Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/0KzgxOsHOyr1-1MqCabIPXDaBrI.roa
File:                     0KzgxOsHOyr1-1MqCabIPXDaBrI.roa (raw, json)
Hash identifier:          jyfIJ+JVulbcLd6rDGHsin721oykr74pjU+heQhYrxU=
Subject key identifier:   D0:AC:E0:C4:EB:07:3B:2A:F5:FB:53:2A:09:A6:C8:3D:70:DA:06:B2
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       B0
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/0KzgxOsHOyr1-1MqCabIPXDaBrI.roa
Signing time:             Fri 22 Jul 2022 08:44:13 +0000
ROA not before:           Fri 22 Jul 2022 08:44:13 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        111.235.0.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176 (0xb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 08:44:13 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=D0ACE0C4EB073B2AF5FB532A09A6C83D70DA06B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:eb:2f:24:eb:53:fd:38:8d:ca:3f:51:fa:b1:
                    99:c6:bd:c8:f2:b6:e4:3d:25:6d:d7:e4:ee:8e:35:
                    d3:67:d0:7b:35:91:f5:1f:80:61:75:6e:1f:ff:49:
                    f1:aa:98:3d:4f:a8:83:ac:68:49:a4:d2:88:b5:26:
                    3e:03:70:f1:11:b4:74:d7:f8:33:e1:db:7e:01:1c:
                    a1:0d:61:8d:b8:35:26:fa:3f:10:90:09:ed:47:bd:
                    9d:57:48:28:42:c9:de:99:fd:5b:b8:15:7a:48:9d:
                    04:48:90:ef:66:9e:78:75:88:d4:be:39:aa:29:a8:
                    e1:fe:a8:69:13:bb:69:07:70:ef:89:f4:3b:eb:80:
                    12:a1:f5:10:d4:d5:0f:5f:cb:a6:25:3b:5a:b4:17:
                    44:68:a9:cb:df:90:db:10:fe:b9:46:bf:d2:31:92:
                    8e:02:67:a6:71:c7:22:6b:fc:93:6b:7f:3e:da:d5:
                    9a:7b:59:83:5a:ed:6d:19:52:91:e5:38:9c:2b:bd:
                    c3:29:7f:c7:1c:be:f9:70:f4:cf:70:2d:b6:a6:15:
                    a6:f9:4b:41:2c:0a:fd:93:57:d2:bf:c4:f2:59:97:
                    d9:61:8c:2e:a8:6e:77:d1:61:25:62:6f:d9:58:0a:
                    7a:86:4b:bd:58:e3:98:f0:a7:1d:51:fc:8c:16:39:
                    58:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:AC:E0:C4:EB:07:3B:2A:F5:FB:53:2A:09:A6:C8:3D:70:DA:06:B2
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/0KzgxOsHOyr1-1MqCabIPXDaBrI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.235.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         10:ae:9d:b2:47:07:60:48:b1:09:aa:91:82:c0:92:7b:b1:f0:
         67:9f:27:a2:d4:af:86:ec:1a:70:b5:0d:8b:ae:b5:a1:f2:4b:
         24:7f:78:7f:0c:84:4f:b4:da:7e:0a:23:c3:69:c8:c3:d6:8e:
         df:29:d1:c1:74:91:12:c5:1f:9f:1a:69:62:12:f0:53:b2:0e:
         08:7d:70:45:fa:75:77:6c:02:3a:82:b1:b1:31:a9:af:ba:89:
         82:59:cc:c8:bd:ba:87:0f:a6:b1:26:7b:b6:66:1d:79:94:bd:
         cc:a4:b3:53:fd:82:0c:2f:c9:42:31:95:a8:ca:44:d4:31:7c:
         53:20:61:8c:d1:ef:fa:74:2b:ac:c2:bc:08:a3:d7:bb:78:53:
         e1:62:3d:ed:20:1e:c2:80:3e:5a:78:a9:e1:2c:01:5b:5f:48:
         f0:4a:95:97:a9:b7:a0:a0:25:fa:69:aa:f4:e2:97:a7:2b:13:
         0a:3e:47:c5:93:cb:fb:34:da:7d:9e:54:64:43:ae:97:f0:ca:
         37:0e:b6:57:91:c7:de:c2:c9:0d:1f:18:d9:26:e6:10:71:49:
         60:13:01:7a:e3:ba:f1:53:be:ab:1c:05:0f:a7:ef:ca:1c:fb:
         4e:0b:61:7e:24:6b:22:df:e0:70:6d:43:a5:d8:21:9f:a2:cf:
         5b:e8:a5:f2
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICALAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yMjA3MjIw
ODQ0MTNaFw0yMzA3MjEwNDA3MTNaMDMxMTAvBgNVBAMTKEQwQUNFMEM0RUIwNzNC
MkFGNUZCNTMyQTA5QTZDODNENzBEQTA2QjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDB6y8k61P9OI3KP1H6sZnGvcjytuQ9JW3X5O6ONdNn0Hs1kfUf
gGF1bh//SfGqmD1PqIOsaEmk0oi1Jj4DcPERtHTX+DPh234BHKENYY24NSb6PxCQ
Ce1HvZ1XSChCyd6Z/Vu4FXpInQRIkO9mnnh1iNS+OaopqOH+qGkTu2kHcO+J9Dvr
gBKh9RDU1Q9fy6YlO1q0F0RoqcvfkNsQ/rlGv9Ixko4CZ6ZxxyJr/JNrfz7a1Zp7
WYNa7W0ZUpHlOJwrvcMpf8ccvvlw9M9wLbamFab5S0EsCv2TV9K/xPJZl9lhjC6o
bnfRYSVib9lYCnqGS71Y45jwpx1R/IwWOVhtAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU0KzgxOsHOyr1+1MqCabIPXDaBrIwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0LzBLemd4T3NIT3lyMS0xTXFDYWJJUFhEYUJySS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAVv6wAwDQYJKoZIhvcNAQELBQADggEBABCunbJHB2BIsQmqkYLAknux8Gef
J6LUr4bsGnC1DYuutaHySyR/eH8MhE+02n4KI8NpyMPWjt8p0cF0kRLFH58aaWIS
8FOyDgh9cEX6dXdsAjqCsbExqa+6iYJZzMi9uocPprEme7ZmHXmUvcyks1P9ggwv
yUIxlajKRNQxfFMgYYzR7/p0K6zCvAij17t4U+FiPe0gHsKAPlp4qeEsAVtfSPBK
lZept6CgJfppqvTil6crEwo+R8WTy/s02n2eVGRDrpfwyjcOtleRx97CyQ0fGNkm
5hBxSWATAXrjuvFTvqscBQ+n78oc+04LYX4kayLf4HBtQ6XYIZ+iz1vopfI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org