Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/ii2RCXEVO6geL1YRxypnFzdh2CY.roa
File:                     ii2RCXEVO6geL1YRxypnFzdh2CY.roa (raw, json)
Hash identifier:          0RUkWcQcN5AmK8TrFVfiZRnX5pCwn/4mahMrFmiLoQU=
Subject key identifier:   8A:2D:91:09:71:15:3B:A8:1E:2F:56:11:C7:2A:67:17:37:61:D8:26
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       2D
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/ii2RCXEVO6geL1YRxypnFzdh2CY.roa
Signing time:             Sat 01 Jan 2022 01:31:49 +0000
ROA not before:           Sat 01 Jan 2022 01:31:49 +0000
ROA not after:            Thu 15 Dec 2022 01:30:02 +0000
asID:                     24319
IP address blocks:        124.40.52.208/28 maxlen: 28

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Jan  1 01:31:49 2022 GMT
            Not After : Dec 15 01:30:02 2022 GMT
        Subject: CN=8A2D910971153BA81E2F5611C72A67173761D826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:2a:23:4b:fa:f8:aa:b3:19:e3:8b:d0:e7:18:
                    25:f2:55:dd:95:5d:6c:12:2a:3c:cb:7d:5c:de:b0:
                    9a:0f:9a:7b:6b:73:81:7b:d9:fb:0e:d1:a7:ea:ea:
                    7b:38:8b:a6:b7:fb:f7:1d:39:f4:49:4c:41:7d:23:
                    82:ff:be:73:f4:2a:aa:01:51:3f:2e:21:d9:3e:59:
                    fb:53:a2:d8:2b:76:16:e7:5e:d8:b3:43:d7:25:ee:
                    1c:2e:3a:5a:14:03:73:f4:86:84:f5:70:63:5d:24:
                    bc:6d:86:cb:b1:19:f8:25:c3:17:37:f7:eb:b7:58:
                    74:20:aa:dc:80:c8:6f:7d:6b:45:eb:34:b4:ba:cf:
                    b5:6d:be:75:29:8b:de:58:7b:39:b8:f7:bb:25:f3:
                    2b:ea:8d:ab:ec:b9:41:c8:98:78:4a:0c:95:d1:ef:
                    b8:45:70:ff:99:b7:79:06:db:e4:3c:5d:03:b1:75:
                    ef:08:32:9d:9c:b4:f9:19:bf:d9:39:68:2a:e5:ae:
                    56:e9:99:e8:1b:57:12:43:b8:3f:e1:a3:1d:0c:11:
                    0e:1c:8b:fc:2f:15:bf:76:ba:c3:e2:6a:96:6d:c3:
                    5a:7e:a8:29:ee:be:8b:63:85:32:21:82:69:bd:d8:
                    02:ba:73:f1:ea:c5:ab:25:8c:73:10:c7:36:61:87:
                    0c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:2D:91:09:71:15:3B:A8:1E:2F:56:11:C7:2A:67:17:37:61:D8:26
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/ii2RCXEVO6geL1YRxypnFzdh2CY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.40.52.208/28

    Signature Algorithm: sha256WithRSAEncryption
         aa:25:ac:13:7f:d0:60:0d:75:a0:3c:9c:09:65:b1:74:c1:18:
         fc:ef:34:35:6f:72:31:e7:f6:c2:21:87:2d:34:d6:58:fc:06:
         ea:4b:63:d9:0d:c8:c1:6d:84:7b:72:1b:3c:ac:f2:83:ab:d0:
         6b:4e:5a:99:3a:54:a9:bf:b3:af:d5:ef:56:9b:5b:9e:a6:ab:
         d5:cb:fc:76:89:4d:f3:b7:e1:1a:72:2d:8e:7b:e1:65:f1:a8:
         13:d6:50:24:eb:75:10:e6:37:74:cf:e5:46:86:26:d9:2c:37:
         b6:7c:7e:59:0d:75:4d:0f:35:36:00:d7:cb:fc:69:c0:fa:cd:
         32:84:9e:66:6e:57:9b:92:41:69:b1:af:23:c3:86:10:89:5f:
         98:cd:00:f7:c4:d6:6e:24:2c:97:5f:ea:9d:96:fa:ba:ce:45:
         ce:6b:e7:9b:da:87:7a:2a:ed:67:74:84:bb:7e:01:0e:4f:22:
         96:fe:33:9b:10:72:c0:fb:f2:b3:5c:f5:ba:03:b3:5a:24:3c:
         60:c7:11:e5:79:ad:c0:f7:74:5e:5b:f4:73:c0:20:f6:a8:28:
         ac:b0:36:06:99:0a:ef:c8:88:9a:10:cd:17:40:ac:5b:33:ce:
         95:63:e5:c3:8b:18:89:66:79:0d:da:d0:be:08:4e:0b:9c:1f:
         b9:e2:75:22
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgIBLTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDQ2
RERGODhBNDZFNEVDMkQ5QTlCQUI1RkYxMzA1RkQwNTdGMTM4MB4XDTIyMDEwMTAx
MzE0OVoXDTIyMTIxNTAxMzAwMlowMzExMC8GA1UEAxMoOEEyRDkxMDk3MTE1M0JB
ODFFMkY1NjExQzcyQTY3MTczNzYxRDgyNjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPUqI0v6+KqzGeOL0OcYJfJV3ZVdbBIqPMt9XN6wmg+ae2tzgXvZ
+w7Rp+rqeziLprf79x059ElMQX0jgv++c/QqqgFRPy4h2T5Z+1Oi2Ct2Fude2LND
1yXuHC46WhQDc/SGhPVwY10kvG2Gy7EZ+CXDFzf367dYdCCq3IDIb31rRes0tLrP
tW2+dSmL3lh7Obj3uyXzK+qNq+y5QciYeEoMldHvuEVw/5m3eQbb5DxdA7F17wgy
nZy0+Rm/2TloKuWuVumZ6BtXEkO4P+GjHQwRDhyL/C8Vv3a6w+Jqlm3DWn6oKe6+
i2OFMiGCab3YArpz8erFqyWMcxDHNmGHDGcCAwEAAaOCAd4wggHaMB0GA1UdDgQW
BBSKLZEJcRU7qB4vVhHHKmcXN2HYJjAfBgNVHSMEGDAWgBSNRt34ikbk7C2am6tf
8TBf0FfxODAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAxMjgvalViZC1JcEc1T3d0bXB1clhfRXdYOUJYOFRnLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvalViZC1JcEc1T3d0bXB1clhfRXdY
OUJYOFRnLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzIwMTI4L2lpMlJDWEVWTzZnZUwxWVJ4eXBuRnpkaDJDWS5yb2Ew
IAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQR8KDTQMA0GCSqGSIb3DQEBCwUA
A4IBAQCqJawTf9BgDXWgPJwJZbF0wRj87zQ1b3Ix5/bCIYctNNZY/AbqS2PZDcjB
bYR7chs8rPKDq9BrTlqZOlSpv7Ov1e9Wm1uepqvVy/x2iU3zt+Eaci2Oe+Fl8agT
1lAk63UQ5jd0z+VGhibZLDe2fH5ZDXVNDzU2ANfL/GnA+s0yhJ5mblebkkFpsa8j
w4YQiV+YzQD3xNZuJCyXX+qdlvq6zkXOa+eb2od6Ku1ndIS7fgEOTyKW/jObEHLA
+/KzXPW6A7NaJDxgxxHlea3A93ReW/RzwCD2qCissDYGmQrvyIiaEM0XQKxbM86V
Y+XDixiJZnkN2tC+CE4LnB+54nUi
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:45 2024 by rpki-client on console-fra.rpki-client.org