Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/8bkVg3K5VfCn_zt3AH5hX_ReRfQ.roa
File:                     8bkVg3K5VfCn_zt3AH5hX_ReRfQ.roa (raw, json)
Hash identifier:          8c8vbKwVdiq4gkQ3Y3sdqjSzObgxQ28x2+WLk/Y1NKI=
Subject key identifier:   F1:B9:15:83:72:B9:55:F0:A7:FF:3B:77:00:7E:61:5F:F4:5E:45:F4
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       69
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/8bkVg3K5VfCn_zt3AH5hX_ReRfQ.roa
Signing time:             Tue 28 Sep 2021 08:05:29 +0000
ROA not before:           Tue 28 Sep 2021 08:05:29 +0000
ROA not after:            Thu 15 Sep 2022 01:30:02 +0000
asID:                     23816
IP address blocks:        124.147.32.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Sep 28 08:05:29 2021 GMT
            Not After : Sep 15 01:30:02 2022 GMT
        Subject: CN=F1B9158372B955F0A7FF3B77007E615FF45E45F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:74:21:aa:76:96:50:66:e2:54:99:34:27:86:
                    35:74:40:dc:6f:66:31:ed:e6:0b:90:a3:c6:c8:16:
                    bd:7b:c9:32:4b:08:df:5d:6c:6e:f7:b1:e6:bc:a4:
                    f6:71:dd:69:2d:55:ef:7b:47:6d:bc:00:26:0c:eb:
                    00:c2:6a:05:46:69:79:44:7e:01:ca:1c:a2:b4:4b:
                    83:47:cc:df:79:71:de:be:e8:89:08:15:fe:21:5c:
                    82:46:9e:d4:06:54:5c:5e:7d:c0:4f:8b:05:69:b0:
                    2c:a4:b5:06:a2:d7:0e:3f:21:2b:87:00:85:f5:aa:
                    85:56:f3:4b:9a:ea:0c:7e:76:b3:33:be:a0:b6:d9:
                    c1:2a:69:23:f3:3b:6a:50:a8:96:6b:6e:1c:e9:3c:
                    7c:8d:41:11:c8:66:9c:0f:68:fc:c7:4a:ca:25:b7:
                    f9:43:bc:2d:3c:95:58:20:ca:f7:4c:69:97:1e:ff:
                    92:69:ff:ad:42:86:0c:78:ab:09:a5:66:46:de:33:
                    8b:86:bd:a5:71:39:69:fd:cb:c0:f5:bd:7a:ee:eb:
                    ec:8a:92:06:ab:86:d2:0c:9c:ee:6a:ba:0f:50:fe:
                    4e:36:5b:72:ec:91:fd:61:30:0a:31:67:ae:00:d2:
                    de:ff:8b:08:d2:5e:de:77:5d:c2:67:95:d5:68:ab:
                    59:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B9:15:83:72:B9:55:F0:A7:FF:3B:77:00:7E:61:5F:F4:5E:45:F4
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/8bkVg3K5VfCn_zt3AH5hX_ReRfQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.147.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         08:2e:20:63:03:25:03:60:b3:be:42:e5:7e:78:b6:66:67:b5:
         47:23:10:1c:3d:6d:0b:96:9d:f2:76:6d:ba:79:37:5e:ad:6c:
         fd:6a:f1:86:6f:e8:23:af:ec:c0:cd:92:b9:c3:94:47:8c:32:
         44:67:c1:39:98:59:5c:97:90:29:fa:04:95:d3:43:bb:97:3b:
         42:3d:99:49:4b:a5:5b:3f:d1:38:3c:3d:17:5b:48:bf:f8:61:
         77:2a:7a:72:3f:d1:55:09:81:65:af:0a:04:f8:bc:96:35:48:
         cf:3b:f7:92:ba:33:78:c4:13:a0:5d:75:9e:06:f1:af:ab:aa:
         89:55:f2:d6:a0:c9:a9:b0:39:9b:37:40:97:96:dd:8f:4b:94:
         5f:db:5a:8c:ca:25:f0:a3:a6:00:55:64:e5:9e:00:12:d6:0c:
         d8:8c:41:46:6d:83:ed:97:ec:2d:94:be:93:66:99:75:4d:70:
         08:01:72:8a:64:7c:1b:72:c3:aa:b6:52:b2:12:75:21:88:4c:
         3f:cf:3a:80:af:b4:9c:dd:d3:fb:37:fe:8d:cb:74:f0:65:c0:
         2c:b6:2e:f4:37:4c:29:87:e5:d3:de:33:a8:f3:9e:af:d5:97:
         78:e6:b9:53:4a:4e:66:f9:4c:53:b6:d8:fd:41:6a:9a:6a:a2:
         19:bc:88:9c
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBaTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwQTVB
Q0FDMjk5MEJEOEY4NjU1QzBDNzIxQkFDRkYwMzBBNTlEMUZDMB4XDTIxMDkyODA4
MDUyOVoXDTIyMDkxNTAxMzAwMlowMzExMC8GA1UEAxMoRjFCOTE1ODM3MkI5NTVG
MEE3RkYzQjc3MDA3RTYxNUZGNDVFNDVGNDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMh0Iap2llBm4lSZNCeGNXRA3G9mMe3mC5CjxsgWvXvJMksI311s
bvex5ryk9nHdaS1V73tHbbwAJgzrAMJqBUZpeUR+AcocorRLg0fM33lx3r7oiQgV
/iFcgkae1AZUXF59wE+LBWmwLKS1BqLXDj8hK4cAhfWqhVbzS5rqDH52szO+oLbZ
wSppI/M7alColmtuHOk8fI1BEchmnA9o/MdKyiW3+UO8LTyVWCDK90xplx7/kmn/
rUKGDHirCaVmRt4zi4a9pXE5af3LwPW9eu7r7IqSBquG0gyc7mq6D1D+TjZbcuyR
/WEwCjFnrgDS3v+LCNJe3nddwmeV1WirWYECAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBTxuRWDcrlV8Kf/O3cAfmFf9F5F9DAfBgNVHSMEGDAWgBQKWsrCmQvY+GVcDHIb
rP8DClnR/DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzU0L0Nsckt3cGtMMlBobFhBeHlHNnpfQXdwWjBmdy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0Nsckt3cGtMMlBobFhBeHlHNnpfQXdw
WjBmdy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8zNTQvOGJrVmczSzVWZkNuX3p0M0FINWhYX1JlUmZRLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBXyTIDANBgkqhkiG9w0BAQsFAAOCAQEA
CC4gYwMlA2CzvkLlfni2Zme1RyMQHD1tC5ad8nZtunk3Xq1s/Wrxhm/oI6/swM2S
ucOUR4wyRGfBOZhZXJeQKfoEldNDu5c7Qj2ZSUulWz/RODw9F1tIv/hhdyp6cj/R
VQmBZa8KBPi8ljVIzzv3krozeMQToF11ngbxr6uqiVXy1qDJqbA5mzdAl5bdj0uU
X9tajMol8KOmAFVk5Z4AEtYM2IxBRm2D7ZfsLZS+k2aZdU1wCAFyimR8G3LDqrZS
shJ1IYhMP886gK+0nN3T+zf+jct08GXALLYu9DdMKYfl094zqPOer9WXeOa5U0pO
ZvlMU7bY/UFqmmqiGbyInA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org