13:7a:2b:b4:06:0a:
                    cf:b6:16:c2:38:86:c8:9b:e8:4d:29:21:19:fe:18:
                    7c:7e:fd:18:05:b7:e7:63:f4:23:d9:50:94:60:61:
                    9c:c2:85:0a:29:c2:fb:c6:07:84:f7:7e:e8:08:ef:
                    9f:46:fd:2e:0c:70:c9:c0:c9:e4:8f:7e:1b:2b:d1:
                    3f:7c:17:61:dc:85:ab:17:82:1e:28:7c:40:98:9c:
                    00:25:dd:88:a6:fe:5b:71:eb:82:54:09:80:ab:d6:
                    50:b1:47:d1:89:27:03:0a:bd:a5:06:d7:17:0c:1a:
                    a0:b4:47:6d:92:a5:a8:c4:78:a6:00:67:6e:79:05:
                    75:06:4d:41:bf:34:45:57:0a:03:5e:4b:95:77:c5:
                    73:28:30:ac:49:8b:96:da:1a:bb:ba:65:a3:67:c1:
                    dd:1b:9e:19:b8:2c:2f:92:45:8e:d4:cd:37:a8:ac:
                    a7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:AE:8B:DA:AF:FD:18:7E:15:E6:81:7D:A5:1E:DB:04:F4:9F:69:68
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/Ea6L2q_9GH4V5oF9pR7bBPSfaWg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.0.0.0/10

    Signature Algorithm: sha256WithRSAEncryption
         36:3d:b4:4f:aa:4c:9d:97:51:20:4d:58:19:3a:1a:91:c3:01:
         be:3f:6f:dd:52:d9:f7:9d:6c:2e:2c:14:e6:c8:0e:3f:4f:00:
         c2:9f:d0:a8:db:6b:4e:e9:f5:39:a7:46:7c:f8:09:48:30:42:
         e6:11:c8:49:0f:c9:bb:ff:05:62:d3:92:59:d0:b2:09:18:22:
         ca:1c:b4:e8:a1:50:28:53:66:8f:4b:a5:54:8c:e7:a6:40:49:
         f1:6e:94:27:07:dd:aa:5d:ad:bc:db:41:6a:3b:24:70:7e:9c:
         3c:63:41:f2:c6:2b:69:8b:80:34:99:3c:3f:fa:63:bc:b0:ed:
         fc:d0:22:2c:64:8e:c1:2d:13:2d:9e:48:68:52:84:c5:5c:99:
         42:3d:b9:09:82:1b:e1:75:29:9c:f6:08:a3:48:79:03:7a:2a:
         e4:6d:af:2c:6e:1b:33:b1:99:8d:f3:0d:1d:21:ce:ef:73:2b:
         c9:c1:24:2e:fc:4e:54:0d:ea:98:3e:ce:33:25:eb:62:2a:c6:
         f9:c7:f2:29:5b:50:2c:67:97:a8:7a:5e:ac:81:a8:fe:0e:65:
         d6:7a:03:0a:31:c5:bf:37:2f:c8:78:4a:e9:f1:35:df:51:9b:
         28:83:5b:aa:b9:68:03:d8:b7:b3:d4:c5:8d:fb:40:ad:93:7b:
         15:31:74:60
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yMjA4MDUw
NDI2MzhaFw0yMzA3MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDExQUU4QkRBQUZGRDE4
N0UxNUU2ODE3REE1MUVEQjA0RjQ5RjY5NjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDbD4qPOiHoYlSN4iS5THviT0IDhH4rzHnKDuA0dcWrjjZynZBO
G65vYNhtd9nhXif1iRzg44kRvek++0snrI+YCc5hPmyhtPXhVs53xq8oA/cmSBN6
K7QGCs+2FsI4hsib6E0pIRn+GHx+/RgFt+dj9CPZUJRgYZzChQopwvvGB4T3fugI
759G/S4McMnAyeSPfhsr0T98F2HchasXgh4ofECYnAAl3Yim/ltx64JUCYCr1lCx
R9GJJwMKvaUG1xcMGqC0R22SpajEeKYAZ255BXUGTUG/NEVXCgNeS5V3xXMoMKxJ
i5baGru6ZaNnwd0bnhm4LC+SRY7UzTeorKfFAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUEa6L2q/9GH4V5oF9pR7bBPSfaWgwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTMxL0VhNkwycV85R0g0VjVvRjlwUjdiQlBTZmFXZy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwa0ADANBgkqhkiG9w0BAQsFAAOCAQEANj20T6pMnZdRIE1YGToakcMBvj9v
3VLZ951sLiwU5sgOP08Awp/QqNtrTun1OadGfPgJSDBC5hHISQ/Ju/8FYtOSWdCy
CRgiyhy06KFQKFNmj0ulVIznpkBJ8W6UJwfdql2tvNtBajskcH6cPGNB8sYraYuA
NJk8P/pjvLDt/NAiLGSOwS0TLZ5IaFKExVyZQj25CYIb4XUpnPYIo0h5A3oq5G2v
LG4bM7GZjfMNHSHO73MrycEkLvxOVA3qmD7OMyXrYirG+cfyKVtQLGeXqHperIGo
/g5l1noDCjHFvzcvyHhK6fE131GbKINbqrloA9i3s9TFjftArZN7FTF0YA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org