Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2432/pXQ95rxV5OnpJelb3xZOHDBkbZc.roa
File:                     pXQ95rxV5OnpJelb3xZOHDBkbZc.roa (raw, json)
Hash identifier:          5MjcysXqd4O7YDd8j+yba5ucQeIkfhm6TIMaBswSe5A=
Subject key identifier:   A5:74:3D:E6:BC:55:E4:E9:E9:25:E9:5B:DF:16:4E:1C:30:64:6D:97
Certificate issuer:       /CN=E62F69C95A098F8073F5F3C3C1A98B76CBF8502A
Certificate serial:       31
Authority key identifier: E6:2F:69:C9:5A:09:8F:80:73:F5:F3:C3:C1:A9:8B:76:CB:F8:50:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5i9pyVoJj4Bz9fPDwamLdsv4UCo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2432/pXQ95rxV5OnpJelb3xZOHDBkbZc.roa
Signing time:             Sun 01 May 2022 01:30:24 +0000
ROA not before:           Sun 01 May 2022 01:30:24 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     7671
IP address blocks:        157.3.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62F69C95A098F8073F5F3C3C1A98B76CBF8502A
        Validity
            Not Before: May  1 01:30:24 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=A5743DE6BC55E4E9E925E95BDF164E1C30646D97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:fc:dd:29:be:62:4f:46:dc:53:f6:3a:39:34:
                    ef:ee:61:46:6c:f6:dd:5b:b2:32:82:55:8e:cb:bf:
                    0b:0e:05:71:85:9e:b6:77:45:df:71:5b:b0:2e:a8:
                    fb:fc:52:fe:f0:72:fa:1b:e0:d9:c2:5b:57:fa:74:
                    7b:cf:59:0e:47:70:28:b4:52:98:77:11:84:d7:99:
                    74:cb:83:fe:0b:cb:be:ff:d8:be:fa:76:21:33:e1:
                    5a:c7:7a:6f:24:f2:0b:8b:d8:b0:e2:e3:a5:87:50:
                    8c:18:25:12:0d:55:bf:5f:0e:a4:14:b8:53:d1:db:
                    d7:09:74:6c:f4:2c:5f:ea:5b:dc:d8:f5:3a:85:ec:
                    25:2c:de:d4:92:73:27:d0:b0:00:b2:1b:65:ce:44:
                    01:17:5a:89:41:00:f5:46:a9:ad:cf:cc:d4:1f:b4:
                    16:c6:2e:66:8c:5b:82:f5:81:6f:cf:0d:a8:a2:e3:
                    6e:0c:08:c4:bf:07:3f:4a:f0:06:08:22:88:3c:75:
                    6f:ca:2f:0c:04:7f:8d:72:a8:c8:4c:23:2a:87:c7:
                    56:b6:52:7b:76:6d:25:92:70:6c:12:51:0d:b1:1d:
                    54:f1:9b:5d:6b:02:69:3c:ef:7d:6b:20:4b:52:e7:
                    aa:45:5b:4c:4c:08:db:f3:74:c7:0b:3e:30:3a:08:
                    ff:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:74:3D:E6:BC:55:E4:E9:E9:25:E9:5B:DF:16:4E:1C:30:64:6D:97
            X509v3 Authority Key Identifier:
                keyid:E6:2F:69:C9:5A:09:8F:80:73:F5:F3:C3:C1:A9:8B:76:CB:F8:50:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2432/5i9pyVoJj4Bz9fPDwamLdsv4UCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5i9pyVoJj4Bz9fPDwamLdsv4UCo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2432/pXQ95rxV5OnpJelb3xZOHDBkbZc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.3.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         31:43:46:ef:8e:32:7d:9e:40:3f:89:8b:e4:63:1b:68:5a:6c:
         2a:ed:db:1b:ff:62:5f:49:10:8d:f4:9a:78:da:43:b9:d8:fe:
         4f:06:55:96:6a:4b:0d:93:af:7d:b8:e2:6e:ef:a0:01:ba:48:
         e2:8e:09:32:b0:5e:54:45:79:41:02:57:1a:9a:64:e7:60:f6:
         ef:28:a1:8e:76:44:aa:c1:53:f4:d1:82:49:0e:c8:43:9b:50:
         84:ee:e5:fc:dc:e8:8d:b4:c4:05:a1:a4:88:dc:03:39:cf:21:
         bf:01:90:27:56:db:06:2e:28:12:5f:dc:5c:2b:87:d9:d2:38:
         b9:22:74:46:b5:5e:3c:1d:31:c4:7f:09:be:2e:f2:49:b1:5b:
         97:c6:56:6c:08:61:69:9d:a3:e3:7c:35:a4:6f:46:71:b4:e9:
         6a:9c:5f:54:63:21:60:74:6e:70:04:7f:53:88:ed:46:79:aa:
         09:21:ae:71:98:2f:ab:71:ba:dd:7d:8c:aa:a7:06:e5:8c:88:
         87:34:0c:ab:ff:84:69:5d:5e:47:d6:38:e1:3a:2f:fe:84:80:
         f4:a3:78:92:27:6a:1f:a0:32:30:e0:2c:c5:8e:c3:ff:fb:88:
         25:8f:91:a3:cd:1a:d4:91:8c:8a:f5:e9:22:a2:33:bf:07:42:
         a2:6f:38:6b
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIBMTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFNjJG
NjlDOTVBMDk4RjgwNzNGNUYzQzNDMUE5OEI3NkNCRjg1MDJBMB4XDTIyMDUwMTAx
MzAyNFoXDTIzMDQyNzA5NTIzNFowMzExMC8GA1UEAxMoQTU3NDNERTZCQzU1RTRF
OUU5MjVFOTVCREYxNjRFMUMzMDY0NkQ5NzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANf83Sm+Yk9G3FP2Ojk07+5hRmz23VuyMoJVjsu/Cw4FcYWetndF
33FbsC6o+/xS/vBy+hvg2cJbV/p0e89ZDkdwKLRSmHcRhNeZdMuD/gvLvv/Yvvp2
ITPhWsd6byTyC4vYsOLjpYdQjBglEg1Vv18OpBS4U9Hb1wl0bPQsX+pb3Nj1OoXs
JSze1JJzJ9CwALIbZc5EARdaiUEA9Uaprc/M1B+0FsYuZoxbgvWBb88NqKLjbgwI
xL8HP0rwBggiiDx1b8ovDAR/jXKoyEwjKofHVrZSe3ZtJZJwbBJRDbEdVPGbXWsC
aTzvfWsgS1LnqkVbTEwI2/N0xws+MDoI/4UCAwEAAaOCAiUwggIhMB0GA1UdDgQW
BBSldD3mvFXk6ekl6VvfFk4cMGRtlzAfBgNVHSMEGDAWgBTmL2nJWgmPgHP188PB
qYt2y/hQKjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjQzMi81aTlweVZvSmo0Qno5ZlBEd2FtTGRzdjRVQ28uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC81aTlweVZvSmo0Qno5ZlBEd2FtTGRz
djRVQ28uY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI
KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMjQzMi9wWFE5NXJ4VjVPbnBKZWxiM3haT0hEQmtiWmMucm9h
MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv
cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIA
ATAFAwMAnQMwDQYJKoZIhvcNAQELBQADggEBADFDRu+OMn2eQD+Ji+RjG2habCrt
2xv/Yl9JEI30mnjaQ7nY/k8GVZZqSw2Tr3244m7voAG6SOKOCTKwXlRFeUECVxqa
ZOdg9u8ooY52RKrBU/TRgkkOyEObUITu5fzc6I20xAWhpIjcAznPIb8BkCdW2wYu
KBJf3Fwrh9nSOLkidEa1XjwdMcR/Cb4u8kmxW5fGVmwIYWmdo+N8NaRvRnG06Wqc
X1RjIWB0bnAEf1OI7UZ5qgkhrnGYL6txut19jKqnBuWMiIc0DKv/hGldXkfWOOE6
L/6EgPSjeJInah+gMjDgLMWOw//7iCWPkaPNGtSRjIr16SKiM78HQqJvOGs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org