Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/7FrYgkNDOCUW6Dx5ifMh2sjQt2Q.roa
File:                     7FrYgkNDOCUW6Dx5ifMh2sjQt2Q.roa (raw, json)
Hash identifier:          0RNpttp8i1vdxMWl44IGJJisc1BVXUdMiAxp636wifU=
Subject key identifier:   EC:5A:D8:82:43:43:38:25:16:E8:3C:79:89:F3:21:DA:C8:D0:B7:64
Certificate issuer:       /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Certificate serial:       2D
Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/7FrYgkNDOCUW6Dx5ifMh2sjQt2Q.roa
Signing time:             Thu 01 Sep 2022 01:28:48 +0000
ROA not before:           Thu 01 Sep 2022 01:28:48 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     23816
IP address blocks:        202.239.0.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
        Validity
            Not Before: Sep  1 01:28:48 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=EC5AD8824343382516E83C7989F321DAC8D0B764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9f:f9:a9:d4:49:30:dd:ef:3a:18:41:0c:a8:
                    95:83:38:6f:75:3b:f1:dd:7c:db:8d:b0:9f:e5:30:
                    7f:ef:e1:dc:14:05:9f:04:97:e6:5e:a9:f6:2e:35:
                    61:76:8a:a1:91:62:77:92:cd:8c:37:60:f0:c2:40:
                    ae:34:63:56:f5:d7:dd:b1:55:17:66:83:f0:e0:b2:
                    41:54:97:11:1e:31:f8:ee:b7:4c:54:6e:6a:1d:da:
                    86:9d:ef:8a:bf:59:a7:65:1b:9a:23:12:81:34:9d:
                    8e:3a:46:98:1c:b4:b2:bb:0e:08:76:72:45:81:67:
                    8d:ec:a0:24:2d:07:8b:a1:b4:1b:14:5e:2a:ce:ee:
                    fd:5f:d8:db:a3:14:f6:b1:64:f6:35:ca:4a:03:3b:
                    21:c2:73:e2:dd:90:4a:39:04:49:ac:69:93:7b:b3:
                    b9:bc:9b:6b:ec:4a:08:4e:1f:ce:bb:6e:b5:3f:00:
                    54:a6:e4:7d:92:9c:1e:fa:d4:44:ce:17:b4:f2:d1:
                    d8:97:b4:e6:d1:a5:a6:d5:34:c1:82:d1:6c:93:f7:
                    90:18:8b:bc:e2:b7:25:83:c7:c0:48:62:fa:f4:15:
                    fd:38:ae:f7:5e:de:73:45:a0:89:50:7b:ff:25:fe:
                    b4:35:ee:33:93:7f:34:cd:10:4d:00:06:ae:36:13:
                    47:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:5A:D8:82:43:43:38:25:16:E8:3C:79:89:F3:21:DA:C8:D0:B7:64
            X509v3 Authority Key Identifier:
                keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/7FrYgkNDOCUW6Dx5ifMh2sjQt2Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.239.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         42:13:80:bf:e7:3d:e9:e9:11:8f:7b:9d:60:d8:33:9e:ad:ad:
         7b:4e:e5:07:e1:d3:84:f4:ad:be:8b:4e:1f:45:6e:ad:81:e6:
         22:a8:42:c9:55:e1:68:62:a3:05:60:63:fd:56:07:ee:b5:76:
         65:7e:c0:6b:41:f2:d4:90:a3:cc:78:e9:4c:22:fb:07:77:41:
         af:b9:7f:ae:48:b3:47:52:2b:57:86:de:0a:73:5a:87:e1:ec:
         d1:0f:d2:d7:25:2b:0e:70:d1:19:c9:cd:9f:be:87:79:7b:b8:
         66:69:28:20:94:d1:32:2d:9e:d0:4f:fa:81:2a:5c:cd:44:fb:
         7a:d2:94:d0:1e:0f:81:d4:0c:b3:94:18:5f:a9:76:85:0c:1a:
         d2:60:5b:19:59:d6:d2:ae:86:18:30:66:fb:65:44:27:94:f3:
         9a:f5:ca:23:a5:8f:ee:99:bd:bb:8f:a0:37:ba:22:4e:d7:c0:
         91:52:06:71:57:70:c8:61:e6:21:b2:d5:da:d7:0a:d6:37:0f:
         6d:41:3b:bc:de:dd:38:67:cf:88:5d:1d:0f:3b:5a:c0:d5:a8:
         92:3f:0e:06:68:11:9c:3a:1b:f9:08:1e:91:bf:41:98:88:ab:
         63:4c:d6:e7:dc:87:e0:28:a1:b8:4a:3f:f9:7e:0a:bc:0d:83:
         ff:62:8e:de
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBLTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNDlF
NjRGQjdDOEM3QzZCNUNEN0M3NzAxODgyRTg1OTdDNDI4MzhFMB4XDTIyMDkwMTAx
Mjg0OFoXDTIzMDgxNTAxMzAwM1owMzExMC8GA1UEAxMoRUM1QUQ4ODI0MzQzMzgy
NTE2RTgzQzc5ODlGMzIxREFDOEQwQjc2NDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMSf+anUSTDd7zoYQQyolYM4b3U78d18242wn+Uwf+/h3BQFnwSX
5l6p9i41YXaKoZFid5LNjDdg8MJArjRjVvXX3bFVF2aD8OCyQVSXER4x+O63TFRu
ah3ahp3vir9Zp2UbmiMSgTSdjjpGmBy0srsOCHZyRYFnjeygJC0Hi6G0GxReKs7u
/V/Y26MU9rFk9jXKSgM7IcJz4t2QSjkESaxpk3uzubyba+xKCE4fzrtutT8AVKbk
fZKcHvrURM4XtPLR2Je05tGlptU0wYLRbJP3kBiLvOK3JYPHwEhi+vQV/Tiu917e
c0WgiVB7/yX+tDXuM5N/NM0QTQAGrjYTR78CAwEAAaOCAigwggIkMB0GA1UdDgQW
BBTsWtiCQ0M4JRboPHmJ8yHayNC3ZDAfBgNVHSMEGDAWgBTEnmT7fIx8a1zXx3AY
guhZfEKDjjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAxMTYveEo1ay0zeU1mR3RjMThkd0dJTG9XWHhDZzQ0LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveEo1ay0zeU1mR3RjMThkd0dJTG9X
WHhDZzQ0LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMTE2LzdGcllna05ET0NVVzZEeDVpZk1oMnNqUXQyUS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBATK7wAwDQYJKoZIhvcNAQELBQADggEBAEITgL/nPenpEY97nWDYM56t
rXtO5Qfh04T0rb6LTh9Fbq2B5iKoQslV4WhiowVgY/1WB+61dmV+wGtB8tSQo8x4
6Uwi+wd3Qa+5f65Is0dSK1eG3gpzWofh7NEP0tclKw5w0RnJzZ++h3l7uGZpKCCU
0TItntBP+oEqXM1E+3rSlNAeD4HUDLOUGF+pdoUMGtJgWxlZ1tKuhhgwZvtlRCeU
85r1yiOlj+6ZvbuPoDe6Ik7XwJFSBnFXcMhh5iGy1drXCtY3D21BO7ze3Thnz4hd
HQ87WsDVqJI/DgZoEZw6G/kIHpG/QZiIq2NM1ufch+AoobhKP/l+CrwNg/9ijt4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:39 2024 by rpki-client on console-ams.rpki-client.org