Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/JIEpdwWFpflx6DkYBNPxF8A8K5E.roa
File:                     JIEpdwWFpflx6DkYBNPxF8A8K5E.roa (raw, json)
Hash identifier:          UelfDuPnY7d4dojDFwJYD22esqnXTQIyWBWMSNqDd0M=
Subject key identifier:   24:81:29:77:05:85:A5:F9:71:E8:39:18:04:D3:F1:17:C0:3C:2B:91
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       30
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/JIEpdwWFpflx6DkYBNPxF8A8K5E.roa
Signing time:             Fri 22 Jul 2022 00:22:08 +0000
ROA not before:           Fri 22 Jul 2022 00:22:08 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        36.52.240.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 00:22:08 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=248129770585A5F971E8391804D3F117C03C2B91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1e:dc:9c:6b:2b:7b:82:59:51:45:62:15:d3:
                    08:b4:1e:32:76:66:de:63:80:89:b4:56:3b:28:15:
                    7e:ac:35:50:03:46:df:db:64:a8:74:94:50:9b:9b:
                    04:6a:cc:81:15:1b:40:bd:89:29:5d:0b:52:23:2b:
                    f6:07:61:4c:48:48:89:18:13:00:07:70:83:24:85:
                    5c:9a:51:ff:50:0a:6c:a3:7f:02:45:52:dd:fb:d4:
                    c8:33:03:f6:0c:3e:50:f3:9b:49:ea:61:0a:3f:ae:
                    bd:b1:ec:82:17:fd:cc:57:cf:01:be:a3:ce:da:7d:
                    76:a1:cb:06:b3:aa:2f:3a:d4:ad:1a:06:22:bb:a0:
                    64:09:9a:82:82:ae:8f:24:68:01:79:02:78:b7:2b:
                    19:ad:5f:7e:84:09:74:b7:ba:73:c5:99:e5:33:d9:
                    59:dc:0c:35:66:6e:89:90:e1:1c:e1:2c:c1:7d:f4:
                    eb:0e:b1:6b:68:f9:6d:a7:38:f3:30:06:1e:f8:b9:
                    59:20:8d:72:e3:de:0a:87:ff:ea:60:fd:6a:3a:60:
                    1c:c5:f9:55:46:c3:9f:4c:62:35:37:30:3d:af:e3:
                    32:9e:29:08:7b:96:39:76:c1:57:a7:32:02:bc:b9:
                    a5:ca:b9:2a:a0:79:b8:17:17:82:9b:fc:95:21:71:
                    79:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:81:29:77:05:85:A5:F9:71:E8:39:18:04:D3:F1:17:C0:3C:2B:91
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/JIEpdwWFpflx6DkYBNPxF8A8K5E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.52.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         76:8e:42:5b:bc:32:21:ce:13:d1:6c:07:6d:c9:cb:a1:18:d7:
         e0:14:c5:de:6d:9b:98:8a:c1:11:88:55:fe:94:cf:4a:fc:e9:
         c2:d0:f2:6d:63:8e:e8:93:5d:71:c9:9e:dc:c1:92:f6:cf:c5:
         7d:f3:d8:10:a7:e9:20:f5:64:7d:7d:90:dd:73:27:0a:a3:28:
         15:a7:d4:3d:7c:a6:ba:64:7a:b6:f6:3c:3b:40:68:14:05:b0:
         1b:de:43:b3:9c:c8:9f:82:31:65:74:09:a7:f2:94:f0:20:55:
         c0:8c:04:63:7d:2d:14:5a:4f:40:1b:cf:0b:4e:a9:b4:4c:c1:
         1a:c9:10:3a:93:27:10:e2:68:6b:2c:bc:ed:d3:e1:01:f2:5d:
         c4:99:ef:43:31:2a:ca:fe:b9:2a:c1:f5:25:c4:e5:2c:f7:93:
         26:52:e0:55:7c:65:ae:1a:2d:00:a7:be:56:a3:1d:ec:b4:64:
         63:57:16:8a:b9:55:58:e3:ef:6c:b0:9e:7c:9b:8e:e3:ff:b0:
         34:67:ee:93:44:2b:38:86:4b:eb:23:58:53:34:70:c4:07:2f:
         ed:1e:2b:f3:37:76:e8:c4:36:25:2d:85:c3:b9:a0:7d:a2:e1:
         28:1c:47:b9:4b:21:a0:41:01:30:ec:cf:52:c8:06:95:2b:68:
         f9:96:8f:ef
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBMDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwRDcx
MjVBRTRDRUFFMTMzNUZFNUQ0MjlBQTAzMENFOTA3MERGMTlDMB4XDTIyMDcyMjAw
MjIwOFoXDTIzMDcyMTA0MDcxM1owMzExMC8GA1UEAxMoMjQ4MTI5NzcwNTg1QTVG
OTcxRTgzOTE4MDREM0YxMTdDMDNDMkI5MTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALYe3JxrK3uCWVFFYhXTCLQeMnZm3mOAibRWOygVfqw1UANG39tk
qHSUUJubBGrMgRUbQL2JKV0LUiMr9gdhTEhIiRgTAAdwgySFXJpR/1AKbKN/AkVS
3fvUyDMD9gw+UPObSephCj+uvbHsghf9zFfPAb6jztp9dqHLBrOqLzrUrRoGIrug
ZAmagoKujyRoAXkCeLcrGa1ffoQJdLe6c8WZ5TPZWdwMNWZuiZDhHOEswX306w6x
a2j5bac48zAGHvi5WSCNcuPeCof/6mD9ajpgHMX5VUbDn0xiNTcwPa/jMp4pCHuW
OXbBV6cyAry5pcq5KqB5uBcXgpv8lSFxeacCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQkgSl3BYWl+XHoORgE0/EXwDwrkTAfBgNVHSMEGDAWgBQNcSWuTOrhM1/l1Cmq
AwzpBw3xnDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzk0L0RYRWxya3pxNFROZjVkUXBxZ01NNlFjTjhady5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0RYRWxya3pxNFROZjVkUXBxZ01NNlFj
Tjhady5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zOTQvSklFcGR3V0ZwZmx4NkRrWUJOUHhGOEE4SzVFLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBCQ08DANBgkqhkiG9w0BAQsFAAOCAQEAdo5CW7wyIc4T0WwHbcnLoRjX4BTF
3m2bmIrBEYhV/pTPSvzpwtDybWOO6JNdccme3MGS9s/FffPYEKfpIPVkfX2Q3XMn
CqMoFafUPXymumR6tvY8O0BoFAWwG95Ds5zIn4IxZXQJp/KU8CBVwIwEY30tFFpP
QBvPC06ptEzBGskQOpMnEOJoayy87dPhAfJdxJnvQzEqyv65KsH1JcTlLPeTJlLg
VXxlrhotAKe+VqMd7LRkY1cWirlVWOPvbLCefJuO4/+wNGfuk0QrOIZL6yNYUzRw
xAcv7R4r8zd26MQ2JS2Fw7mgfaLhKBxHuUshoEEBMOzPUsgGlSto+ZaP7w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:08 2024 by rpki-client on console-ams.rpki-client.org