Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/RfZ_DYX405Czpn_XhYHDu4OaIJU.roa
File:                     RfZ_DYX405Czpn_XhYHDu4OaIJU.roa (raw, json)
Hash identifier:          6zm1dT+uZHlbuWH8jNssqM1TjQXMjjylgMMlxkNhLdo=
Subject key identifier:   45:F6:7F:0D:85:F8:D3:90:B3:A6:7F:D7:85:81:C3:BB:83:9A:20:95
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       48
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/RfZ_DYX405Czpn_XhYHDu4OaIJU.roa
Signing time:             Fri 22 Jul 2022 01:50:24 +0000
ROA not before:           Fri 22 Jul 2022 01:50:24 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        219.109.224.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 01:50:24 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=45F67F0D85F8D390B3A67FD78581C3BB839A2095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:58:78:63:5d:cb:b3:78:42:81:e9:9d:98:e0:
                    35:0b:cb:fa:84:c8:ff:ef:46:13:73:5c:14:00:a6:
                    5c:4a:fe:d5:fc:91:fd:fb:c4:15:3a:dd:1f:9c:2c:
                    4e:a3:73:4b:2e:9f:8e:98:4a:06:a0:e4:f3:9f:b4:
                    a2:b9:54:78:81:3e:07:79:24:e1:cb:7a:a5:61:b1:
                    c5:9b:6c:4f:46:14:4b:54:60:5a:10:8e:a5:ef:b3:
                    57:c8:ae:47:76:07:03:78:98:f4:35:eb:aa:d4:ae:
                    9c:92:3b:1b:12:fc:5a:3a:3f:24:c1:05:5c:86:11:
                    32:31:df:4a:a5:ed:a7:86:c1:6a:ac:f4:7b:08:ea:
                    46:a8:0d:c2:07:d1:5f:40:7f:db:61:c4:29:90:a2:
                    21:d1:f4:7b:c6:25:86:55:00:f2:1e:6f:d2:47:66:
                    d3:7c:c5:52:92:05:53:89:62:c0:58:42:3b:cb:ef:
                    2c:88:9c:2c:18:80:2b:eb:eb:16:34:f1:9d:4f:d6:
                    ea:50:7b:e6:69:d3:06:ea:85:51:97:7f:f8:78:c8:
                    ca:bd:fb:70:12:ff:ee:3a:19:41:bc:d0:ec:17:25:
                    ed:ea:d2:f7:f3:03:85:f8:0a:b4:05:b8:08:65:8b:
                    e1:fe:5b:94:a3:f0:1d:cd:ad:30:79:a8:73:63:b7:
                    c7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:F6:7F:0D:85:F8:D3:90:B3:A6:7F:D7:85:81:C3:BB:83:9A:20:95
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/RfZ_DYX405Czpn_XhYHDu4OaIJU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.109.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4f:61:a8:3d:a1:de:f2:75:4b:d6:40:cc:b9:56:7d:8e:1a:55:
         bd:b0:bc:e6:a6:f5:29:a5:a9:8f:a6:9b:fd:fe:e9:18:34:7a:
         49:ea:1a:6d:32:4d:99:3d:f3:8a:3b:67:4a:4f:3c:19:af:eb:
         8e:c7:87:51:86:08:9c:82:3b:d5:a3:ac:63:64:aa:f9:08:d1:
         7e:07:4b:bc:e2:f4:e8:03:78:d1:63:30:d1:58:48:52:63:a8:
         eb:2e:c5:d3:c9:a0:4f:3c:35:3e:ec:c7:9e:6f:dc:a2:a7:d9:
         b3:bc:fa:32:25:b5:2f:d0:0e:64:26:ad:24:ce:a0:6f:bc:78:
         70:37:9c:4b:2e:b0:91:68:7b:10:79:8d:6e:ad:eb:59:6f:f6:
         72:f1:ba:ea:97:d7:c0:a8:aa:6b:24:d6:c2:9b:2f:5a:6d:08:
         25:67:b4:5e:4e:ef:fa:aa:ca:f1:3c:6f:b1:7c:63:0d:5c:d2:
         d7:fb:d9:a0:59:97:16:70:86:4b:23:d3:ef:08:fb:ae:08:a1:
         af:1e:bd:cf:1d:76:13:92:1f:c7:84:c7:71:41:bf:fd:43:ef:
         a6:de:8e:00:a0:8e:b2:ab:8d:36:02:08:32:c4:54:0f:28:c5:
         0b:21:ff:37:6b:0f:06:b5:87:cd:11:18:38:ac:d2:76:78:f5:
         bd:ab:da:23
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBSDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwRDcx
MjVBRTRDRUFFMTMzNUZFNUQ0MjlBQTAzMENFOTA3MERGMTlDMB4XDTIyMDcyMjAx
NTAyNFoXDTIzMDcyMTA0MDcxM1owMzExMC8GA1UEAxMoNDVGNjdGMEQ4NUY4RDM5
MEIzQTY3RkQ3ODU4MUMzQkI4MzlBMjA5NTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKRYeGNdy7N4QoHpnZjgNQvL+oTI/+9GE3NcFACmXEr+1fyR/fvE
FTrdH5wsTqNzSy6fjphKBqDk85+0orlUeIE+B3kk4ct6pWGxxZtsT0YUS1RgWhCO
pe+zV8iuR3YHA3iY9DXrqtSunJI7GxL8Wjo/JMEFXIYRMjHfSqXtp4bBaqz0ewjq
RqgNwgfRX0B/22HEKZCiIdH0e8YlhlUA8h5v0kdm03zFUpIFU4liwFhCO8vvLIic
LBiAK+vrFjTxnU/W6lB75mnTBuqFUZd/+HjIyr37cBL/7joZQbzQ7Bcl7erS9/MD
hfgKtAW4CGWL4f5blKPwHc2tMHmoc2O3x1UCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRF9n8NhfjTkLOmf9eFgcO7g5oglTAfBgNVHSMEGDAWgBQNcSWuTOrhM1/l1Cmq
AwzpBw3xnDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzk0L0RYRWxya3pxNFROZjVkUXBxZ01NNlFjTjhady5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0RYRWxya3pxNFROZjVkUXBxZ01NNlFj
Tjhady5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zOTQvUmZaX0RZWDQwNUN6cG5fWGhZSER1NE9hSUpVLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBNtt4DANBgkqhkiG9w0BAQsFAAOCAQEAT2GoPaHe8nVL1kDMuVZ9jhpVvbC8
5qb1KaWpj6ab/f7pGDR6SeoabTJNmT3zijtnSk88Ga/rjseHUYYInII71aOsY2Sq
+QjRfgdLvOL06AN40WMw0VhIUmOo6y7F08mgTzw1PuzHnm/coqfZs7z6MiW1L9AO
ZCatJM6gb7x4cDecSy6wkWh7EHmNbq3rWW/2cvG66pfXwKiqayTWwpsvWm0IJWe0
Xk7v+qrK8TxvsXxjDVzS1/vZoFmXFnCGSyPT7wj7rgihrx69zx12E5Ifx4THcUG/
/UPvpt6OAKCOsquNNgIIMsRUDyjFCyH/N2sPBrWHzREYOKzSdnj1vavaIw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org