Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/0Fg6oDFPp6Dd9xqs1lvvV7KTsnI.roa
File:                     0Fg6oDFPp6Dd9xqs1lvvV7KTsnI.roa (raw, json)
Hash identifier:          dXJpRec0DuMV5K/7dhLdN0XSeYzEi4f9ksmMA4U29SE=
Subject key identifier:   D0:58:3A:A0:31:4F:A7:A0:DD:F7:1A:AC:D6:5B:EF:57:B2:93:B2:72
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       AE
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/0Fg6oDFPp6Dd9xqs1lvvV7KTsnI.roa
Signing time:             Fri 22 Jul 2022 08:29:53 +0000
ROA not before:           Fri 22 Jul 2022 08:29:53 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        113.213.240.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 08:29:53 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=D0583AA0314FA7A0DDF71AACD65BEF57B293B272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ef:ba:9a:8c:ed:df:78:19:0b:83:67:41:e8:
                    c1:75:57:ee:5b:76:43:fb:03:6a:8e:7d:d6:58:8c:
                    7b:24:38:0e:97:f3:8a:c9:f2:dc:b4:91:73:07:cb:
                    17:fd:9b:35:ab:3a:eb:db:4e:b0:09:43:18:fc:5a:
                    18:9d:64:15:bf:aa:03:03:e3:66:13:27:db:55:36:
                    0a:6b:0f:f5:ea:c9:b7:5a:3f:dd:db:ae:2e:f0:37:
                    65:6c:de:10:d4:0c:46:dd:17:7d:ec:5d:b6:18:6f:
                    be:42:a3:d2:d9:5e:9e:5b:8b:3e:fe:7e:21:39:19:
                    1a:8e:f0:0d:38:c0:97:af:50:9c:27:07:75:ad:c5:
                    d2:cf:ff:d1:0e:0f:b4:da:0b:df:c5:db:2c:65:70:
                    69:b0:d3:75:d8:99:ec:da:d0:83:13:da:06:cb:ef:
                    ba:58:4a:eb:f6:70:82:70:d7:76:ef:23:1e:10:2c:
                    1e:c4:59:8b:2e:c8:bc:77:74:6c:26:3a:dc:13:c0:
                    6f:2c:d4:0f:93:fa:27:88:b6:c8:26:cc:92:fa:b6:
                    53:f2:10:13:bf:04:52:9d:38:ff:d5:73:fd:52:2a:
                    4c:5f:8b:8d:fb:2b:1b:39:ae:08:b6:ab:76:1b:03:
                    bf:8a:f2:6c:16:93:9b:b1:cb:ad:89:6f:a3:46:18:
                    7b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:58:3A:A0:31:4F:A7:A0:DD:F7:1A:AC:D6:5B:EF:57:B2:93:B2:72
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/0Fg6oDFPp6Dd9xqs1lvvV7KTsnI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.213.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:39:be:b0:77:30:69:0a:c9:98:4b:90:ef:a2:c8:0b:55:f6:
         da:75:9a:8e:7e:a9:13:8a:05:ec:b9:60:a5:5b:39:1f:a8:dc:
         19:e3:53:f8:02:c4:c9:b8:69:a2:8b:01:5d:c8:92:68:48:5d:
         f3:9f:f5:2d:e1:75:9e:21:b8:7f:b3:5f:26:c8:39:51:ae:5a:
         24:64:2c:5e:d8:b8:bd:9c:9f:8d:b9:46:da:83:51:e2:c6:6d:
         06:7c:08:90:8b:47:3f:60:9a:95:00:ee:5e:ae:af:2e:58:38:
         8b:02:f9:08:66:36:b6:42:ec:c9:18:88:73:af:db:b2:1e:bd:
         08:2a:e4:db:22:b0:80:21:ca:73:44:eb:c3:32:ff:3a:35:63:
         15:fa:57:b6:e9:f7:1b:ec:32:90:61:28:ff:4b:fa:e1:78:d6:
         c2:2c:12:c9:ff:f1:dc:37:22:85:ac:ca:1f:b0:b4:71:45:dd:
         6f:53:fb:48:b3:0f:8b:7f:91:f7:e1:66:6a:ca:40:c2:0d:e6:
         ba:cf:51:6a:b6:6f:f0:d8:7e:21:52:d3:65:09:fa:ca:95:84:
         0a:01:70:92:d0:aa:a4:5b:f5:f8:95:e9:5c:92:d3:bf:2d:48:
         44:e7:6e:d0:50:7b:fb:9b:a1:6f:c6:64:d6:07:1b:8a:61:d4:
         3f:03:f5:fb
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yMjA3MjIw
ODI5NTNaFw0yMzA3MjEwNDA3MTNaMDMxMTAvBgNVBAMTKEQwNTgzQUEwMzE0RkE3
QTBEREY3MUFBQ0Q2NUJFRjU3QjI5M0IyNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDT77qajO3feBkLg2dB6MF1V+5bdkP7A2qOfdZYjHskOA6X84rJ
8ty0kXMHyxf9mzWrOuvbTrAJQxj8WhidZBW/qgMD42YTJ9tVNgprD/XqybdaP93b
ri7wN2Vs3hDUDEbdF33sXbYYb75Co9LZXp5biz7+fiE5GRqO8A04wJevUJwnB3Wt
xdLP/9EOD7TaC9/F2yxlcGmw03XYmeza0IMT2gbL77pYSuv2cIJw13bvIx4QLB7E
WYsuyLx3dGwmOtwTwG8s1A+T+ieItsgmzJL6tlPyEBO/BFKdOP/Vc/1SKkxfi437
Kxs5rgi2q3YbA7+K8mwWk5uxy62Jb6NGGHtXAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU0Fg6oDFPp6Dd9xqs1lvvV7KTsnIwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0LzBGZzZvREZQcDZEZDl4cXMxbHZ2VjdLVHNuSS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFx1fAwDQYJKoZIhvcNAQELBQADggEBAJc5vrB3MGkKyZhLkO+iyAtV9tp1
mo5+qROKBey5YKVbOR+o3BnjU/gCxMm4aaKLAV3IkmhIXfOf9S3hdZ4huH+zXybI
OVGuWiRkLF7YuL2cn425RtqDUeLGbQZ8CJCLRz9gmpUA7l6ury5YOIsC+QhmNrZC
7MkYiHOv27IevQgq5NsisIAhynNE68My/zo1YxX6V7bp9xvsMpBhKP9L+uF41sIs
Esn/8dw3IoWsyh+wtHFF3W9T+0izD4t/kffhZmrKQMIN5rrPUWq2b/DYfiFS02UJ
+sqVhAoBcJLQqqRb9fiV6VyS078tSETnbtBQe/uboW/GZNYHG4ph1D8D9fs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org