Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13131/YZCFC2t4fgQF12W28MSaIjkssxw.roa
File:                     YZCFC2t4fgQF12W28MSaIjkssxw.roa (raw, json)
Hash identifier:          /NaV+YrSaiAGMhi0OQgcGkTqNi5LmVhUtKrpv2ayCgg=
Subject key identifier:   61:90:85:0B:6B:78:7E:04:05:D7:65:B6:F0:C4:9A:22:39:2C:B3:1C
Certificate issuer:       /CN=FD13D822A4DD7BA05078F9E60025F8BFF11BEF82
Certificate serial:       2F
Authority key identifier: FD:13:D8:22:A4:DD:7B:A0:50:78:F9:E6:00:25:F8:BF:F1:1B:EF:82
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_RPYIqTde6BQePnmACX4v_Eb74I.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13131/YZCFC2t4fgQF12W28MSaIjkssxw.roa
Signing time:             Sun 01 May 2022 01:29:32 +0000
ROA not before:           Sun 01 May 2022 01:29:32 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     38639
IP address blocks:        115.69.224.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD13D822A4DD7BA05078F9E60025F8BFF11BEF82
        Validity
            Not Before: May  1 01:29:32 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=6190850B6B787E0405D765B6F0C49A22392CB31C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6f:68:4c:9b:b8:f6:53:73:a8:40:ae:76:2e:
                    44:43:5f:78:02:0e:d2:10:86:92:c3:4e:22:83:b3:
                    a2:70:05:1f:7a:b4:fa:8e:c4:f5:ec:07:b2:53:0f:
                    86:5f:59:20:29:6e:61:17:57:58:58:24:a7:e5:f7:
                    6f:a5:22:37:cb:c9:f4:75:4f:c0:9d:fd:ad:ab:24:
                    05:df:d1:39:77:62:c7:c8:fa:47:92:53:05:97:c0:
                    29:14:ff:ee:57:02:9f:85:7a:65:91:95:d9:30:99:
                    3d:ea:8e:b8:87:41:18:ec:db:9e:e7:52:ce:83:d9:
                    fd:04:fc:36:14:1b:80:2f:3a:d2:6d:94:14:cf:5a:
                    7a:31:ff:15:c5:67:fa:3e:80:a4:3c:6d:26:8b:96:
                    2d:e1:60:58:69:ca:f5:53:44:92:87:1c:63:06:b4:
                    88:30:3b:20:5f:2d:c0:46:7f:ad:4a:45:53:5b:b8:
                    c6:95:2c:3e:01:8e:79:9e:6f:69:c2:29:c1:f8:a2:
                    3b:c3:dc:96:f0:79:c5:ea:50:44:22:9f:2b:aa:47:
                    b6:f0:4e:19:44:21:7d:fd:2a:4e:a6:84:60:5c:a4:
                    78:e5:23:25:81:e1:83:20:7f:7b:e1:cd:15:cd:ad:
                    f9:d7:fb:5c:d9:80:cc:93:23:fe:23:54:88:a8:bc:
                    a4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:90:85:0B:6B:78:7E:04:05:D7:65:B6:F0:C4:9A:22:39:2C:B3:1C
            X509v3 Authority Key Identifier:
                keyid:FD:13:D8:22:A4:DD:7B:A0:50:78:F9:E6:00:25:F8:BF:F1:1B:EF:82

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13131/_RPYIqTde6BQePnmACX4v_Eb74I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_RPYIqTde6BQePnmACX4v_Eb74I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13131/YZCFC2t4fgQF12W28MSaIjkssxw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.69.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         04:16:0a:70:b6:1f:56:be:61:0c:ac:61:2a:54:74:73:92:47:
         81:07:3e:2a:e0:ff:61:0e:70:be:f9:27:9f:3e:ac:14:29:a3:
         8b:47:44:6e:d1:b2:bf:33:b3:93:23:f2:44:f4:07:6c:cb:fb:
         7b:4a:a2:9e:23:f9:70:5f:9e:75:14:4e:ac:13:25:ad:bf:fc:
         c0:70:d2:9e:0a:7d:d6:1d:54:f3:fa:4c:19:cf:59:0c:cc:12:
         b6:9b:52:bf:98:4e:8f:6b:ad:0c:f5:5c:1d:75:4b:bb:8d:a4:
         8c:4e:b0:85:7a:66:9c:73:9f:17:a8:36:2e:75:e1:b0:90:a2:
         90:ca:d7:d3:b5:1d:b5:8c:2e:35:4a:78:0a:10:e9:34:ed:4f:
         44:71:fb:d4:d0:1e:cb:84:48:8b:9b:96:36:db:4f:01:9d:ae:
         6b:fb:35:ac:46:bb:a1:78:b1:a4:61:90:89:00:3a:48:5e:eb:
         47:c7:2a:8c:3b:c5:a7:31:5a:90:f2:63:c1:37:0d:2a:58:af:
         87:72:c1:c4:6e:42:08:fd:e1:90:9b:58:6a:da:10:b2:f6:c2:
         ea:d7:cf:db:79:20:66:80:08:8f:1f:9e:cd:2a:7d:a1:9d:d2:
         88:0e:6e:a9:48:c3:0e:a8:b5:37:0a:4e:20:4d:4e:85:ee:ef:
         9b:a0:f5:e6
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBLzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGRDEz
RDgyMkE0REQ3QkEwNTA3OEY5RTYwMDI1RjhCRkYxMUJFRjgyMB4XDTIyMDUwMTAx
MjkzMloXDTIzMDQyNzA5NTIzNFowMzExMC8GA1UEAxMoNjE5MDg1MEI2Qjc4N0Uw
NDA1RDc2NUI2RjBDNDlBMjIzOTJDQjMxQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKhvaEybuPZTc6hArnYuRENfeAIO0hCGksNOIoOzonAFH3q0+o7E
9ewHslMPhl9ZICluYRdXWFgkp+X3b6UiN8vJ9HVPwJ39raskBd/ROXdix8j6R5JT
BZfAKRT/7lcCn4V6ZZGV2TCZPeqOuIdBGOzbnudSzoPZ/QT8NhQbgC860m2UFM9a
ejH/FcVn+j6ApDxtJouWLeFgWGnK9VNEkoccYwa0iDA7IF8twEZ/rUpFU1u4xpUs
PgGOeZ5vacIpwfiiO8PclvB5xepQRCKfK6pHtvBOGUQhff0qTqaEYFykeOUjJYHh
gyB/e+HNFc2t+df7XNmAzJMj/iNUiKi8pKMCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBRhkIULa3h+BAXXZbbwxJoiOSyzHDAfBgNVHSMEGDAWgBT9E9gipN17oFB4+eYA
Jfi/8RvvgjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTMxMzEvX1JQWUlxVGRlNkJRZVBubUFDWDR2X0ViNzRJLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvX1JQWUlxVGRlNkJRZVBubUFDWDR2
X0ViNzRJLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzEzMTMxL1laQ0ZDMnQ0ZmdRRjEyVzI4TVNhSWprc3N4dy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBANzReAwDQYJKoZIhvcNAQELBQADggEBAAQWCnC2H1a+YQysYSpUdHOS
R4EHPirg/2EOcL75J58+rBQpo4tHRG7Rsr8zs5Mj8kT0B2zL+3tKop4j+XBfnnUU
TqwTJa2//MBw0p4KfdYdVPP6TBnPWQzMErabUr+YTo9rrQz1XB11S7uNpIxOsIV6
ZpxznxeoNi514bCQopDK19O1HbWMLjVKeAoQ6TTtT0Rx+9TQHsuESIubljbbTwGd
rmv7NaxGu6F4saRhkIkAOkhe60fHKow7xacxWpDyY8E3DSpYr4dywcRuQgj94ZCb
WGraELL2wurXz9t5IGaACI8fns0qfaGd0ogObqlIww6otTcKTiBNToXu75ug9eY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org