Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/ZU_50XFEmekCVRxKe_KQclB91Yc.roa
File:                     ZU_50XFEmekCVRxKe_KQclB91Yc.roa (raw, json)
Hash identifier:          a+AY8cIligodSIr2iDXlx/UYXSwfn5o4aHubHM8xOHc=
Subject key identifier:   65:4F:F9:D1:71:44:99:E9:02:55:1C:4A:7B:F2:90:72:50:7D:D5:87
Certificate issuer:       /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial:       62
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/ZU_50XFEmekCVRxKe_KQclB91Yc.roa
Signing time:             Tue 25 May 2021 02:36:57 +0000
ROA not before:           Tue 25 May 2021 02:36:57 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     18126
IP address blocks:        103.2.20.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
        Validity
            Not Before: May 25 02:36:57 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=654FF9D1714499E902551C4A7BF29072507DD587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:07:5b:65:6d:69:1b:66:e4:41:40:6e:98:11:
                    08:81:d3:e8:a5:6f:62:2b:5f:a6:b6:93:bf:74:6e:
                    cf:b8:d7:7c:f5:0a:52:da:0d:01:0b:68:5e:32:6b:
                    42:51:e9:b3:8d:39:99:f9:9b:86:37:fb:79:7f:b1:
                    ca:fb:4a:ab:aa:df:7f:4d:15:ae:12:9b:47:a0:34:
                    30:9b:11:d5:b1:4a:46:3f:32:ae:0c:21:26:cb:47:
                    d9:bf:c4:af:60:75:4a:29:80:1e:76:fb:d0:ef:f6:
                    ad:e0:86:de:38:1e:55:fe:bb:42:91:05:d5:c6:e1:
                    69:d1:bf:e5:a7:c4:a0:cb:dc:49:88:66:91:f0:19:
                    14:b8:06:ce:b6:3f:88:4f:81:1d:ad:f1:d7:16:41:
                    76:8a:ee:8e:0f:12:96:cb:f4:93:ca:22:d5:52:92:
                    dc:b8:d3:1c:28:32:b0:27:be:a5:a5:6c:7a:4c:17:
                    0f:5b:71:ae:f6:3e:16:ff:c7:d3:5f:c2:bf:73:0f:
                    8c:cb:09:e8:1b:85:a7:e2:44:7e:6a:27:b1:74:f3:
                    f6:c9:2a:91:38:22:99:1f:02:95:86:40:08:1b:fa:
                    c4:0b:8a:1f:64:6e:5a:31:30:09:a2:be:96:3f:fe:
                    c1:12:89:75:3e:00:8b:95:4d:fa:4b:9d:32:57:63:
                    57:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:4F:F9:D1:71:44:99:E9:02:55:1C:4A:7B:F2:90:72:50:7D:D5:87
            X509v3 Authority Key Identifier:
                keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/ZU_50XFEmekCVRxKe_KQclB91Yc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:d8:60:9b:2f:8e:3f:06:48:23:dc:f9:ca:de:3a:58:d3:11:
         93:c3:bc:c1:d2:5a:bc:14:81:9b:07:d5:96:08:43:a2:fc:fe:
         21:ff:2a:8c:02:89:c9:a6:28:23:09:1e:e6:e9:8f:6f:79:fc:
         40:6f:61:97:76:59:69:53:35:25:d4:7c:12:57:44:12:82:0f:
         24:9b:d2:44:2d:10:b1:a4:d3:79:e9:87:71:ce:cc:d1:6c:d3:
         71:df:c9:11:71:66:93:da:4d:8b:5d:60:c0:23:08:d4:16:0c:
         fd:1c:9d:b1:0a:65:0e:b1:6b:24:bf:70:35:64:42:f3:96:cc:
         c7:f2:0f:bb:04:a9:98:5c:08:bf:b7:98:a3:50:3e:82:75:88:
         e5:e8:48:cf:a1:c8:28:98:90:fe:db:a7:a5:ca:c1:84:38:73:
         95:eb:20:7e:3a:9f:44:ae:a8:45:40:8f:89:e0:29:be:40:64:
         37:ae:2c:1c:0b:88:d6:a3:95:9f:1a:7f:08:58:ae:e3:07:58:
         00:fa:ac:6a:fe:9c:ae:1d:d0:35:d0:24:ee:fd:72:71:ec:cb:
         47:47:3c:b0:11:8a:d7:b4:ad:be:9d:92:54:9f:d3:d7:e8:c5:
         43:74:bb:c6:3d:d6:11:41:9c:99:0f:e4:63:c6:6f:ef:d7:d8:
         7e:30:bc:6d
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBYjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDRDMx
MjQyN0Y4MDBCODI5NkRBMTE1NDBDOEI4NkU1Q0UxMkZDNkM1MB4XDTIxMDUyNTAy
MzY1N1oXDTIyMDUxNTAxMzAwMlowMzExMC8GA1UEAxMoNjU0RkY5RDE3MTQ0OTlF
OTAyNTUxQzRBN0JGMjkwNzI1MDdERDU4NzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALsHW2VtaRtm5EFAbpgRCIHT6KVvYitfpraTv3Ruz7jXfPUKUtoN
AQtoXjJrQlHps405mfmbhjf7eX+xyvtKq6rff00VrhKbR6A0MJsR1bFKRj8yrgwh
JstH2b/Er2B1SimAHnb70O/2reCG3jgeVf67QpEF1cbhadG/5afEoMvcSYhmkfAZ
FLgGzrY/iE+BHa3x1xZBdorujg8Slsv0k8oi1VKS3LjTHCgysCe+paVsekwXD1tx
rvY+Fv/H01/Cv3MPjMsJ6BuFp+JEfmonsXTz9skqkTgimR8ClYZACBv6xAuKH2Ru
WjEwCaK+lj/+wRKJdT4Ai5VN+kudMldjVw0CAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBRlT/nRcUSZ6QJVHEp78pByUH3VhzAfBgNVHSMEGDAWgBTNMSQn+AC4KW2hFUDI
uG5c4S/GxTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTczL3pURWtKX2dBdUNsdG9SVkF5TGh1WE9FdnhzVS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3pURWtKX2dBdUNsdG9SVkF5TGh1WE9F
dnhzVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8xNzMvWlVfNTBYRkVtZWtDVlJ4S2VfS1FjbEI5MVljLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmcCFDANBgkqhkiG9w0BAQsFAAOCAQEA
gthgmy+OPwZII9z5yt46WNMRk8O8wdJavBSBmwfVlghDovz+If8qjAKJyaYoIwke
5umPb3n8QG9hl3ZZaVM1JdR8EldEEoIPJJvSRC0QsaTTeemHcc7M0WzTcd/JEXFm
k9pNi11gwCMI1BYM/RydsQplDrFrJL9wNWRC85bMx/IPuwSpmFwIv7eYo1A+gnWI
5ehIz6HIKJiQ/tunpcrBhDhzlesgfjqfRK6oRUCPieApvkBkN64sHAuI1qOVnxp/
CFiu4wdYAPqsav6crh3QNdAk7v1ycezLR0c8sBGK17Stvp2SVJ/T1+jFQ3S7xj3W
EUGcmQ/kY8Zv79fYfjC8bQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org