Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/ZL4pVEFUqTC8kaATujmVKP7IUK4.roa
File:                     ZL4pVEFUqTC8kaATujmVKP7IUK4.roa (raw, json)
Hash identifier:          tQ4yFxAStfsIyZja/ZGxIZZxFa2XyjAXaqMH9CDTwHU=
Subject key identifier:   64:BE:29:54:41:54:A9:30:BC:91:A0:13:BA:39:95:28:FE:C8:50:AE
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0130
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/ZL4pVEFUqTC8kaATujmVKP7IUK4.roa
Signing time:             Fri 05 Aug 2022 04:50:44 +0000
ROA not before:           Fri 05 Aug 2022 04:50:44 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     4713
IP address blocks:        211.11.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 304 (0x130)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Aug  5 04:50:44 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=64BE29544154A930BC91A013BA399528FEC850AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:00:25:e7:7c:f3:ae:78:36:71:45:fc:cb:a8:
                    cd:f5:f9:99:05:36:f0:d2:b5:a4:50:9d:b7:6a:53:
                    e5:ce:c6:d7:b2:c0:b6:d8:51:d4:30:78:a6:4f:5a:
                    38:6b:13:68:fc:8a:35:f3:26:68:71:8e:c2:ff:3f:
                    69:0c:05:95:54:83:9d:c7:4e:62:2e:b0:ce:ee:67:
                    a3:79:34:02:4d:b4:80:fd:7e:7b:20:81:6c:20:df:
                    40:13:97:d4:a6:5b:b5:50:39:f0:ca:7e:9e:68:ca:
                    b6:e1:9c:3b:46:33:20:8e:94:7f:71:c9:95:af:51:
                    57:59:17:c9:5a:90:36:12:f0:a9:bd:ab:64:60:8a:
                    b4:53:8c:8a:95:c5:f8:05:13:04:a2:31:0f:f2:1f:
                    bc:bc:ff:ad:a3:40:ee:58:ca:2f:d2:1d:3c:5b:ff:
                    e1:3c:1c:cb:36:b5:5a:97:8c:ad:a9:ed:0b:b8:75:
                    22:44:f7:84:fe:a5:b7:b3:55:0b:25:10:a0:c2:2f:
                    9c:c8:c5:64:e3:e8:dc:49:df:05:66:6c:78:17:a2:
                    49:13:11:1d:98:77:0e:4b:ea:7e:6d:8a:9e:12:ca:
                    20:4f:e5:6b:bd:97:1e:e3:10:37:d0:e9:2d:b0:ec:
                    ed:71:6a:24:76:9c:e8:6c:ee:81:39:c4:57:0d:bd:
                    5e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:BE:29:54:41:54:A9:30:BC:91:A0:13:BA:39:95:28:FE:C8:50:AE
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/ZL4pVEFUqTC8kaATujmVKP7IUK4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.11.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         12:ac:21:1b:b1:a4:1f:c1:38:ac:a9:7e:ab:7f:2e:8d:d9:14:
         20:d5:e9:74:81:f2:c1:2d:f5:24:c9:e1:bf:4a:67:64:db:bf:
         18:bf:6e:85:c5:f0:b8:9a:5f:3d:30:5a:04:be:96:45:7d:f1:
         40:fb:d5:f8:17:a3:e6:c6:a5:77:f7:2c:4b:53:0b:8e:75:40:
         22:e7:e7:fe:c2:36:ea:3f:38:ed:de:90:2b:26:a2:9b:16:11:
         1f:d5:c9:9d:7b:eb:4a:53:8a:97:98:92:0d:e2:3a:15:c6:79:
         af:70:50:9e:3c:74:36:77:98:82:22:dc:83:83:b9:6f:bc:12:
         a6:6f:83:f2:c0:7e:97:ca:e7:d4:96:32:a7:b4:84:03:9d:74:
         68:bd:cd:ad:9b:7e:73:63:12:f8:0f:22:2a:73:93:92:57:01:
         b5:fe:fa:52:c1:98:b4:be:94:23:e3:f9:50:07:c1:30:f6:b5:
         51:2e:76:91:31:51:32:4f:5a:45:59:86:a4:34:8c:68:be:fb:
         28:d0:64:73:a5:1c:33:d2:a7:39:8c:47:bc:ca:94:e5:00:1a:
         f1:95:9d:9c:eb:d8:44:b7:ab:d0:c7:d8:e9:db:34:9f:34:f1:
         80:b2:77:54:ef:81:43:7c:d0:00:f4:42:55:73:8a:d8:ce:6f:
         ff:b8:71:81
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICATAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yMjA4MDUw
NDUwNDRaFw0yMzA3MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDY0QkUyOTU0NDE1NEE5
MzBCQzkxQTAxM0JBMzk5NTI4RkVDODUwQUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7ACXnfPOueDZxRfzLqM31+ZkFNvDStaRQnbdqU+XOxteywLbY
UdQweKZPWjhrE2j8ijXzJmhxjsL/P2kMBZVUg53HTmIusM7uZ6N5NAJNtID9fnsg
gWwg30ATl9SmW7VQOfDKfp5oyrbhnDtGMyCOlH9xyZWvUVdZF8lakDYS8Km9q2Rg
irRTjIqVxfgFEwSiMQ/yH7y8/62jQO5Yyi/SHTxb/+E8HMs2tVqXjK2p7Qu4dSJE
94T+pbezVQslEKDCL5zIxWTj6NxJ3wVmbHgXokkTER2Ydw5L6n5tip4SyiBP5Wu9
lx7jEDfQ6S2w7O1xaiR2nOhs7oE5xFcNvV6vAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUZL4pVEFUqTC8kaATujmVKP7IUK4wHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTMxL1pMNHBWRUZVcVRDOGthQVR1am1WS1A3SVVLNC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwDTCzANBgkqhkiG9w0BAQsFAAOCAQEAEqwhG7GkH8E4rKl+q38ujdkUINXp
dIHywS31JMnhv0pnZNu/GL9uhcXwuJpfPTBaBL6WRX3xQPvV+Bej5sald/csS1ML
jnVAIufn/sI26j847d6QKyaimxYRH9XJnXvrSlOKl5iSDeI6FcZ5r3BQnjx0NneY
giLcg4O5b7wSpm+D8sB+l8rn1JYyp7SEA510aL3NrZt+c2MS+A8iKnOTklcBtf76
UsGYtL6UI+P5UAfBMPa1US52kTFRMk9aRVmGpDSMaL77KNBkc6UcM9KnOYxHvMqU
5QAa8ZWdnOvYRLer0MfY6ds0nzTxgLJ3VO+BQ3zQAPRCVXOK2M5v/7hxgQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org