Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/6sabxpx_9r7xIflro5HPCKINgZU.roa
File:                     6sabxpx_9r7xIflro5HPCKINgZU.roa (raw, json)
Hash identifier:          /aNMSuWbM/wW8rpX4+H6DSgFM7ztkuDom+z51snE4is=
Subject key identifier:   EA:C6:9B:C6:9C:7F:F6:BE:F1:21:F9:6B:A3:91:CF:08:A2:0D:81:95
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       14
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/6sabxpx_9r7xIflro5HPCKINgZU.roa
Signing time:             Tue 07 Jun 2022 00:39:11 +0000
ROA not before:           Tue 07 Jun 2022 00:39:11 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2554
IP address blocks:        211.133.128.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jun  7 00:39:11 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=EAC69BC69C7FF6BEF121F96BA391CF08A20D8195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:81:9a:30:2c:33:04:38:4e:a0:b7:5b:37:10:
                    65:98:55:4a:db:7a:8b:94:d9:b6:c7:93:1a:08:62:
                    03:1d:4c:33:43:3f:7b:fc:62:b0:4b:30:80:aa:55:
                    26:33:35:74:25:16:2e:29:50:92:f9:75:c0:70:7f:
                    88:47:2a:12:91:3b:6e:70:13:e9:75:e4:ca:66:23:
                    a5:1b:5a:8f:71:08:2b:07:29:43:97:e4:a4:1c:65:
                    d0:4e:d6:38:3a:ea:24:4e:5d:78:61:75:06:84:78:
                    fd:4e:35:33:13:b4:e3:40:2b:be:4d:cf:a2:17:14:
                    14:58:98:d3:24:f2:ac:eb:39:7b:f4:8b:0a:24:fa:
                    44:61:89:be:cb:1d:a4:33:d4:1d:ea:c2:9a:b6:a2:
                    f3:7e:43:7d:77:44:63:d0:9d:05:ea:a4:11:89:a8:
                    14:52:b4:bc:cb:82:3d:c0:d9:e5:5c:45:23:8f:a6:
                    5b:a8:78:9b:b5:e8:bb:e5:9e:98:28:fb:3c:19:71:
                    4c:d9:e4:3e:34:ae:5f:05:22:51:a9:5d:81:f1:22:
                    4e:f8:14:26:ca:64:6d:50:da:c3:18:d0:5d:e2:c0:
                    a4:27:fb:09:a6:8e:1d:8f:de:f6:50:25:d5:6f:40:
                    f0:53:0a:ba:5e:b9:fa:cf:8e:d3:84:1c:f5:b8:c9:
                    17:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C6:9B:C6:9C:7F:F6:BE:F1:21:F9:6B:A3:91:CF:08:A2:0D:81:95
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/6sabxpx_9r7xIflro5HPCKINgZU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.133.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         aa:d7:e9:9f:a5:99:61:75:1c:e5:b1:d4:74:cd:2d:14:f0:22:
         1b:c6:b2:01:19:21:46:f5:45:50:b3:74:87:91:bd:4e:e9:88:
         3b:0c:b1:e8:4c:75:7e:8c:48:95:89:79:4b:c3:13:00:8d:49:
         85:52:38:48:4f:6e:bf:67:cf:2a:fe:d1:fd:3e:f5:66:43:1c:
         07:05:ec:8f:9a:6a:bb:a5:96:e9:4e:72:d2:fb:78:74:9c:6c:
         9c:63:aa:f9:41:e4:ed:17:7c:19:33:04:4f:2e:9e:7a:08:50:
         5f:cc:68:05:ed:b2:83:30:ef:35:44:76:0a:e9:ca:d7:6d:7f:
         29:44:a3:54:dd:99:79:64:8e:59:b9:ad:31:ec:cf:07:87:c3:
         44:51:4f:fd:16:79:7a:71:62:10:a7:5b:87:84:9f:b2:66:d0:
         f2:2b:e5:a9:89:86:63:a3:1c:62:e5:a0:e9:b3:bd:2f:9f:45:
         86:c9:10:bb:32:1c:1f:77:b0:6d:7f:b0:ce:1d:4c:1e:51:75:
         34:a6:bf:c9:2a:3c:25:48:ea:a7:41:89:b6:f0:67:88:46:38:
         89:79:43:b0:04:32:88:e6:6d:58:37:ea:24:b4:6f:e3:3d:98:
         d6:9e:a3:b8:5d:fe:66:a7:c4:01:7b:51:3e:66:b0:40:e3:9f:
         8a:c8:5e:ad
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBFDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1OTBB
ODIyODhEMkUyM0RCRkE4NzYzOEYzRUI4Qjk5NUUxODk3RTk1MB4XDTIyMDYwNzAw
MzkxMVoXDTIzMDUxNTAxMzAwNFowMzExMC8GA1UEAxMoRUFDNjlCQzY5QzdGRjZC
RUYxMjFGOTZCQTM5MUNGMDhBMjBEODE5NTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALGBmjAsMwQ4TqC3WzcQZZhVStt6i5TZtseTGghiAx1MM0M/e/xi
sEswgKpVJjM1dCUWLilQkvl1wHB/iEcqEpE7bnAT6XXkymYjpRtaj3EIKwcpQ5fk
pBxl0E7WODrqJE5deGF1BoR4/U41MxO040Arvk3PohcUFFiY0yTyrOs5e/SLCiT6
RGGJvssdpDPUHerCmrai835DfXdEY9CdBeqkEYmoFFK0vMuCPcDZ5VxFI4+mW6h4
m7Xou+WemCj7PBlxTNnkPjSuXwUiUaldgfEiTvgUJspkbVDawxjQXeLApCf7CaaO
HY/e9lAl1W9A8FMKul65+s+O04Qc9bjJF+sCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBTqxpvGnH/2vvEh+Wujkc8Iog2BlTAfBgNVHSMEGDAWgBRZCoIojS4j2/qHY48+
uLmV4Yl+lTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwODMvV1FxQ0tJMHVJOXY2aDJPUFByaTVsZUdKZnBVLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvV1FxQ0tJMHVJOXY2aDJPUFByaTVs
ZUdKZnBVLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDgzLzZzYWJ4cHhfOXI3eElmbHJvNUhQQ0tJTmdaVS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBATThYAwDQYJKoZIhvcNAQELBQADggEBAKrX6Z+lmWF1HOWx1HTNLRTw
IhvGsgEZIUb1RVCzdIeRvU7piDsMsehMdX6MSJWJeUvDEwCNSYVSOEhPbr9nzyr+
0f0+9WZDHAcF7I+aarullulOctL7eHScbJxjqvlB5O0XfBkzBE8unnoIUF/MaAXt
soMw7zVEdgrpytdtfylEo1TdmXlkjlm5rTHszweHw0RRT/0WeXpxYhCnW4eEn7Jm
0PIr5amJhmOjHGLloOmzvS+fRYbJELsyHB93sG1/sM4dTB5RdTSmv8kqPCVI6qdB
ibbwZ4hGOIl5Q7AEMojmbVg36iS0b+M9mNaeo7hd/manxAF7UT5msEDjn4rIXq0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org