Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2490/Qbg-fmNW5MQqncKcdDZ6zVt_btA.roa
File:                     Qbg-fmNW5MQqncKcdDZ6zVt_btA.roa (raw, json)
Hash identifier:          DJp8RtEa93h+iRSBT2QoR9FqFbLf5xOVTblEx8KhdXQ=
Subject key identifier:   41:B8:3E:7E:63:56:E4:C4:2A:9D:C2:9C:74:36:7A:CD:5B:7F:6E:D0
Certificate issuer:       /CN=B8E53C5244B7F9A76D5F9DF9FBAF61E57B2EA93B
Certificate serial:       2A
Authority key identifier: B8:E5:3C:52:44:B7:F9:A7:6D:5F:9D:F9:FB:AF:61:E5:7B:2E:A9:3B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/Qbg-fmNW5MQqncKcdDZ6zVt_btA.roa
Signing time:             Sun 01 May 2022 01:29:52 +0000
ROA not before:           Sun 01 May 2022 01:29:52 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     7687
IP address blocks:        160.246.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8E53C5244B7F9A76D5F9DF9FBAF61E57B2EA93B
        Validity
            Not Before: May  1 01:29:52 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=41B83E7E6356E4C42A9DC29C74367ACD5B7F6ED0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fc:24:fc:5d:55:a1:1a:ef:af:2a:84:39:d0:
                    cb:ea:56:9e:5b:00:2e:42:5a:1e:25:2b:0e:ba:27:
                    78:6f:1b:5d:a4:a9:3d:3a:ce:c6:1c:a9:8c:56:70:
                    92:2b:a4:8b:63:2f:0a:13:da:c1:17:b2:b4:ff:98:
                    55:2c:e9:a1:c9:5f:cc:b7:dd:80:28:67:22:d3:cb:
                    99:9d:4e:df:c4:25:92:3c:09:38:d3:c0:00:5f:02:
                    1f:87:07:36:87:85:57:55:30:e4:fd:98:2c:a1:9a:
                    4d:84:79:e9:a5:06:15:22:29:e9:90:f5:b1:69:a4:
                    3b:60:a8:f6:44:95:05:df:f5:61:aa:c0:c7:e4:fc:
                    9c:6e:c4:2e:a7:f6:91:7e:b1:1b:43:4d:54:ea:3d:
                    f8:0c:f0:06:bc:a6:07:63:1c:13:7b:c1:0c:96:07:
                    25:2d:e1:8a:0c:9d:9c:a5:06:17:05:8d:30:85:ab:
                    4a:6f:ca:f1:a2:97:0a:9a:d6:f1:de:4f:b2:74:e9:
                    c4:af:8e:68:9b:84:34:3a:e2:3d:0a:9d:09:71:f2:
                    14:30:b6:b7:0c:a8:a4:99:c3:0a:27:59:3b:ef:85:
                    21:b3:d0:2f:1d:82:e6:23:9e:0c:ef:ac:65:15:84:
                    e6:4b:b3:84:c4:52:a3:9e:10:dd:81:aa:a1:bd:3c:
                    ff:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B8:3E:7E:63:56:E4:C4:2A:9D:C2:9C:74:36:7A:CD:5B:7F:6E:D0
            X509v3 Authority Key Identifier:
                keyid:B8:E5:3C:52:44:B7:F9:A7:6D:5F:9D:F9:FB:AF:61:E5:7B:2E:A9:3B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/Qbg-fmNW5MQqncKcdDZ6zVt_btA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.246.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4d:f1:5d:64:08:01:96:7e:44:10:a7:db:74:a6:f6:74:9f:b6:
         9c:00:ac:61:f8:27:55:c3:8d:7d:a1:ab:52:56:dd:21:49:fb:
         c7:0e:b9:f9:78:0a:5b:63:fa:b5:06:d7:10:73:d5:05:dd:35:
         78:30:53:8d:c1:f3:4a:cc:70:c9:95:b8:8d:e2:c1:9e:68:c9:
         15:4a:78:e1:26:37:8d:6c:4c:6e:31:e5:07:0c:70:93:37:66:
         40:4b:f0:77:c5:5c:35:6d:71:45:a5:32:5e:df:7c:c4:e7:ae:
         3a:a7:b8:1d:b1:3d:d4:9f:b0:2e:85:a6:a0:5e:e0:ca:6f:e3:
         4c:02:94:d4:bf:0b:0c:1d:6b:23:8b:5a:9e:d5:c7:68:0c:dc:
         a1:80:d7:97:38:a8:a5:1e:25:fc:67:17:3d:48:8f:58:39:e1:
         1d:1d:cd:e2:47:03:f8:fc:dd:50:e6:db:c2:28:dd:28:86:b1:
         19:9c:f6:52:fc:9d:c2:91:a8:e4:dc:e3:1d:ec:8e:a9:3f:6c:
         d5:0c:c5:81:ab:b7:3c:a8:cc:a7:bf:4a:dc:eb:2d:56:c6:a5:
         0a:3c:f2:81:06:c7:89:fd:9b:28:91:ad:01:00:29:71:e0:32:
         dd:3e:11:da:da:1f:d5:e6:f5:b4:74:c1:2c:a4:b4:4f:bf:07:
         da:b9:2d:42
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIBKjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOEU1
M0M1MjQ0QjdGOUE3NkQ1RjlERjlGQkFGNjFFNTdCMkVBOTNCMB4XDTIyMDUwMTAx
Mjk1MloXDTIzMDQyNzA5NTIzNFowMzExMC8GA1UEAxMoNDFCODNFN0U2MzU2RTRD
NDJBOURDMjlDNzQzNjdBQ0Q1QjdGNkVEMDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAN38JPxdVaEa768qhDnQy+pWnlsALkJaHiUrDroneG8bXaSpPTrO
xhypjFZwkiuki2MvChPawReytP+YVSzpoclfzLfdgChnItPLmZ1O38QlkjwJONPA
AF8CH4cHNoeFV1Uw5P2YLKGaTYR56aUGFSIp6ZD1sWmkO2Co9kSVBd/1YarAx+T8
nG7ELqf2kX6xG0NNVOo9+AzwBrymB2McE3vBDJYHJS3higydnKUGFwWNMIWrSm/K
8aKXCprW8d5PsnTpxK+OaJuENDriPQqdCXHyFDC2twyopJnDCidZO++FIbPQLx2C
5iOeDO+sZRWE5kuzhMRSo54Q3YGqob08/4UCAwEAAaOCAiUwggIhMB0GA1UdDgQW
BBRBuD5+Y1bkxCqdwpx0NnrNW39u0DAfBgNVHSMEGDAWgBS45TxSRLf5p21fnfn7
r2Hley6pOzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjQ5MC91T1U4VWtTMy1hZHRYNTM1LTY5aDVYc3VxVHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91T1U4VWtTMy1hZHRYNTM1LTY5aDVY
c3VxVHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI
KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMjQ5MC9RYmctZm1OVzVNUXFuY0tjZERaNnpWdF9idEEucm9h
MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv
cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIA
ATAFAwMAoPYwDQYJKoZIhvcNAQELBQADggEBAE3xXWQIAZZ+RBCn23Sm9nSftpwA
rGH4J1XDjX2hq1JW3SFJ+8cOufl4Cltj+rUG1xBz1QXdNXgwU43B80rMcMmVuI3i
wZ5oyRVKeOEmN41sTG4x5QcMcJM3ZkBL8HfFXDVtcUWlMl7ffMTnrjqnuB2xPdSf
sC6FpqBe4Mpv40wClNS/CwwdayOLWp7Vx2gM3KGA15c4qKUeJfxnFz1Ij1g54R0d
zeJHA/j83VDm28Io3SiGsRmc9lL8ncKRqOTc4x3sjqk/bNUMxYGrtzyozKe/Stzr
LVbGpQo88oEGx4n9myiRrQEAKXHgMt0+EdraH9Xm9bR0wSyktE+/B9q5LUI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org