Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/2gwWGO9HtWgPE0jV1LKt-OPYIXo.roa
File:                     2gwWGO9HtWgPE0jV1LKt-OPYIXo.roa (raw, json)
Hash identifier:          LJ8Ko4GHpGbYzkdpQuogQaGUE57m/E9s4bQFQYAuNHI=
Subject key identifier:   DA:0C:16:18:EF:47:B5:68:0F:13:48:D5:D4:B2:AD:F8:E3:D8:21:7A
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       AB
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/2gwWGO9HtWgPE0jV1LKt-OPYIXo.roa
Signing time:             Sun 01 Jan 2023 01:28:40 +0000
ROA not before:           Sun 01 Jan 2023 01:28:40 +0000
ROA not after:            Fri 15 Dec 2023 01:30:02 +0000
asID:                     59099
IP address blocks:        210.231.216.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Jan  1 01:28:40 2023 GMT
            Not After : Dec 15 01:30:02 2023 GMT
        Subject: CN=DA0C1618EF47B5680F1348D5D4B2ADF8E3D8217A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e5:2c:71:ae:93:9b:9a:cf:7d:e2:72:d9:12:
                    94:6a:2b:cd:9f:81:64:1d:04:2a:51:34:92:b3:3b:
                    f1:ff:58:a2:b9:9a:ac:d2:83:d2:df:b8:31:9c:48:
                    e5:c0:d0:bf:03:e6:0c:35:aa:e0:9d:71:fd:27:9a:
                    b5:b0:92:d7:5d:cc:a8:8e:61:22:ac:5d:fa:8d:56:
                    46:cc:ee:97:9d:20:98:a3:a0:91:6a:6c:b3:19:d6:
                    46:7e:87:49:22:f7:24:6d:86:07:18:e1:0d:91:1f:
                    31:fb:bf:02:6c:9e:67:be:f5:ad:74:de:d7:cb:44:
                    68:a6:84:c2:4c:67:dd:f9:6d:b2:aa:36:9b:5b:33:
                    79:39:37:ef:07:cb:d8:b4:5f:d2:58:17:14:d0:9b:
                    e9:9c:f0:44:43:81:e7:32:25:62:d3:d5:81:74:92:
                    31:84:75:92:a4:ce:c6:f9:f7:f0:86:d8:67:f7:76:
                    ac:ed:b8:20:03:4d:94:bf:3f:44:c8:87:dd:83:15:
                    be:ef:31:86:4f:33:7f:d9:37:a9:40:bb:fe:d1:eb:
                    83:94:e8:76:bd:d7:fb:1d:b2:8e:74:c8:b4:41:53:
                    63:94:65:f7:e1:b2:84:c1:f6:ad:91:d3:11:fe:ed:
                    99:99:97:14:b3:92:d3:40:a0:98:0d:75:f6:99:15:
                    e3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:0C:16:18:EF:47:B5:68:0F:13:48:D5:D4:B2:AD:F8:E3:D8:21:7A
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/2gwWGO9HtWgPE0jV1LKt-OPYIXo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.231.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:03:0b:03:f0:c8:d3:8f:2d:92:3a:ca:38:83:64:b8:c5:db:
         57:e0:07:12:e3:de:63:53:ab:55:33:3a:96:8c:99:54:71:7a:
         bb:99:1a:80:e6:fd:0c:21:46:b8:80:15:a8:7f:92:41:72:c2:
         fa:8f:fe:f9:8b:5c:db:af:1f:8c:3e:58:27:98:03:ee:2c:b7:
         8e:d6:27:a5:4f:a4:0c:82:8d:65:07:7e:62:1c:41:97:ce:8c:
         9f:0d:45:68:9f:2d:31:34:01:7e:4f:29:ab:3b:87:b7:7d:e5:
         3d:8d:c4:2d:5d:39:0e:a6:ad:b2:eb:5c:e0:66:31:72:30:32:
         fd:46:b3:3b:c2:8b:e6:b8:9d:29:7f:48:f3:5f:ab:29:43:b5:
         1d:5c:bf:f2:e8:bd:82:64:b3:80:6a:0d:e4:8b:e8:c7:8e:1e:
         b1:b2:8a:f4:00:c7:5e:de:30:6b:01:85:d4:e8:41:8a:2f:93:
         2a:35:7d:8b:d9:28:f2:57:03:67:9b:d5:1a:e7:98:4f:31:35:
         17:98:e2:c0:c5:62:8f:44:e9:e5:f1:28:6c:40:fb:3e:76:b3:
         1f:04:4c:b1:20:45:70:ab:64:53:29:54:7a:66:39:36:54:9c:
         51:07:44:d2:31:61:f3:cb:2c:61:6f:c7:2c:77:dd:71:8e:f1:
         bb:a5:72:32
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAKswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEE1
QUNBQzI5OTBCRDhGODY1NUMwQzcyMUJBQ0ZGMDMwQTU5RDFGQzAeFw0yMzAxMDEw
MTI4NDBaFw0yMzEyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKERBMEMxNjE4RUY0N0I1
NjgwRjEzNDhENUQ0QjJBREY4RTNEODIxN0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDF5SxxrpObms994nLZEpRqK82fgWQdBCpRNJKzO/H/WKK5mqzS
g9LfuDGcSOXA0L8D5gw1quCdcf0nmrWwktddzKiOYSKsXfqNVkbM7pedIJijoJFq
bLMZ1kZ+h0ki9yRthgcY4Q2RHzH7vwJsnme+9a103tfLRGimhMJMZ935bbKqNptb
M3k5N+8Hy9i0X9JYFxTQm+mc8ERDgecyJWLT1YF0kjGEdZKkzsb59/CG2Gf3dqzt
uCADTZS/P0TIh92DFb7vMYZPM3/ZN6lAu/7R64OU6Ha91/sdso50yLRBU2OUZffh
soTB9q2R0xH+7ZmZlxSzktNAoJgNdfaZFeOLAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU2gwWGO9HtWgPE0jV1LKt+OPYIXowHwYDVR0jBBgwFoAUClrKwpkL2PhlXAxy
G6z/AwpZ0fwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM1NC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3cFowZncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3
cFowZncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzU0LzJnd1dHTzlIdFdnUEUwalYxTEt0LU9QWUlYby5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBALS59gwDQYJKoZIhvcNAQELBQADggEBAFEDCwPwyNOPLZI6yjiDZLjF21fg
BxLj3mNTq1UzOpaMmVRxeruZGoDm/QwhRriAFah/kkFywvqP/vmLXNuvH4w+WCeY
A+4st47WJ6VPpAyCjWUHfmIcQZfOjJ8NRWifLTE0AX5PKas7h7d95T2NxC1dOQ6m
rbLrXOBmMXIwMv1GszvCi+a4nSl/SPNfqylDtR1cv/LovYJks4BqDeSL6MeOHrGy
ivQAx17eMGsBhdToQYovkyo1fYvZKPJXA2eb1RrnmE8xNReY4sDFYo9E6eXxKGxA
+z52sx8ETLEgRXCrZFMpVHpmOTZUnFEHRNIxYfPLLGFvxyx33XGO8bulcjI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org