Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/VMhS2eOZFST42JayZnJGr5gyI_c.roa
File:                     VMhS2eOZFST42JayZnJGr5gyI_c.roa (raw, json)
Hash identifier:          tOJf3OezXuwcBIXWvKf89sIJwALUNPolbEftTYb7x5E=
Subject key identifier:   54:C8:52:D9:E3:99:15:24:F8:D8:96:B2:66:72:46:AF:98:32:23:F7
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       12
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/VMhS2eOZFST42JayZnJGr5gyI_c.roa
Signing time:             Thu 21 Jul 2022 07:53:47 +0000
ROA not before:           Thu 21 Jul 2022 07:53:47 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        27.132.192.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 21 07:53:47 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=54C852D9E3991524F8D896B2667246AF983223F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0d:1c:57:e0:28:9a:0c:89:7d:f7:3e:f3:78:
                    0e:59:7d:98:f7:e5:45:f8:2c:87:76:ca:3d:b7:2c:
                    9f:e2:03:6e:3e:5a:1a:0c:73:0d:39:af:4d:d3:b2:
                    9c:50:4e:2f:ca:be:82:c8:fe:34:f0:fd:f2:07:42:
                    e9:f8:3f:9b:aa:d0:a1:1e:f4:8b:a1:97:4f:c1:ef:
                    8d:35:9b:76:4e:b0:53:c5:e7:76:d5:38:7b:b2:5a:
                    08:08:a6:c3:85:fd:4b:bd:38:20:ac:03:47:52:1f:
                    c9:e5:fd:e2:85:a3:c5:d3:2a:cd:ca:e0:ee:b5:a2:
                    5a:2e:f3:59:31:1e:98:e3:d9:82:e6:78:05:e6:cc:
                    90:0d:ba:e8:80:aa:34:97:d9:7b:d7:84:21:f1:21:
                    39:6d:d2:5c:06:a9:43:d0:83:f1:cd:93:d8:a1:ac:
                    41:fa:11:2e:7f:c6:9e:b4:18:90:78:a2:37:0c:7d:
                    34:26:02:43:84:b1:60:dd:c5:30:0e:d9:94:27:16:
                    3d:e6:4e:9e:40:7b:b3:74:d8:75:13:e4:5b:a7:f4:
                    5f:e1:6a:a8:ce:f0:73:66:62:eb:3d:5f:83:74:2e:
                    b1:20:88:90:97:80:b2:22:e1:cd:eb:21:26:6c:e5:
                    c9:66:0e:19:ff:ad:d2:f0:b7:11:94:70:90:08:3d:
                    ec:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C8:52:D9:E3:99:15:24:F8:D8:96:B2:66:72:46:AF:98:32:23:F7
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/VMhS2eOZFST42JayZnJGr5gyI_c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.132.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2d:80:4b:cd:25:5f:b3:24:00:87:47:c5:40:f3:97:c7:5e:4e:
         c9:a2:02:2e:e5:18:d4:eb:4c:1d:04:f1:be:43:3d:62:bc:13:
         6f:cb:68:7d:ff:0f:21:64:0d:fa:f8:e0:17:e3:4c:ad:8b:a0:
         f9:f6:ef:f2:ed:2e:6a:3b:14:18:58:98:ac:57:a7:3a:d9:8d:
         75:16:5e:a7:54:fe:3c:c7:ec:d6:48:cb:80:4c:08:94:8e:a7:
         d1:1b:df:c5:f1:67:a7:cf:33:80:f2:84:e8:ab:5e:41:c7:9e:
         6b:e4:0d:f0:6b:5e:33:23:88:0d:2e:55:8c:6c:7b:15:d2:6f:
         bb:79:ed:7d:ca:13:bf:f1:c2:b0:b8:20:16:95:bf:0f:cf:bb:
         5d:f1:ba:e6:bb:03:80:b9:7a:92:a0:79:99:08:42:14:11:9f:
         24:f2:17:9f:9a:03:7b:92:f5:c2:8d:48:0c:fb:1b:80:8c:cc:
         55:b7:69:b4:da:15:86:7d:ee:39:3c:66:46:41:34:a2:1a:91:
         21:6c:30:bd:f2:9a:aa:ad:99:93:88:b3:35:60:3a:92:f2:5a:
         db:26:54:9d:ea:b8:37:5d:43:41:8f:2c:63:4d:34:e7:79:9e:
         ec:32:db:49:a7:f9:75:fa:2c:2b:2b:9e:ad:68:b6:65:e2:92:
         e4:a0:33:9b
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBEjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwRDcx
MjVBRTRDRUFFMTMzNUZFNUQ0MjlBQTAzMENFOTA3MERGMTlDMB4XDTIyMDcyMTA3
NTM0N1oXDTIzMDcyMTA0MDcxM1owMzExMC8GA1UEAxMoNTRDODUyRDlFMzk5MTUy
NEY4RDg5NkIyNjY3MjQ2QUY5ODMyMjNGNzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMMNHFfgKJoMiX33PvN4Dll9mPflRfgsh3bKPbcsn+IDbj5aGgxz
DTmvTdOynFBOL8q+gsj+NPD98gdC6fg/m6rQoR70i6GXT8HvjTWbdk6wU8XndtU4
e7JaCAimw4X9S704IKwDR1IfyeX94oWjxdMqzcrg7rWiWi7zWTEemOPZguZ4BebM
kA266ICqNJfZe9eEIfEhOW3SXAapQ9CD8c2T2KGsQfoRLn/GnrQYkHiiNwx9NCYC
Q4SxYN3FMA7ZlCcWPeZOnkB7s3TYdRPkW6f0X+FqqM7wc2Zi6z1fg3QusSCIkJeA
siLhzeshJmzlyWYOGf+t0vC3EZRwkAg97I8CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRUyFLZ45kVJPjYlrJmckavmDIj9zAfBgNVHSMEGDAWgBQNcSWuTOrhM1/l1Cmq
AwzpBw3xnDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzk0L0RYRWxya3pxNFROZjVkUXBxZ01NNlFjTjhady5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0RYRWxya3pxNFROZjVkUXBxZ01NNlFj
Tjhady5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zOTQvVk1oUzJlT1pGU1Q0MkpheVpuSkdyNWd5SV9jLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBhuEwDANBgkqhkiG9w0BAQsFAAOCAQEALYBLzSVfsyQAh0fFQPOXx15OyaIC
LuUY1OtMHQTxvkM9YrwTb8toff8PIWQN+vjgF+NMrYug+fbv8u0uajsUGFiYrFen
OtmNdRZep1T+PMfs1kjLgEwIlI6n0RvfxfFnp88zgPKE6KteQceea+QN8GteMyOI
DS5VjGx7FdJvu3ntfcoTv/HCsLggFpW/D8+7XfG65rsDgLl6kqB5mQhCFBGfJPIX
n5oDe5L1wo1IDPsbgIzMVbdptNoVhn3uOTxmRkE0ohqRIWwwvfKaqq2Zk4izNWA6
kvJa2yZUneq4N11DQY8sY00053me7DLbSaf5dfosKyuerWi2ZeKS5KAzmw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:09 2024 by rpki-client on console-ams.rpki-client.org