Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/5Acgi3ya9d7qFe_tRx1cf5OESjU.roa
File:                     5Acgi3ya9d7qFe_tRx1cf5OESjU.roa (raw, json)
Hash identifier:          1O84cnxAV4MXbNO5yLywYe8O/7xyZk0WaYO5LJ39Dn0=
Subject key identifier:   E4:07:20:8B:7C:9A:F5:DE:EA:15:EF:ED:47:1D:5C:7F:93:84:4A:35
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       16
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/5Acgi3ya9d7qFe_tRx1cf5OESjU.roa
Signing time:             Thu 21 Jul 2022 08:21:37 +0000
ROA not before:           Thu 21 Jul 2022 08:21:37 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        27.133.184.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 21 08:21:37 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=E407208B7C9AF5DEEA15EFED471D5C7F93844A35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:06:14:6f:27:b5:6d:c7:54:fb:ac:e1:ca:1c:
                    f0:72:d2:b2:05:da:ce:51:2a:eb:f6:70:2c:e4:4d:
                    04:63:33:68:77:23:84:21:da:27:7e:4f:23:26:e2:
                    ef:15:25:c7:d9:9c:b8:c2:a5:fe:99:ed:a2:e9:19:
                    03:55:8f:5c:b9:98:d2:59:dd:32:f0:8f:42:12:1d:
                    39:13:6d:2a:0b:24:55:19:82:89:66:0b:d0:ac:7e:
                    58:13:df:94:69:52:19:f9:12:c1:96:53:5a:ab:70:
                    5a:1d:92:db:30:29:98:ba:cd:41:60:9a:30:4f:31:
                    a7:96:68:fa:12:67:ce:c1:f1:03:28:65:2f:17:a5:
                    28:87:81:b4:33:9a:3c:89:c6:8a:eb:aa:ba:b2:f6:
                    51:37:aa:9c:7f:bd:aa:bd:c1:82:34:7f:16:d5:09:
                    39:55:04:30:22:5b:c9:98:6c:81:fc:61:f2:1b:b3:
                    0d:12:50:58:3f:6f:f9:f5:d2:34:be:f5:cf:84:d2:
                    c9:b1:e5:9a:3c:6d:7a:bc:b4:7b:39:e5:87:74:02:
                    58:f2:d4:e0:be:32:d0:a2:fe:ae:97:2f:a6:49:b7:
                    ce:7d:c3:c5:63:42:89:22:21:02:c4:ee:91:94:8c:
                    01:68:81:ef:9e:24:51:1b:23:5c:24:3b:84:38:79:
                    67:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:07:20:8B:7C:9A:F5:DE:EA:15:EF:ED:47:1D:5C:7F:93:84:4A:35
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/5Acgi3ya9d7qFe_tRx1cf5OESjU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.133.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4c:22:24:0b:bd:60:4d:e7:84:f8:db:91:85:ef:c5:42:fd:6d:
         ba:ce:05:06:72:e9:fe:0e:54:94:92:71:f2:00:53:02:9d:94:
         97:b0:02:a8:f6:18:5b:f9:e6:d7:73:b3:05:08:39:5f:b7:f9:
         d3:b3:d4:44:10:60:be:2b:e2:0b:1c:35:4f:cb:42:e7:c4:5f:
         18:75:b5:59:70:9b:93:83:bf:33:53:4a:91:a4:5c:35:14:d4:
         72:a5:99:82:ac:58:4f:50:84:f0:80:14:eb:2a:89:40:3d:19:
         cc:32:02:43:92:57:08:ba:47:05:0e:8e:4b:85:47:06:d8:d7:
         32:49:2d:5b:b9:a2:70:47:a2:18:64:ad:d1:c2:8a:75:e0:38:
         66:1a:6e:63:bf:4c:ff:80:39:93:91:26:e0:d1:e2:e3:ad:9e:
         56:9d:c9:6d:1a:0c:b8:71:cd:d3:02:91:fb:3c:4b:f6:e0:d6:
         20:57:e3:33:38:b4:9f:ea:0e:ee:c3:17:f1:87:13:db:27:eb:
         e0:59:b3:f5:28:cc:c0:1a:69:2b:88:15:3e:e6:8f:b5:bf:bb:
         34:a6:3f:97:4c:b1:09:78:7c:71:63:cd:b0:8c:a7:bd:fc:80:
         ec:bd:42:6b:9b:e5:b8:ab:0a:16:9e:cd:63:7a:1c:8e:94:50:
         5c:1a:80:f4
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBFjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwRDcx
MjVBRTRDRUFFMTMzNUZFNUQ0MjlBQTAzMENFOTA3MERGMTlDMB4XDTIyMDcyMTA4
MjEzN1oXDTIzMDcyMTA0MDcxM1owMzExMC8GA1UEAxMoRTQwNzIwOEI3QzlBRjVE
RUVBMTVFRkVENDcxRDVDN0Y5Mzg0NEEzNTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKYGFG8ntW3HVPus4coc8HLSsgXazlEq6/ZwLORNBGMzaHcjhCHa
J35PIybi7xUlx9mcuMKl/pntoukZA1WPXLmY0lndMvCPQhIdORNtKgskVRmCiWYL
0Kx+WBPflGlSGfkSwZZTWqtwWh2S2zApmLrNQWCaME8xp5Zo+hJnzsHxAyhlLxel
KIeBtDOaPInGiuuqurL2UTeqnH+9qr3BgjR/FtUJOVUEMCJbyZhsgfxh8huzDRJQ
WD9v+fXSNL71z4TSybHlmjxtery0eznlh3QCWPLU4L4y0KL+rpcvpkm3zn3DxWNC
iSIhAsTukZSMAWiB754kURsjXCQ7hDh5Zz8CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTkByCLfJr13uoV7+1HHVx/k4RKNTAfBgNVHSMEGDAWgBQNcSWuTOrhM1/l1Cmq
AwzpBw3xnDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzk0L0RYRWxya3pxNFROZjVkUXBxZ01NNlFjTjhady5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0RYRWxya3pxNFROZjVkUXBxZ01NNlFj
Tjhady5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zOTQvNUFjZ2kzeWE5ZDdxRmVfdFJ4MWNmNU9FU2pVLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAxuFuDANBgkqhkiG9w0BAQsFAAOCAQEATCIkC71gTeeE+NuRhe/FQv1tus4F
BnLp/g5UlJJx8gBTAp2Ul7ACqPYYW/nm13OzBQg5X7f507PURBBgviviCxw1T8tC
58RfGHW1WXCbk4O/M1NKkaRcNRTUcqWZgqxYT1CE8IAU6yqJQD0ZzDICQ5JXCLpH
BQ6OS4VHBtjXMkktW7micEeiGGSt0cKKdeA4ZhpuY79M/4A5k5Em4NHi462eVp3J
bRoMuHHN0wKR+zxL9uDWIFfjMzi0n+oO7sMX8YcT2yfr4Fmz9SjMwBppK4gVPuaP
tb+7NKY/l0yxCXh8cWPNsIynvfyA7L1Ca5vluKsKFp7NY3ocjpRQXBqA9A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org