Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/RZwuDhvQ3iv4jqTXEMOdtsG-fqY.roa
File:                     RZwuDhvQ3iv4jqTXEMOdtsG-fqY.roa (raw, json)
Hash identifier:          DEoDoVk5YblMJzoCs6rpH5Q2LMqzqCN7soKXS6V5Q4c=
Subject key identifier:   45:9C:2E:0E:1B:D0:DE:2B:F8:8E:A4:D7:10:C3:9D:B6:C1:BE:7E:A6
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       A1
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/RZwuDhvQ3iv4jqTXEMOdtsG-fqY.roa
Signing time:             Thu 01 Sep 2022 01:28:13 +0000
ROA not before:           Thu 01 Sep 2022 01:28:13 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     23816
IP address blocks:        203.216.224.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161 (0xa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Sep  1 01:28:13 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=459C2E0E1BD0DE2BF88EA4D710C39DB6C1BE7EA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:2c:53:9a:9c:60:5b:b1:cf:8c:ca:24:5b:6c:
                    bb:cb:73:36:d6:3e:70:ff:61:36:22:bb:bf:81:fe:
                    fb:a2:8c:3f:32:d3:14:58:b8:b7:0f:90:ce:fb:ea:
                    e1:61:60:1e:9e:e6:8f:24:fe:03:94:85:ae:e3:fd:
                    3e:88:27:65:49:38:9b:81:88:69:40:ce:21:62:fc:
                    4f:6a:31:30:49:bf:d9:0f:ec:85:bf:4f:68:90:95:
                    ef:20:0e:c4:22:6d:d0:11:d1:45:18:c8:8f:4c:6b:
                    c6:e3:52:6f:36:77:4e:05:8d:84:53:65:a5:8c:e5:
                    74:96:a7:7c:c2:31:a6:ea:f4:44:1a:63:13:c9:3e:
                    23:60:74:ad:b2:15:48:ae:88:d2:fc:0c:c5:ac:49:
                    60:1e:23:03:72:45:c1:3c:a1:14:0d:38:97:98:3a:
                    b8:df:15:17:e6:6b:b0:56:02:69:94:42:e7:be:78:
                    69:66:58:2c:59:2f:b8:bc:7e:ff:b3:6b:0d:ff:71:
                    55:f4:25:3f:18:dc:1d:1b:dd:d1:bf:7b:fe:09:d0:
                    14:e5:4f:ae:d8:b6:6d:36:99:0b:31:9d:77:2b:c3:
                    20:c0:68:cf:d4:71:a9:8f:fe:5a:33:46:ea:c5:9c:
                    c7:53:07:53:f3:46:0a:59:c8:5f:56:82:46:12:c9:
                    06:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:9C:2E:0E:1B:D0:DE:2B:F8:8E:A4:D7:10:C3:9D:B6:C1:BE:7E:A6
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/RZwuDhvQ3iv4jqTXEMOdtsG-fqY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.216.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         12:67:9e:0b:1c:eb:b6:f0:15:67:19:b8:1d:0c:70:a0:57:56:
         3b:2a:13:23:ce:0d:41:6b:72:91:d5:d1:d2:5e:82:77:57:cb:
         7b:d6:c4:7f:f7:7a:b7:19:38:25:ef:69:29:8e:a4:ae:33:d9:
         4a:df:f9:44:10:7f:41:b2:6e:5e:ac:e8:ca:25:07:5d:11:55:
         45:48:37:31:6c:41:cc:87:3b:cb:59:f0:af:16:27:2a:6f:d2:
         1f:4b:26:7d:b1:75:5d:b7:e3:70:91:fe:c8:c1:21:35:28:a2:
         56:82:9e:2d:62:04:5e:fe:f0:61:bc:72:66:1a:e2:7a:53:58:
         d1:75:5e:cf:15:41:f7:ec:24:61:a1:6f:50:0a:a2:b4:e4:2c:
         26:1f:c7:a6:30:b0:03:63:c4:3d:73:9c:f9:94:09:b3:73:69:
         c5:7f:c6:96:13:5c:35:55:7d:16:57:df:c4:b8:fa:5f:10:bc:
         6e:6d:c9:e0:a8:8b:cb:82:1a:37:f5:36:15:99:a9:0f:00:85:
         ff:7a:d9:b5:70:75:12:14:65:b8:e9:88:ca:7b:e6:ac:f7:76:
         a7:7e:a0:f5:8e:19:35:05:0b:89:16:4e:60:1a:56:ff:c2:f9:
         07:cb:d2:70:89:1f:a2:bb:18:fb:9f:ac:4e:48:4a:9e:5e:1f:
         87:90:37:d6
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEE1
QUNBQzI5OTBCRDhGODY1NUMwQzcyMUJBQ0ZGMDMwQTU5RDFGQzAeFw0yMjA5MDEw
MTI4MTNaFw0yMzA4MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDQ1OUMyRTBFMUJEMERF
MkJGODhFQTRENzEwQzM5REI2QzFCRTdFQTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDlLFOanGBbsc+MyiRbbLvLczbWPnD/YTYiu7+B/vuijD8y0xRY
uLcPkM776uFhYB6e5o8k/gOUha7j/T6IJ2VJOJuBiGlAziFi/E9qMTBJv9kP7IW/
T2iQle8gDsQibdAR0UUYyI9Ma8bjUm82d04FjYRTZaWM5XSWp3zCMabq9EQaYxPJ
PiNgdK2yFUiuiNL8DMWsSWAeIwNyRcE8oRQNOJeYOrjfFRfma7BWAmmUQue+eGlm
WCxZL7i8fv+zaw3/cVX0JT8Y3B0b3dG/e/4J0BTlT67Ytm02mQsxnXcrwyDAaM/U
camP/lozRurFnMdTB1PzRgpZyF9WgkYSyQbhAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQURZwuDhvQ3iv4jqTXEMOdtsG+fqYwHwYDVR0jBBgwFoAUClrKwpkL2PhlXAxy
G6z/AwpZ0fwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM1NC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3cFowZncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3
cFowZncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzU0L1Jad3VEaHZRM2l2NGpxVFhFTU9kdHNHLWZxWS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAXL2OAwDQYJKoZIhvcNAQELBQADggEBABJnngsc67bwFWcZuB0McKBXVjsq
EyPODUFrcpHV0dJegndXy3vWxH/3ercZOCXvaSmOpK4z2Urf+UQQf0Gybl6s6Mol
B10RVUVINzFsQcyHO8tZ8K8WJypv0h9LJn2xdV2343CR/sjBITUoolaCni1iBF7+
8GG8cmYa4npTWNF1Xs8VQffsJGGhb1AKorTkLCYfx6YwsANjxD1znPmUCbNzacV/
xpYTXDVVfRZX38S4+l8QvG5tyeCoi8uCGjf1NhWZqQ8Ahf962bVwdRIUZbjpiMp7
5qz3dqd+oPWOGTUFC4kWTmAaVv/C+QfL0nCJH6K7GPufrE5ISp5eH4eQN9Y=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org