Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30245/Z-w_vPwodDZW1kXeopVdZt3YjpA.roa
File:                     Z-w_vPwodDZW1kXeopVdZt3YjpA.roa (raw, json)
Hash identifier:          UvzAQdir63zh2z7MU11QFsckGYMdgqpflukkAwPBG9Y=
Subject key identifier:   67:EC:3F:BC:FC:28:74:36:56:D6:45:DE:A2:95:5D:66:DD:D8:8E:90
Certificate issuer:       /CN=3C267D028FD99C613E3A6F425415D7DB7FCD1D4A
Certificate serial:       02
Authority key identifier: 3C:26:7D:02:8F:D9:9C:61:3E:3A:6F:42:54:15:D7:DB:7F:CD:1D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30245/Z-w_vPwodDZW1kXeopVdZt3YjpA.roa
Signing time:             Thu 13 Oct 2022 07:04:16 +0000
ROA not before:           Thu 13 Oct 2022 07:04:16 +0000
ROA not after:            Fri 13 Oct 2023 07:00:44 +0000
asID:                     10000
IP address blocks:        2405:ed00::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C267D028FD99C613E3A6F425415D7DB7FCD1D4A
        Validity
            Not Before: Oct 13 07:04:16 2022 GMT
            Not After : Oct 13 07:00:44 2023 GMT
        Subject: CN=67EC3FBCFC28743656D645DEA2955D66DDD88E90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:85:fe:fb:6c:46:d9:42:00:2e:51:f4:76:e0:
                    cc:2e:17:9e:be:60:4e:30:c0:0f:0d:88:14:ef:ae:
                    e6:51:1d:2d:d1:a4:d4:a1:fe:42:c1:c5:30:11:b0:
                    ee:0b:db:7f:7d:cb:11:65:d2:81:85:f1:c9:75:d1:
                    02:33:e3:8e:2f:c7:22:04:e9:1d:1b:a4:18:7f:60:
                    c3:b3:a3:22:e1:21:69:a8:eb:63:94:58:cd:eb:c1:
                    d3:4d:1c:10:fe:ec:a0:a8:b9:4d:8e:8b:3b:63:2b:
                    6c:2f:0e:ec:39:d1:b7:1c:10:8f:b6:c9:3b:52:bf:
                    92:a9:1c:39:4c:1d:83:77:7b:6c:37:f9:0c:cd:10:
                    17:66:93:68:01:d8:af:43:d4:c1:ea:0e:c5:72:1a:
                    c4:54:01:21:b6:8b:4a:d8:67:01:c3:aa:54:0b:31:
                    10:b2:08:07:62:e4:84:97:12:2c:3c:57:a4:25:f0:
                    c7:bd:95:6b:17:cc:9b:de:4b:ee:47:ca:02:6d:7d:
                    bc:0a:87:85:72:f5:28:9e:e0:9b:dd:6f:62:13:12:
                    21:14:6f:5f:f1:a9:ce:aa:b9:de:4a:b3:c9:ab:47:
                    1c:b1:83:70:e7:e4:92:49:79:9f:48:2e:2e:94:a4:
                    ae:35:85:d6:ad:d0:1f:78:78:20:1d:2d:e6:23:6f:
                    2f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:EC:3F:BC:FC:28:74:36:56:D6:45:DE:A2:95:5D:66:DD:D8:8E:90
            X509v3 Authority Key Identifier:
                keyid:3C:26:7D:02:8F:D9:9C:61:3E:3A:6F:42:54:15:D7:DB:7F:CD:1D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30245/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30245/Z-w_vPwodDZW1kXeopVdZt3YjpA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:ed00::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:76:5c:55:8f:15:e3:61:7e:b5:bb:35:9d:c3:00:b0:09:74:
         d1:ad:8a:c3:95:f2:4a:c7:0d:dc:df:73:76:c9:1e:30:51:3a:
         99:b9:8f:9f:3d:97:7f:5a:70:b2:2d:8e:08:a2:c4:6b:cc:f7:
         45:62:5d:89:8b:e3:b8:00:99:21:3f:b9:b6:68:6d:57:0b:0a:
         c6:46:83:09:60:d6:e7:cd:21:ec:c1:ac:11:a9:67:03:0b:6c:
         9e:c5:29:bc:f5:1f:58:fb:62:ec:7c:ba:c6:e7:fb:7a:35:ed:
         44:d0:70:5a:84:5c:13:52:d6:fe:15:c6:32:cb:6b:70:47:cc:
         03:7c:26:16:1a:b6:01:2e:a7:79:06:8c:10:f2:0f:c2:30:9e:
         e1:8a:ad:f7:e1:94:66:bc:d6:75:c1:8a:ef:13:66:64:91:bf:
         36:21:da:c0:da:b2:19:26:2b:59:e2:e3:0f:87:f6:53:ad:ed:
         23:8d:f0:70:2b:c3:e2:c1:ad:85:91:db:86:6e:92:3d:c4:99:
         ca:93:f6:c6:9a:fd:11:42:d5:c3:fe:6c:7f:d6:f6:12:d0:e3:
         47:58:37:da:8f:ba:40:1e:6a:a3:b9:00:b3:98:3c:70:80:f2:
         9f:41:8c:34:3a:79:45:06:e3:9b:d4:77:3e:ce:87:36:b9:4b:
         d4:64:9e:6e
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzQzI2
N0QwMjhGRDk5QzYxM0UzQTZGNDI1NDE1RDdEQjdGQ0QxRDRBMB4XDTIyMTAxMzA3
MDQxNloXDTIzMTAxMzA3MDA0NFowMzExMC8GA1UEAxMoNjdFQzNGQkNGQzI4NzQz
NjU2RDY0NURFQTI5NTVENjZEREQ4OEU5MDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOeF/vtsRtlCAC5R9HbgzC4Xnr5gTjDADw2IFO+u5lEdLdGk1KH+
QsHFMBGw7gvbf33LEWXSgYXxyXXRAjPjji/HIgTpHRukGH9gw7OjIuEhaajrY5RY
zevB000cEP7soKi5TY6LO2MrbC8O7DnRtxwQj7bJO1K/kqkcOUwdg3d7bDf5DM0Q
F2aTaAHYr0PUweoOxXIaxFQBIbaLSthnAcOqVAsxELIIB2LkhJcSLDxXpCXwx72V
axfMm95L7kfKAm19vAqHhXL1KJ7gm91vYhMSIRRvX/Gpzqq53kqzyatHHLGDcOfk
kkl5n0guLpSkrjWF1q3QH3h4IB0t5iNvL6UCAwEAAaOCAikwggIlMB0GA1UdDgQW
BBRn7D+8/Ch0NlbWRd6ilV1m3diOkDAfBgNVHSMEGDAWgBQ8Jn0Cj9mcYT46b0JU
Fdfbf80dSjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAyNDUvUENaOUFvX1puR0UtT205Q1ZCWFgyM19OSFVvLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvUENaOUFvX1puR0UtT205Q1ZCWFgy
M19OSFVvLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMjQ1L1otd192UHdvZERaVzFrWGVvcFZkWnQzWWpwQS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAkBe0AMA0GCSqGSIb3DQEBCwUAA4IBAQCtdlxVjxXjYX61uzWdwwCw
CXTRrYrDlfJKxw3c33N2yR4wUTqZuY+fPZd/WnCyLY4IosRrzPdFYl2Ji+O4AJkh
P7m2aG1XCwrGRoMJYNbnzSHswawRqWcDC2yexSm89R9Y+2LsfLrG5/t6Ne1E0HBa
hFwTUtb+FcYyy2twR8wDfCYWGrYBLqd5BowQ8g/CMJ7hiq334ZRmvNZ1wYrvE2Zk
kb82IdrA2rIZJitZ4uMPh/ZTre0jjfBwK8Piwa2FkduGbpI9xJnKk/bGmv0RQtXD
/mx/1vYS0ONHWDfaj7pAHmqjuQCzmDxwgPKfQYw0OnlFBuOb1Hc+zoc2uUvUZJ5u
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org