Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30320/vVfzFGP1SoasMeXSxJC4DPV6Aaw.roa
File:                     vVfzFGP1SoasMeXSxJC4DPV6Aaw.roa (raw, json)
Hash identifier:          D8W+x5W9oPuNbAbSm0kuMI7DX+n6cMJn4AVIPF6QrCI=
Subject key identifier:   BD:57:F3:14:63:F5:4A:86:AC:31:E5:D2:C4:90:B8:0C:F5:7A:01:AC
Certificate issuer:       /CN=041B660708C68D9770418A81721FF0771F0A4A19
Certificate serial:       05
Authority key identifier: 04:1B:66:07:08:C6:8D:97:70:41:8A:81:72:1F:F0:77:1F:0A:4A:19
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BBtmBwjGjZdwQYqBch_wdx8KShk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30320/vVfzFGP1SoasMeXSxJC4DPV6Aaw.roa
Signing time:             Sat 23 Apr 2022 10:25:30 +0000
ROA not before:           Sat 23 Apr 2022 10:25:30 +0000
ROA not after:            Sat 15 Apr 2023 01:30:02 +0000
asID:                     131929
IP address blocks:        2402:73c0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=041B660708C68D9770418A81721FF0771F0A4A19
        Validity
            Not Before: Apr 23 10:25:30 2022 GMT
            Not After : Apr 15 01:30:02 2023 GMT
        Subject: CN=BD57F31463F54A86AC31E5D2C490B80CF57A01AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:13:dd:38:fd:f3:7e:39:e3:4c:b0:80:36:52:
                    36:d8:26:3e:fc:24:fc:7f:d5:2e:2b:99:d4:57:88:
                    ce:13:ba:c6:c2:9d:f1:07:44:82:d3:f6:6f:c7:bc:
                    cb:8b:68:4f:46:68:20:35:b5:88:4d:b5:98:92:90:
                    cf:52:a2:4a:ac:9d:14:1a:c2:05:12:b1:4a:70:ac:
                    50:a7:2b:6b:a5:40:e0:ae:25:66:0a:c1:7e:f9:af:
                    97:06:fe:92:9b:35:ed:48:3f:10:2a:ff:6d:a9:15:
                    1f:fe:63:ea:50:6f:99:fd:82:dd:09:85:a2:1c:c2:
                    09:49:40:7e:58:64:84:d2:2f:21:54:a4:37:8d:4b:
                    ca:9d:fb:3d:c6:d5:c7:9d:67:72:4f:fa:49:a8:d5:
                    b1:7f:7e:28:a6:c1:a1:b4:a4:e6:f7:02:d8:a4:45:
                    50:c9:7f:d6:63:b7:b1:30:dd:3c:1d:e6:2b:03:33:
                    e1:b1:f2:30:a5:81:23:c2:c0:65:07:d4:65:58:07:
                    6a:df:55:91:af:7e:13:64:6e:2f:b2:05:99:9d:fb:
                    a0:67:d9:21:7d:be:15:6b:48:17:41:5f:4a:ac:ef:
                    d2:46:a9:4d:12:b4:40:8e:f8:79:bb:f7:a2:58:c3:
                    d6:f2:47:41:68:3a:52:3d:5e:2d:b6:21:30:76:40:
                    e3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:57:F3:14:63:F5:4A:86:AC:31:E5:D2:C4:90:B8:0C:F5:7A:01:AC
            X509v3 Authority Key Identifier:
                keyid:04:1B:66:07:08:C6:8D:97:70:41:8A:81:72:1F:F0:77:1F:0A:4A:19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30320/BBtmBwjGjZdwQYqBch_wdx8KShk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BBtmBwjGjZdwQYqBch_wdx8KShk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30320/vVfzFGP1SoasMeXSxJC4DPV6Aaw.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:73c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:97:d3:4c:7c:84:11:b0:bd:ef:68:0f:c1:c3:3e:fb:90:cb:
         80:13:d9:51:88:29:49:d0:98:c5:64:45:7e:c4:65:22:7d:30:
         ef:68:b2:b1:79:59:6d:80:a5:52:2b:4c:d3:26:ee:d4:e6:31:
         4c:1b:59:1c:8c:d3:b8:80:a1:f7:1f:49:1f:85:5a:97:44:f5:
         3a:d6:cb:88:e5:11:72:e5:ea:8c:fc:d2:9f:9a:5c:94:21:d6:
         9a:c3:46:48:eb:bb:cb:5b:75:76:f6:3e:33:01:5d:1a:05:6c:
         12:62:97:f0:47:d1:96:e6:7f:51:aa:37:52:f8:81:cf:07:32:
         16:7e:e6:50:28:63:7f:cc:2b:9e:a1:0f:75:5b:b5:a7:4d:15:
         e4:5e:e4:ea:9a:bc:51:b8:c3:a7:93:09:cd:e3:eb:5a:d3:57:
         c0:fb:d1:9c:70:42:90:c8:03:16:d8:81:f4:a6:84:b4:e4:72:
         0c:18:db:ae:c8:e5:0c:34:12:d3:80:9c:e3:b5:2c:76:da:ae:
         1f:c1:11:5c:a3:01:cb:23:01:92:7c:ce:4f:d9:a7:d8:a5:11:
         2c:60:81:bc:0c:57:d7:0a:17:22:50:c3:2d:66:32:53:bc:0e:
         b0:c8:f4:14:29:45:21:70:2d:09:5d:ac:5c:67:23:70:c6:e2:
         3a:92:4f:c0
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgIBBTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwNDFC
NjYwNzA4QzY4RDk3NzA0MThBODE3MjFGRjA3NzFGMEE0QTE5MB4XDTIyMDQyMzEw
MjUzMFoXDTIzMDQxNTAxMzAwMlowMzExMC8GA1UEAxMoQkQ1N0YzMTQ2M0Y1NEE4
NkFDMzFFNUQyQzQ5MEI4MENGNTdBMDFBQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALkT3Tj9834540ywgDZSNtgmPvwk/H/VLiuZ1FeIzhO6xsKd8QdE
gtP2b8e8y4toT0ZoIDW1iE21mJKQz1KiSqydFBrCBRKxSnCsUKcra6VA4K4lZgrB
fvmvlwb+kps17Ug/ECr/bakVH/5j6lBvmf2C3QmFohzCCUlAflhkhNIvIVSkN41L
yp37PcbVx51nck/6SajVsX9+KKbBobSk5vcC2KRFUMl/1mO3sTDdPB3mKwMz4bHy
MKWBI8LAZQfUZVgHat9Vka9+E2RuL7IFmZ37oGfZIX2+FWtIF0FfSqzv0kapTRK0
QI74ebv3oljD1vJHQWg6Uj1eLbYhMHZA49sCAwEAAaOCAd4wggHaMB0GA1UdDgQW
BBS9V/MUY/VKhqwx5dLEkLgM9XoBrDAfBgNVHSMEGDAWgBQEG2YHCMaNl3BBioFy
H/B3HwpKGTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAzMjAvQkJ0bUJ3akdqWmR3UVlxQmNoX3dkeDhLU2hrLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvQkJ0bUJ3akdqWmR3UVlxQmNoX3dk
eDhLU2hrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMzIwL3ZWZnpGR1AxU29hc01lWFN4SkM0RFBWNkFhdy5yb2Ew
IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAnPAMA0GCSqGSIb3DQEBCwUA
A4IBAQB4l9NMfIQRsL3vaA/Bwz77kMuAE9lRiClJ0JjFZEV+xGUifTDvaLKxeVlt
gKVSK0zTJu7U5jFMG1kcjNO4gKH3H0kfhVqXRPU61suI5RFy5eqM/NKfmlyUIdaa
w0ZI67vLW3V29j4zAV0aBWwSYpfwR9GW5n9RqjdS+IHPBzIWfuZQKGN/zCueoQ91
W7WnTRXkXuTqmrxRuMOnkwnN4+ta01fA+9GccEKQyAMW2IH0poS05HIMGNuuyOUM
NBLTgJzjtSx22q4fwRFcowHLIwGSfM5P2afYpREsYIG8DFfXChciUMMtZjJTvA6w
yPQUKUUhcC0JXaxcZyNwxuI6kk/A
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org