Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/kdzD-gt5vsMKafiu0jaxSd1DrEU.roa
File:                     kdzD-gt5vsMKafiu0jaxSd1DrEU.roa (raw, json)
Hash identifier:          dQziCcsjnZG2BHJCUT1qimlgQuOq5TOQ+eiGrWUSHU8=
Subject key identifier:   91:DC:C3:FA:0B:79:BE:C3:0A:69:F8:AE:D2:36:B1:49:DD:43:AC:45
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       9B
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/kdzD-gt5vsMKafiu0jaxSd1DrEU.roa
Signing time:             Thu 01 Sep 2022 01:28:12 +0000
ROA not before:           Thu 01 Sep 2022 01:28:12 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     7530
IP address blocks:        210.231.208.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155 (0x9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Sep  1 01:28:12 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=91DCC3FA0B79BEC30A69F8AED236B149DD43AC45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3a:6f:f6:60:1b:10:15:52:45:b8:11:69:b5:
                    fd:d7:42:27:91:cc:bc:c6:6e:68:29:1f:08:66:1e:
                    1c:7e:f2:f9:5c:ee:90:ee:ea:f9:9f:7a:79:ac:6e:
                    f8:c3:dd:21:17:92:8f:1e:e9:50:6d:b0:b6:6b:81:
                    9a:e0:5e:ff:95:b2:31:a4:56:01:58:45:47:a7:68:
                    bc:96:72:38:74:96:89:7e:da:41:78:05:09:01:3d:
                    b5:b4:69:b4:8d:09:5e:14:f4:f8:72:07:cb:70:15:
                    c1:b0:07:43:37:4d:73:52:2e:ff:58:e4:ca:32:bd:
                    e8:85:48:00:ef:58:78:be:67:03:7f:6f:d3:23:a6:
                    84:47:7e:70:f2:8e:f6:ca:66:5b:ef:eb:92:87:04:
                    0f:41:f1:58:ff:04:08:c6:68:0e:bb:ea:79:0f:86:
                    0b:4e:fa:f3:24:dc:59:35:55:ca:78:b1:75:a2:d4:
                    72:d4:72:1b:e9:03:b5:42:af:3e:16:c9:8a:f0:b9:
                    c9:9d:d1:19:c3:0f:0e:6c:70:4c:93:e6:34:45:f9:
                    8a:39:7c:32:f7:6f:d5:d5:d9:5b:de:f4:6f:b1:a4:
                    98:1c:9d:7a:3c:7b:d5:0a:0f:51:17:4e:9f:ce:59:
                    3e:05:27:3f:ab:3b:cb:79:71:df:9a:62:74:7f:05:
                    52:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:DC:C3:FA:0B:79:BE:C3:0A:69:F8:AE:D2:36:B1:49:DD:43:AC:45
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/kdzD-gt5vsMKafiu0jaxSd1DrEU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.231.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         37:5d:7e:79:66:c3:fb:17:a8:75:b4:98:ff:88:71:a9:ca:8c:
         5f:fe:a7:ca:39:de:89:cf:0c:b2:a4:4a:35:20:9a:6f:ae:d8:
         e2:c6:67:0c:ce:8a:b7:bf:67:bc:f9:88:ee:06:56:c3:06:ff:
         fc:d1:c6:71:6e:4b:11:c9:e6:d3:09:98:9f:7c:f4:94:c7:b8:
         55:1f:0a:52:f8:c4:37:44:ce:49:c4:0e:b6:69:62:d2:35:40:
         69:50:c6:65:b1:0f:1a:0c:a7:2f:79:d7:59:71:2c:d5:1a:1e:
         af:d0:c4:ab:c8:70:30:87:97:3a:3f:87:bb:c0:98:85:b2:2e:
         25:a1:13:84:d5:f1:d8:ad:63:34:53:de:46:f6:64:02:bc:0c:
         fa:aa:09:9d:bd:46:ff:3e:fe:86:6a:5a:2b:4d:00:0a:3e:1b:
         58:0a:69:bf:fb:49:4d:73:ad:4d:bf:f4:c4:73:32:37:3c:ad:
         b0:ac:eb:49:72:b6:d5:9e:25:37:be:5f:9a:d8:9a:3b:0b:4f:
         f9:bb:88:70:5e:e4:eb:46:44:e4:19:be:52:9d:fb:85:4f:f0:
         45:f3:33:b2:14:66:bb:b9:15:94:07:37:17:f8:81:16:43:f6:
         ea:58:4e:2e:96:db:49:79:e4:1c:78:cb:46:f7:05:da:f2:09:
         85:bc:23:fd
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAJswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEE1
QUNBQzI5OTBCRDhGODY1NUMwQzcyMUJBQ0ZGMDMwQTU5RDFGQzAeFw0yMjA5MDEw
MTI4MTJaFw0yMzA4MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDkxRENDM0ZBMEI3OUJF
QzMwQTY5RjhBRUQyMzZCMTQ5REQ0M0FDNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGOm/2YBsQFVJFuBFptf3XQieRzLzGbmgpHwhmHhx+8vlc7pDu
6vmfenmsbvjD3SEXko8e6VBtsLZrgZrgXv+VsjGkVgFYRUenaLyWcjh0lol+2kF4
BQkBPbW0abSNCV4U9PhyB8twFcGwB0M3TXNSLv9Y5MoyveiFSADvWHi+ZwN/b9Mj
poRHfnDyjvbKZlvv65KHBA9B8Vj/BAjGaA676nkPhgtO+vMk3Fk1Vcp4sXWi1HLU
chvpA7VCrz4WyYrwucmd0RnDDw5scEyT5jRF+Yo5fDL3b9XV2Vve9G+xpJgcnXo8
e9UKD1EXTp/OWT4FJz+rO8t5cd+aYnR/BVKhAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUkdzD+gt5vsMKafiu0jaxSd1DrEUwHwYDVR0jBBgwFoAUClrKwpkL2PhlXAxy
G6z/AwpZ0fwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM1NC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3cFowZncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3
cFowZncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzU0L2tkekQtZ3Q1dnNNS2FmaXUwamF4U2QxRHJFVS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAPS59AwDQYJKoZIhvcNAQELBQADggEBADddfnlmw/sXqHW0mP+IcanKjF/+
p8o53onPDLKkSjUgmm+u2OLGZwzOire/Z7z5iO4GVsMG//zRxnFuSxHJ5tMJmJ98
9JTHuFUfClL4xDdEzknEDrZpYtI1QGlQxmWxDxoMpy9511lxLNUaHq/QxKvIcDCH
lzo/h7vAmIWyLiWhE4TV8ditYzRT3kb2ZAK8DPqqCZ29Rv8+/oZqWitNAAo+G1gK
ab/7SU1zrU2/9MRzMjc8rbCs60lyttWeJTe+X5rYmjsLT/m7iHBe5OtGROQZvlKd
+4VP8EXzM7IUZru5FZQHNxf4gRZD9upYTi6W20l55Bx4y0b3BdryCYW8I/0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org