Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20074/PplCZYNt0UUTMji9Lqoe-8Xqr-I.roa
File:                     PplCZYNt0UUTMji9Lqoe-8Xqr-I.roa (raw, json)
Hash identifier:          WIJi3+eAYZrVA+/JYCwTqJ71Wh3Owx8Y2ftmuSuhqh4=
Subject key identifier:   3E:99:42:65:83:6D:D1:45:13:32:38:BD:2E:AA:1E:FB:C5:EA:AF:E2
Certificate issuer:       /CN=9E5004D44AF29AD1209AB85A95F160E83D24E588
Certificate serial:       08
Authority key identifier: 9E:50:04:D4:4A:F2:9A:D1:20:9A:B8:5A:95:F1:60:E8:3D:24:E5:88
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nlAE1ErymtEgmrhalfFg6D0k5Yg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/PplCZYNt0UUTMji9Lqoe-8Xqr-I.roa
Signing time:             Tue 01 Nov 2022 06:33:57 +0000
ROA not before:           Tue 01 Nov 2022 06:33:57 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     63782
IP address blocks:        133.186.52.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E5004D44AF29AD1209AB85A95F160E83D24E588
        Validity
            Not Before: Nov  1 06:33:57 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=3E994265836DD145133238BD2EAA1EFBC5EAAFE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d2:43:fb:22:fe:d6:19:b1:06:f0:3f:f0:73:
                    ea:fb:1c:9a:33:2a:24:6e:42:33:c1:86:c7:07:a7:
                    81:91:af:5f:66:77:5d:f3:bd:c6:39:a3:0d:13:07:
                    5d:a6:bd:f0:a7:7e:95:e5:8c:02:74:0d:be:b3:af:
                    06:0d:b6:5c:e8:71:0d:e6:b5:1b:b3:66:aa:fb:3f:
                    f6:c1:22:ee:18:a3:c4:e8:41:b8:0d:e1:6f:ca:2e:
                    95:a7:61:ff:df:b3:df:b8:63:68:5f:d6:aa:b9:ef:
                    5d:7c:af:70:47:4d:7a:d6:60:05:84:e8:a8:38:b0:
                    3d:8c:1f:ff:d3:9e:8c:77:96:fe:f6:26:89:6a:40:
                    37:4a:cc:43:2a:f2:a2:58:20:63:05:77:f2:49:26:
                    a4:e6:6a:4c:37:2c:e7:a7:0e:3a:f2:e7:ca:89:d7:
                    a1:a4:65:1a:19:76:2c:89:a4:b0:e1:03:ee:44:2d:
                    89:ca:4d:28:40:83:f6:39:fa:ab:03:22:62:0a:01:
                    dc:e6:07:45:f0:2a:54:12:d4:dc:9b:d4:13:31:f3:
                    a8:2b:57:56:da:7d:91:28:31:ab:98:7d:b3:3e:79:
                    7c:b5:c4:dd:81:8c:b2:85:e6:c7:f0:17:cd:cf:0f:
                    61:ed:58:3a:3d:ee:f1:71:bd:85:b9:05:87:5b:c6:
                    13:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:99:42:65:83:6D:D1:45:13:32:38:BD:2E:AA:1E:FB:C5:EA:AF:E2
            X509v3 Authority Key Identifier:
                keyid:9E:50:04:D4:4A:F2:9A:D1:20:9A:B8:5A:95:F1:60:E8:3D:24:E5:88

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/nlAE1ErymtEgmrhalfFg6D0k5Yg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nlAE1ErymtEgmrhalfFg6D0k5Yg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/PplCZYNt0UUTMji9Lqoe-8Xqr-I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.186.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:a9:68:3c:8b:ad:ed:76:d0:83:9d:0c:6a:f8:1b:13:50:da:
         ab:e0:96:a3:21:e7:2e:75:d2:b2:18:ca:a4:81:07:c1:8f:1b:
         f7:a4:7e:fd:ce:ec:04:3f:bb:28:c2:c1:20:02:4b:1b:c3:fd:
         26:78:cd:e5:06:7a:b8:75:90:c4:e8:52:99:45:ad:c7:02:bf:
         10:28:6b:8a:10:fb:ba:d7:34:5c:e8:d7:df:09:2f:32:e9:b1:
         23:42:25:9f:68:f1:6a:f6:cf:5b:83:43:55:84:74:6b:d4:2f:
         e4:1c:52:75:f7:03:06:bc:6c:75:4c:c8:52:c1:b4:0e:fd:d0:
         38:1b:d2:7d:d2:b4:13:90:0d:04:64:fb:8f:db:94:4c:c2:82:
         1b:11:ba:4b:d7:26:63:f5:c6:51:4a:7f:1c:1a:27:a3:f2:08:
         96:90:fe:ec:3f:2a:3e:fa:e4:ff:7b:11:09:0f:f4:0b:2b:88:
         89:fb:99:d2:37:6c:25:df:ce:d3:df:7a:d6:ae:5c:61:24:65:
         16:c6:52:35:77:79:c8:af:86:06:a0:27:65:a3:02:a8:7e:c5:
         24:5f:c4:a3:4d:79:11:3a:be:35:af:6a:c4:3b:91:2e:36:6c:
         83:6c:2c:f4:33:04:be:20:3a:b4:f8:a7:f6:2f:50:1a:4b:0d:
         66:54:ea:f8
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBCDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5RTUw
MDRENDRBRjI5QUQxMjA5QUI4NUE5NUYxNjBFODNEMjRFNTg4MB4XDTIyMTEwMTA2
MzM1N1oXDTIzMTAxNTAxMzAwMlowMzExMC8GA1UEAxMoM0U5OTQyNjU4MzZERDE0
NTEzMzIzOEJEMkVBQTFFRkJDNUVBQUZFMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOfSQ/si/tYZsQbwP/Bz6vscmjMqJG5CM8GGxwengZGvX2Z3XfO9
xjmjDRMHXaa98Kd+leWMAnQNvrOvBg22XOhxDea1G7Nmqvs/9sEi7hijxOhBuA3h
b8ouladh/9+z37hjaF/WqrnvXXyvcEdNetZgBYToqDiwPYwf/9OejHeW/vYmiWpA
N0rMQyryolggYwV38kkmpOZqTDcs56cOOvLnyonXoaRlGhl2LImksOED7kQticpN
KECD9jn6qwMiYgoB3OYHRfAqVBLU3JvUEzHzqCtXVtp9kSgxq5h9sz55fLXE3YGM
soXmx/AXzc8PYe1YOj3u8XG9hbkFh1vGE80CAwEAAaOCAigwggIkMB0GA1UdDgQW
BBQ+mUJlg23RRRMyOL0uqh77xeqv4jAfBgNVHSMEGDAWgBSeUATUSvKa0SCauFqV
8WDoPSTliDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwNzQvbmxBRTFFcnltdEVnbXJoYWxmRmc2RDBrNVlnLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbmxBRTFFcnltdEVnbXJoYWxmRmc2
RDBrNVlnLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDc0L1BwbENaWU50MFVVVE1qaTlMcW9lLThYcXItSS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAKFujQwDQYJKoZIhvcNAQELBQADggEBAAmpaDyLre120IOdDGr4GxNQ
2qvglqMh5y510rIYyqSBB8GPG/ekfv3O7AQ/uyjCwSACSxvD/SZ4zeUGerh1kMTo
UplFrccCvxAoa4oQ+7rXNFzo198JLzLpsSNCJZ9o8Wr2z1uDQ1WEdGvUL+QcUnX3
Awa8bHVMyFLBtA790Dgb0n3StBOQDQRk+4/blEzCghsRukvXJmP1xlFKfxwaJ6Py
CJaQ/uw/Kj765P97EQkP9AsriIn7mdI3bCXfztPfetauXGEkZRbGUjV3ecivhgag
J2WjAqh+xSRfxKNNeRE6vjWvasQ7kS42bINsLPQzBL4gOrT4p/YvUBpLDWZU6vg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org