Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1384/rrVAdlgwLVKGUoqGXeB8aculh6M.roa
File:                     rrVAdlgwLVKGUoqGXeB8aculh6M.roa (raw, json)
Hash identifier:          enV1eW0EGjAKpziwXfO+tc2AH+b9f82gehDq2c2Up/A=
Subject key identifier:   AE:B5:40:76:58:30:2D:52:86:52:8A:86:5D:E0:7C:69:CB:A5:87:A3
Certificate issuer:       /CN=87AC474F6833E4A01A86B23B51E56A661CF2E1F4
Certificate serial:       24
Authority key identifier: 87:AC:47:4F:68:33:E4:A0:1A:86:B2:3B:51:E5:6A:66:1C:F2:E1:F4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h6xHT2gz5KAahrI7UeVqZhzy4fQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1384/rrVAdlgwLVKGUoqGXeB8aculh6M.roa
Signing time:             Mon 01 Aug 2022 01:29:16 +0000
ROA not before:           Mon 01 Aug 2022 01:29:16 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     14618
IP address blocks:        150.70.218.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87AC474F6833E4A01A86B23B51E56A661CF2E1F4
        Validity
            Not Before: Aug  1 01:29:16 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=AEB5407658302D5286528A865DE07C69CBA587A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:89:0a:32:39:b2:a2:0f:47:ac:75:ed:22:42:
                    4d:6b:a2:0f:cf:e3:86:6b:ef:f5:e6:11:ee:87:3e:
                    e1:7c:07:43:cc:77:30:dc:e5:e0:9f:33:61:30:2b:
                    6e:39:8f:a2:2e:2d:b9:23:e9:2b:b6:4d:03:b7:30:
                    2e:9a:c4:04:5b:8a:32:e8:09:5f:2a:d9:e7:66:8c:
                    30:c0:6a:5b:b8:7f:9d:e3:a6:4e:8f:20:9b:5d:e0:
                    42:09:b9:5d:73:f7:59:54:af:bb:3d:b1:7e:60:d7:
                    80:c6:dd:39:9b:88:fa:c1:d1:99:94:33:cf:3a:b0:
                    f2:7b:73:45:39:c8:61:b1:d7:ba:7a:9d:7a:dc:0e:
                    46:ca:39:a5:08:4a:4f:92:7b:8c:6d:d2:fe:f5:d0:
                    0c:1c:1d:76:ff:14:2a:83:bd:8a:a9:62:56:28:99:
                    14:81:8c:b0:86:7d:ba:ff:b7:e2:ba:79:a2:28:39:
                    4d:f8:e9:b8:3c:0a:d1:ad:4a:a7:f4:16:d2:79:8c:
                    3b:72:a7:38:c8:aa:a9:7a:ec:12:fe:f6:ee:cd:47:
                    50:86:0b:7c:90:1d:02:ab:0b:0f:c1:06:11:47:15:
                    d1:c2:4a:4c:1e:57:e5:b4:d6:a6:bd:df:74:ac:b2:
                    90:68:7d:9d:52:94:e7:e9:2d:0f:96:ee:9a:4d:06:
                    3a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B5:40:76:58:30:2D:52:86:52:8A:86:5D:E0:7C:69:CB:A5:87:A3
            X509v3 Authority Key Identifier:
                keyid:87:AC:47:4F:68:33:E4:A0:1A:86:B2:3B:51:E5:6A:66:1C:F2:E1:F4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1384/h6xHT2gz5KAahrI7UeVqZhzy4fQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h6xHT2gz5KAahrI7UeVqZhzy4fQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1384/rrVAdlgwLVKGUoqGXeB8aculh6M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.70.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:78:05:04:39:86:d9:6a:d9:96:bc:92:f2:84:4a:7f:cd:9c:
         1f:ce:27:30:e9:5c:6f:e9:bf:5a:ab:fe:56:22:fd:0b:fd:b7:
         cb:91:10:10:f4:12:ac:cd:86:59:21:34:57:a2:f8:4b:10:f3:
         b0:1b:7b:f4:42:d0:b5:27:10:01:83:85:07:55:b6:ec:fb:c2:
         72:04:68:e4:9f:43:00:72:17:a8:59:18:7a:60:66:48:63:87:
         a7:e4:8d:5c:f1:04:08:a2:bc:4e:58:e4:6f:7f:b8:37:0a:46:
         d1:d0:02:11:31:20:b6:78:cc:0b:e3:3c:4f:91:73:88:52:bc:
         0b:5e:f2:56:38:c1:a1:fd:00:55:b9:fe:eb:42:00:20:46:fe:
         45:b4:fa:d6:f8:eb:56:02:0e:cd:07:52:ec:40:ba:56:5a:54:
         52:0e:ca:b3:37:24:84:f6:56:42:5b:5d:a0:ff:79:e5:bc:c2:
         66:ff:52:29:4a:f0:55:70:34:e9:2c:d5:a2:62:1b:12:86:65:
         df:b7:08:bb:66:28:fc:0a:b7:d1:b4:36:f7:fc:46:b9:45:68:
         13:6b:13:55:9c:38:fc:9f:3c:3a:e7:d9:5b:78:7a:c2:d3:4e:
         d2:eb:dc:f4:e1:42:f8:62:9b:31:11:d2:cf:27:27:b8:e4:4a:
         09:37:8e:4b
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIBJDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4N0FD
NDc0RjY4MzNFNEEwMUE4NkIyM0I1MUU1NkE2NjFDRjJFMUY0MB4XDTIyMDgwMTAx
MjkxNloXDTIzMDcxNTAxMzAwM1owMzExMC8GA1UEAxMoQUVCNTQwNzY1ODMwMkQ1
Mjg2NTI4QTg2NURFMDdDNjlDQkE1ODdBMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKGJCjI5sqIPR6x17SJCTWuiD8/jhmvv9eYR7oc+4XwHQ8x3MNzl
4J8zYTArbjmPoi4tuSPpK7ZNA7cwLprEBFuKMugJXyrZ52aMMMBqW7h/neOmTo8g
m13gQgm5XXP3WVSvuz2xfmDXgMbdOZuI+sHRmZQzzzqw8ntzRTnIYbHXunqdetwO
Rso5pQhKT5J7jG3S/vXQDBwddv8UKoO9iqliViiZFIGMsIZ9uv+34rp5oig5Tfjp
uDwK0a1Kp/QW0nmMO3KnOMiqqXrsEv727s1HUIYLfJAdAqsLD8EGEUcV0cJKTB5X
5bTWpr3fdKyykGh9nVKU5+ktD5bumk0GOsECAwEAAaOCAiYwggIiMB0GA1UdDgQW
BBSutUB2WDAtUoZSioZd4Hxpy6WHozAfBgNVHSMEGDAWgBSHrEdPaDPkoBqGsjtR
5WpmHPLh9DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTM4NC9oNnhIVDJnejVLQWFockk3VWVWcVpoenk0ZlEuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9oNnhIVDJnejVLQWFockk3VWVWcVpo
enk0ZlEuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI
KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTM4NC9yclZBZGxnd0xWS0dVb3FHWGVCOGFjdWxoNk0ucm9h
MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv
cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQAlkbaMA0GCSqGSIb3DQEBCwUAA4IBAQC3eAUEOYbZatmWvJLyhEp/zZwf
zicw6Vxv6b9aq/5WIv0L/bfLkRAQ9BKszYZZITRXovhLEPOwG3v0QtC1JxABg4UH
Vbbs+8JyBGjkn0MAcheoWRh6YGZIY4en5I1c8QQIorxOWORvf7g3CkbR0AIRMSC2
eMwL4zxPkXOIUrwLXvJWOMGh/QBVuf7rQgAgRv5FtPrW+OtWAg7NB1LsQLpWWlRS
DsqzNySE9lZCW12g/3nlvMJm/1IpSvBVcDTpLNWiYhsShmXftwi7Zij8CrfRtDb3
/Ea5RWgTaxNVnDj8nzw659lbeHrC007S69z04UL4YpsxEdLPJye45EoJN45L
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org