Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30073/T7vEo67xQFg8LsHK2DExFaoRMj8.roa
File:                     T7vEo67xQFg8LsHK2DExFaoRMj8.roa (raw, json)
Hash identifier:          2Zfh1EyAkceekaYYaJCeTe8XE41lKagSFh2UVC56OCw=
Subject key identifier:   4F:BB:C4:A3:AE:F1:40:58:3C:2E:C1:CA:D8:31:31:15:AA:11:32:3F
Certificate issuer:       /CN=B3C7A19804F728E8FF5E45BEC8DA582105A3DA9D
Certificate serial:       17
Authority key identifier: B3:C7:A1:98:04:F7:28:E8:FF:5E:45:BE:C8:DA:58:21:05:A3:DA:9D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s8ehmAT3KOj_XkW-yNpYIQWj2p0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30073/T7vEo67xQFg8LsHK2DExFaoRMj8.roa
Signing time:             Tue 25 May 2021 02:37:10 +0000
ROA not before:           Tue 25 May 2021 02:37:10 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     4713
IP address blocks:        2400:4000::/22 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3C7A19804F728E8FF5E45BEC8DA582105A3DA9D
        Validity
            Not Before: May 25 02:37:10 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=4FBBC4A3AEF140583C2EC1CAD8313115AA11323F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:03:35:6d:c8:8b:41:ef:24:93:1c:f3:92:9e:
                    f8:18:10:5c:fe:93:aa:f5:2c:b7:b2:a4:21:71:61:
                    ab:f7:a4:30:4b:f9:40:81:10:7c:7d:76:cc:fc:1a:
                    44:c9:7e:e7:8b:51:05:14:fc:27:c1:83:7e:36:be:
                    d7:a9:25:6d:0d:38:b5:b0:35:ce:c4:13:bd:24:b3:
                    91:d1:70:86:f3:37:1b:1b:3c:d1:ea:44:05:f8:7f:
                    57:c1:e5:cd:73:89:f8:70:57:2d:66:ec:b2:32:e6:
                    8f:4c:8e:05:00:eb:90:9b:49:72:86:32:8b:01:3b:
                    3e:ef:e7:d1:31:f0:73:54:56:0f:3a:06:09:9b:30:
                    43:58:e3:65:19:ea:da:7d:7f:a5:a8:f0:b9:d9:59:
                    e1:46:d1:3a:46:6a:35:34:18:68:66:39:b3:9f:84:
                    34:84:83:6c:25:a2:a2:f6:c6:55:da:c6:bb:2a:fb:
                    84:f8:fc:a8:fa:96:3f:9c:9b:29:fb:ed:bf:a7:f0:
                    46:e5:05:04:b4:10:8b:20:77:c9:b5:87:c5:d2:9e:
                    d7:b4:9a:1f:d5:58:49:41:54:65:57:9c:16:f9:49:
                    86:b7:46:2e:2f:61:08:0f:8d:4e:be:e9:4f:69:5c:
                    82:d6:9f:fc:d0:53:a3:8b:b9:b7:ec:a0:52:31:74:
                    53:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:BB:C4:A3:AE:F1:40:58:3C:2E:C1:CA:D8:31:31:15:AA:11:32:3F
            X509v3 Authority Key Identifier:
                keyid:B3:C7:A1:98:04:F7:28:E8:FF:5E:45:BE:C8:DA:58:21:05:A3:DA:9D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30073/s8ehmAT3KOj_XkW-yNpYIQWj2p0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s8ehmAT3KOj_XkW-yNpYIQWj2p0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30073/T7vEo67xQFg8LsHK2DExFaoRMj8.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:4000::/22

    Signature Algorithm: sha256WithRSAEncryption
         30:8d:4b:f1:d0:a5:ca:ba:43:84:1e:e5:4f:7b:10:30:dd:7a:
         36:68:85:97:45:66:b1:dc:57:8b:ff:68:c6:f4:c2:ec:0e:00:
         95:a6:af:2c:81:da:31:14:13:3c:70:21:70:69:ae:93:3f:36:
         21:40:8d:69:b6:9c:56:00:b1:90:55:12:a0:c1:ee:f4:53:c0:
         b2:0a:ef:e1:c0:47:43:b1:c3:a2:bf:c4:74:ea:41:c7:7b:18:
         94:11:5a:c6:fc:c0:d6:99:48:e8:da:83:70:54:a5:0b:95:0e:
         61:5d:54:46:c0:6a:84:72:20:a9:da:32:92:a2:a4:22:9a:07:
         18:e2:85:14:c0:0b:2b:90:80:52:e2:09:d4:7b:07:7e:e3:a4:
         db:8b:9e:60:ce:c1:89:6c:e7:42:9f:d3:dc:39:dd:13:8c:32:
         55:5c:b7:6f:c0:65:b7:d0:be:0b:f5:ad:8a:ba:ee:b7:2f:bf:
         dc:bb:04:16:56:c0:97:86:6d:7b:0e:88:d1:5e:13:b0:1f:f5:
         4a:8c:9a:d4:a7:53:0e:84:c2:a1:4d:7c:58:7f:f8:c1:ed:80:
         92:9a:43:ea:e9:19:08:0d:a9:c0:b2:4f:ec:74:e9:55:d6:cb:
         4c:e8:c1:c6:88:02:a6:7a:78:17:bd:40:bd:cc:90:44:23:d2:
         94:22:63:42
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCM0M3
QTE5ODA0RjcyOEU4RkY1RTQ1QkVDOERBNTgyMTA1QTNEQTlEMB4XDTIxMDUyNTAy
MzcxMFoXDTIyMDUxNTAxMzAwMlowMzExMC8GA1UEAxMoNEZCQkM0QTNBRUYxNDA1
ODNDMkVDMUNBRDgzMTMxMTVBQTExMzIzRjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL0DNW3Ii0HvJJMc85Ke+BgQXP6TqvUst7KkIXFhq/ekMEv5QIEQ
fH12zPwaRMl+54tRBRT8J8GDfja+16klbQ04tbA1zsQTvSSzkdFwhvM3Gxs80epE
Bfh/V8HlzXOJ+HBXLWbssjLmj0yOBQDrkJtJcoYyiwE7Pu/n0THwc1RWDzoGCZsw
Q1jjZRnq2n1/pajwudlZ4UbROkZqNTQYaGY5s5+ENISDbCWiovbGVdrGuyr7hPj8
qPqWP5ybKfvtv6fwRuUFBLQQiyB3ybWHxdKe17SaH9VYSUFUZVecFvlJhrdGLi9h
CA+NTr7pT2lcgtaf/NBTo4u5t+ygUjF0U+sCAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBRPu8SjrvFAWDwuwcrYMTEVqhEyPzAfBgNVHSMEGDAWgBSzx6GYBPco6P9eRb7I
2lghBaPanTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwNzMvczhlaG1BVDNLT2pfWGtXLXlOcFlJUVdqMnAwLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvczhlaG1BVDNLT2pfWGtXLXlOcFlJ
UVdqMnAwLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMDczL1Q3dkVvNjd4UUZnOExzSEsyREV4RmFvUk1qOC5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgACMAYDBAIkAEAwDQYJKoZIhvcNAQELBQAD
ggEBADCNS/HQpcq6Q4Qe5U97EDDdejZohZdFZrHcV4v/aMb0wuwOAJWmryyB2jEU
EzxwIXBprpM/NiFAjWm2nFYAsZBVEqDB7vRTwLIK7+HAR0Oxw6K/xHTqQcd7GJQR
Wsb8wNaZSOjag3BUpQuVDmFdVEbAaoRyIKnaMpKipCKaBxjihRTACyuQgFLiCdR7
B37jpNuLnmDOwYls50Kf09w53ROMMlVct2/AZbfQvgv1rYq67rcvv9y7BBZWwJeG
bXsOiNFeE7Af9UqMmtSnUw6EwqFNfFh/+MHtgJKaQ+rpGQgNqcCyT+x06VXWy0zo
wcaIAqZ6eBe9QL3MkEQj0pQiY0I=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org