Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/F_afImtrB8HcAB0m7ZMih1CjSkk.roa
File:                     F_afImtrB8HcAB0m7ZMih1CjSkk.roa (raw, json)
Hash identifier:          HIyn3C1BGhgF4EvBxu0L3w42HBilGGmQ7Rx2BfCCjnw=
Subject key identifier:   17:F6:9F:22:6B:6B:07:C1:DC:00:1D:26:ED:93:22:87:50:A3:4A:49
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       6D
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/F_afImtrB8HcAB0m7ZMih1CjSkk.roa
Signing time:             Fri 22 Jul 2022 04:43:11 +0000
ROA not before:           Fri 22 Jul 2022 04:43:11 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        59.156.30.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 04:43:11 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=17F69F226B6B07C1DC001D26ED93228750A34A49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2a:ee:60:a6:3f:b8:b1:25:05:89:31:54:f5:
                    e8:9f:76:b7:72:9a:e0:90:c7:ca:07:fc:e1:bc:c2:
                    e6:86:b8:0e:96:dd:da:44:10:65:b6:42:28:6d:f2:
                    53:d0:15:4d:83:54:d9:ce:00:ca:38:24:16:39:89:
                    01:c1:c3:55:da:31:e9:86:32:43:7a:dd:25:24:a4:
                    da:d6:e0:02:e3:15:b1:05:df:b4:40:a2:97:9c:1e:
                    f7:0f:92:60:0e:ad:05:b6:ce:33:c2:0a:00:49:a3:
                    fb:6e:32:72:88:02:75:26:d7:c6:16:63:71:63:84:
                    e3:32:18:05:c3:ea:a9:79:78:bc:ed:7a:44:34:94:
                    e1:70:5d:06:44:c4:16:04:88:c7:2f:95:45:8b:ad:
                    df:d9:f4:25:46:8c:84:ef:ec:0c:a3:77:2f:44:68:
                    09:c9:67:12:ac:f1:18:f1:31:00:d1:f5:b3:85:dc:
                    36:40:c8:65:cd:57:e6:d7:8e:42:94:1d:49:2c:30:
                    af:15:7a:39:9e:67:de:95:fa:26:05:db:94:2c:6e:
                    da:33:6f:0c:06:be:8f:04:fb:f1:a4:0a:8a:02:5e:
                    c8:e7:79:4d:a0:e7:b9:78:f7:e8:e3:34:26:e3:a7:
                    10:70:e2:71:d2:6b:12:5e:70:ff:74:f1:eb:9d:57:
                    ba:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F6:9F:22:6B:6B:07:C1:DC:00:1D:26:ED:93:22:87:50:A3:4A:49
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/F_afImtrB8HcAB0m7ZMih1CjSkk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.156.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:03:e7:26:52:c6:e8:c8:92:a7:77:3a:1e:24:2f:29:dd:83:
         3c:62:2e:0a:ff:4c:d5:58:60:d9:34:02:49:cb:40:a8:3a:e9:
         99:6d:ae:68:50:54:f2:d2:6f:2e:f6:1c:6b:14:97:d6:48:1c:
         42:37:e5:dd:2f:fa:7c:b3:24:ee:d0:3a:2f:49:07:ef:4a:5c:
         e2:1a:b5:ba:22:03:d2:db:87:96:be:a6:bd:28:6d:0d:56:a6:
         06:ce:e4:8a:85:7b:b9:3f:2d:af:89:86:9c:50:30:1c:16:79:
         b4:20:4c:6a:7b:6d:08:cc:e9:b4:ed:c4:74:4f:fa:54:da:49:
         d2:81:ca:00:64:cc:86:21:3b:13:be:b7:91:19:21:08:73:c5:
         dd:29:02:09:6d:0c:60:73:10:58:ea:e3:24:99:75:58:a8:56:
         0c:4d:38:9b:8c:aa:19:20:39:c2:12:11:f8:e8:52:78:7c:64:
         1e:ad:bb:b6:9c:8a:48:87:6b:b0:3e:fb:09:1f:78:c5:c2:57:
         3c:b5:ae:60:de:a2:33:06:7a:7f:b1:04:00:39:36:b3:77:4a:
         9d:92:eb:2b:51:d3:3c:d0:63:4c:58:9e:9c:36:ce:6e:24:53:
         f1:50:c1:e6:07:3a:88:92:43:58:9f:e3:2b:a8:00:7b:18:41:
         67:2c:27:26
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBbTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwRDcx
MjVBRTRDRUFFMTMzNUZFNUQ0MjlBQTAzMENFOTA3MERGMTlDMB4XDTIyMDcyMjA0
NDMxMVoXDTIzMDcyMTA0MDcxM1owMzExMC8GA1UEAxMoMTdGNjlGMjI2QjZCMDdD
MURDMDAxRDI2RUQ5MzIyODc1MEEzNEE0OTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKMq7mCmP7ixJQWJMVT16J92t3Ka4JDHygf84bzC5oa4Dpbd2kQQ
ZbZCKG3yU9AVTYNU2c4AyjgkFjmJAcHDVdox6YYyQ3rdJSSk2tbgAuMVsQXftECi
l5we9w+SYA6tBbbOM8IKAEmj+24ycogCdSbXxhZjcWOE4zIYBcPqqXl4vO16RDSU
4XBdBkTEFgSIxy+VRYut39n0JUaMhO/sDKN3L0RoCclnEqzxGPExANH1s4XcNkDI
Zc1X5teOQpQdSSwwrxV6OZ5n3pX6JgXblCxu2jNvDAa+jwT78aQKigJeyOd5TaDn
uXj36OM0JuOnEHDicdJrEl5w/3Tx651XurcCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQX9p8ia2sHwdwAHSbtkyKHUKNKSTAfBgNVHSMEGDAWgBQNcSWuTOrhM1/l1Cmq
AwzpBw3xnDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzk0L0RYRWxya3pxNFROZjVkUXBxZ01NNlFjTjhady5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0RYRWxya3pxNFROZjVkUXBxZ01NNlFj
Tjhady5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zOTQvRl9hZkltdHJCOEhjQUIwbTdaTWloMUNqU2trLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEATucHjANBgkqhkiG9w0BAQsFAAOCAQEAFAPnJlLG6MiSp3c6HiQvKd2DPGIu
Cv9M1Vhg2TQCSctAqDrpmW2uaFBU8tJvLvYcaxSX1kgcQjfl3S/6fLMk7tA6L0kH
70pc4hq1uiID0tuHlr6mvShtDVamBs7kioV7uT8tr4mGnFAwHBZ5tCBManttCMzp
tO3EdE/6VNpJ0oHKAGTMhiE7E763kRkhCHPF3SkCCW0MYHMQWOrjJJl1WKhWDE04
m4yqGSA5whIR+OhSeHxkHq27tpyKSIdrsD77CR94xcJXPLWuYN6iMwZ6f7EEADk2
s3dKnZLrK1HTPNBjTFienDbObiRT8VDB5gc6iJJDWJ/jK6gAexhBZywnJg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:05 2024 by rpki-client on console-ams.rpki-client.org