Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/39047/5DTdPnwn37p-E5I88C9yFZYgdBc.roa
File:                     5DTdPnwn37p-E5I88C9yFZYgdBc.roa (raw, json)
Hash identifier:          4jJy4XtQj7kDDflZZnJpHLgtfQufUE2dnAc45lilVhE=
Subject key identifier:   E4:34:DD:3E:7C:27:DF:BA:7E:13:92:3C:F0:2F:72:15:96:20:74:17
Certificate issuer:       /CN=FDB1289227F2B8A6DB0D3386C1EC7510FFFDAE60
Certificate serial:       2A
Authority key identifier: FD:B1:28:92:27:F2:B8:A6:DB:0D:33:86:C1:EC:75:10:FF:FD:AE:60
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_bEokifyuKbbDTOGwex1EP_9rmA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39047/5DTdPnwn37p-E5I88C9yFZYgdBc.roa
Signing time:             Sun 01 May 2022 01:30:42 +0000
ROA not before:           Sun 01 May 2022 01:30:42 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     59128
IP address blocks:        2001:df0:8500::/48 maxlen: 128

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDB1289227F2B8A6DB0D3386C1EC7510FFFDAE60
        Validity
            Not Before: May  1 01:30:42 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=E434DD3E7C27DFBA7E13923CF02F721596207417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:24:9d:5c:e2:12:22:f6:7c:ca:f7:37:16:69:
                    3e:ba:f7:4c:c3:57:c3:07:75:d4:8f:95:37:77:6a:
                    47:e4:59:e1:33:19:30:3c:7d:7a:9c:d3:6a:b0:71:
                    05:b0:66:f1:71:61:80:b8:3b:0a:c4:ac:c8:4c:68:
                    ab:95:3b:2d:10:af:22:78:cf:fb:29:a7:88:90:07:
                    5b:01:8b:24:60:7e:f4:b2:99:b0:49:47:98:6d:fe:
                    46:12:7e:f3:9c:e5:0d:0a:f8:44:06:a9:f7:89:23:
                    46:8d:1e:af:6a:45:b7:dd:4e:11:8d:51:6b:2b:b4:
                    de:d2:5f:4e:2d:79:fd:bb:4e:4b:6b:3d:43:0e:91:
                    d1:70:4a:a7:06:71:10:7f:a7:86:b5:70:55:64:ba:
                    76:53:a8:99:38:b8:83:52:96:8c:aa:5e:48:38:6f:
                    bf:0d:ed:e7:08:cf:a0:55:8b:33:11:c0:a9:5b:dd:
                    5b:d5:c7:cb:da:5f:0a:aa:ea:11:f6:d5:2e:97:46:
                    af:33:2a:d0:f4:18:49:bc:85:b1:c5:01:e1:12:b2:
                    42:c5:ae:ac:c3:3c:df:9e:f1:1c:d5:1e:7e:e5:18:
                    d9:b2:1a:4e:bc:cd:55:15:4a:61:f2:bf:7f:fb:75:
                    b7:fa:23:14:82:60:20:11:38:80:5f:7b:76:c8:cd:
                    73:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:34:DD:3E:7C:27:DF:BA:7E:13:92:3C:F0:2F:72:15:96:20:74:17
            X509v3 Authority Key Identifier:
                keyid:FD:B1:28:92:27:F2:B8:A6:DB:0D:33:86:C1:EC:75:10:FF:FD:AE:60

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39047/_bEokifyuKbbDTOGwex1EP_9rmA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_bEokifyuKbbDTOGwex1EP_9rmA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39047/5DTdPnwn37p-E5I88C9yFZYgdBc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:8500::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:bb:ce:ae:53:03:e2:4d:5d:bd:52:81:3a:8c:89:70:69:5a:
         6d:df:b6:8c:15:13:84:0d:86:38:6a:d5:7c:14:b7:9e:37:83:
         66:3a:07:dd:c8:bb:85:c5:2a:f8:04:50:9a:4f:66:2e:ce:78:
         72:02:8e:15:68:d4:33:3b:c6:a1:e2:7b:ff:50:dd:81:c7:ad:
         96:e0:46:1a:e7:12:b6:b5:a1:7e:b8:3a:e3:ac:2a:13:ab:69:
         19:dd:eb:b3:70:7a:a6:2a:91:62:58:60:ed:40:e6:0f:a5:68:
         51:ea:f1:47:54:65:9f:59:35:17:65:47:f5:7a:c7:12:2e:25:
         b3:44:dd:c8:09:61:88:f0:2f:41:a0:10:98:d3:18:a0:31:f0:
         34:2f:4e:d3:23:44:8d:87:a8:fd:07:ad:48:f5:82:66:f5:c9:
         17:ea:a1:b0:bb:15:4e:35:2d:b3:17:80:0b:cb:f6:3c:ca:c1:
         06:5d:40:ba:3a:54:92:6d:e3:cc:53:35:12:8a:73:78:1b:2e:
         b7:91:ae:57:75:a6:d3:f0:5f:a6:a8:6a:ce:f6:fd:dd:94:56:
         a6:00:76:fd:3f:9f:df:f6:2f:c4:4e:64:42:71:d3:38:94:73:
         09:b5:fa:20:ec:48:47:36:fc:83:e0:83:55:68:99:e9:ad:69:
         e6:2b:90:6e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgIBKjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGREIx
Mjg5MjI3RjJCOEE2REIwRDMzODZDMUVDNzUxMEZGRkRBRTYwMB4XDTIyMDUwMTAx
MzA0MloXDTIzMDQyNzA5NTIzNFowMzExMC8GA1UEAxMoRTQzNEREM0U3QzI3REZC
QTdFMTM5MjNDRjAyRjcyMTU5NjIwNzQxNzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAN8knVziEiL2fMr3NxZpPrr3TMNXwwd11I+VN3dqR+RZ4TMZMDx9
epzTarBxBbBm8XFhgLg7CsSsyExoq5U7LRCvInjP+ymniJAHWwGLJGB+9LKZsElH
mG3+RhJ+85zlDQr4RAap94kjRo0er2pFt91OEY1Rayu03tJfTi15/btOS2s9Qw6R
0XBKpwZxEH+nhrVwVWS6dlOomTi4g1KWjKpeSDhvvw3t5wjPoFWLMxHAqVvdW9XH
y9pfCqrqEfbVLpdGrzMq0PQYSbyFscUB4RKyQsWurMM8357xHNUefuUY2bIaTrzN
VRVKYfK/f/t1t/ojFIJgIBE4gF97dsjNc5ECAwEAAaOCAiswggInMB0GA1UdDgQW
BBTkNN0+fCffun4TkjzwL3IVliB0FzAfBgNVHSMEGDAWgBT9sSiSJ/K4ptsNM4bB
7HUQ//2uYDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzkwNDcvX2JFb2tpZnl1S2JiRFRPR3dleDFFUF85cm1BLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvX2JFb2tpZnl1S2JiRFRPR3dleDFF
UF85cm1BLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzM5MDQ3LzVEVGRQbnduMzdwLUU1STg4Qzl5RlpZZ2RCYy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAgAQ3whQAwDQYJKoZIhvcNAQELBQADggEBABO7zq5TA+JNXb1SgTqM
iXBpWm3ftowVE4QNhjhq1XwUt543g2Y6B93Iu4XFKvgEUJpPZi7OeHICjhVo1DM7
xqHie/9Q3YHHrZbgRhrnEra1oX64OuOsKhOraRnd67NweqYqkWJYYO1A5g+laFHq
8UdUZZ9ZNRdlR/V6xxIuJbNE3cgJYYjwL0GgEJjTGKAx8DQvTtMjRI2HqP0HrUj1
gmb1yRfqobC7FU41LbMXgAvL9jzKwQZdQLo6VJJt48xTNRKKc3gbLreRrld1ptPw
X6aoas72/d2UVqYAdv0/n9/2L8ROZEJx0ziUcwm1+iDsSEc2/IPgg1VomemtaeYr
kG4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org