Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/VN-ig_5WczDbNmmWauHUR2mA-nQ.roa
File:                     VN-ig_5WczDbNmmWauHUR2mA-nQ.roa (raw, json)
Hash identifier:          d37ECxD0k4oTFTtRYQb5YUHgxtQOSv6E+af5EIDCjfY=
Subject key identifier:   54:DF:A2:83:FE:56:73:30:DB:36:69:96:6A:E1:D4:47:69:80:FA:74
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       71
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/VN-ig_5WczDbNmmWauHUR2mA-nQ.roa
Signing time:             Fri 22 Jul 2022 04:43:12 +0000
ROA not before:           Fri 22 Jul 2022 04:43:12 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        59.156.132.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 04:43:12 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=54DFA283FE567330DB3669966AE1D4476980FA74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:02:5e:5e:74:3b:68:74:56:55:ad:8d:ac:13:
                    b6:c0:41:e3:10:02:25:a6:d7:be:1b:fb:35:d6:b1:
                    cc:12:8e:04:ec:b8:23:be:3f:7d:01:72:8b:89:2a:
                    42:ed:24:7f:c4:c4:81:74:94:e4:b8:ed:a8:55:35:
                    3a:69:1c:22:01:98:1f:fb:7b:28:7b:a9:f5:73:fc:
                    29:b0:a6:32:34:63:6f:43:75:dc:a9:9e:73:fa:18:
                    34:ac:7e:0d:80:0a:0f:ef:4f:a9:6c:35:90:2c:05:
                    79:5d:dd:32:f9:45:0a:b7:1a:1a:3e:14:ec:63:c5:
                    43:d3:04:dc:cc:a6:2a:65:d7:40:ac:b3:4b:36:53:
                    6c:28:8b:b8:e1:cc:7f:55:ee:c9:a8:94:64:1a:8e:
                    51:50:10:59:65:3c:7b:38:2b:df:40:08:aa:57:09:
                    d7:54:7b:41:78:68:32:1c:16:a5:b0:d6:ac:a3:d2:
                    37:48:db:ff:cd:86:b3:fc:c5:31:f0:77:3a:a4:60:
                    0c:f1:0f:cb:ba:0c:d9:24:6d:16:18:25:a8:7b:06:
                    b8:d6:7e:34:54:73:5c:fa:82:72:e7:64:48:67:d5:
                    9e:aa:26:cd:7a:d7:6e:67:b7:3c:2f:f8:3a:f0:11:
                    0d:f2:62:af:d1:07:49:65:9f:cf:77:cb:f3:94:93:
                    f6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:DF:A2:83:FE:56:73:30:DB:36:69:96:6A:E1:D4:47:69:80:FA:74
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/VN-ig_5WczDbNmmWauHUR2mA-nQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.156.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:3d:c0:eb:69:51:af:42:05:fa:7a:1c:8e:28:94:b8:18:28:
         c1:7d:93:ec:19:ce:cd:2c:76:70:ca:99:cd:35:b4:bd:ad:f2:
         48:e2:8a:08:5a:f2:1b:96:3d:db:e3:e0:63:28:2c:b9:0f:62:
         a4:52:86:d9:65:96:f2:3d:f6:90:f4:57:ae:50:e9:e8:d1:79:
         0b:4c:28:1a:d3:ad:7c:36:02:df:2b:de:ce:e1:3b:5e:78:7f:
         29:f7:a1:8c:08:68:6e:2b:48:d1:0d:28:e7:dc:70:85:8b:19:
         0c:ed:68:db:2e:72:61:43:7f:03:ce:61:19:e3:29:aa:66:ab:
         8a:ff:1b:37:ab:39:b1:c1:dd:b7:b1:8a:6a:f1:45:7d:8c:ea:
         74:72:d6:36:79:8b:c0:03:ee:4d:0a:78:ae:44:de:36:72:e4:
         c4:8a:40:45:bd:b1:7a:7f:5b:23:38:6b:02:63:6e:75:90:ac:
         9a:92:25:62:85:a1:62:36:be:cd:b7:8d:ca:fb:b8:84:0c:5e:
         c9:08:6d:1c:85:3c:8c:6f:3a:4e:a1:83:36:c0:18:6d:ec:70:
         2a:ba:01:a7:84:de:34:77:b0:48:9a:7e:a7:2f:21:7a:a2:a3:
         b5:1e:bf:8d:8d:61:eb:cd:ad:66:45:61:1a:c6:4f:78:72:f1:
         c1:6b:af:d4
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBcTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwRDcx
MjVBRTRDRUFFMTMzNUZFNUQ0MjlBQTAzMENFOTA3MERGMTlDMB4XDTIyMDcyMjA0
NDMxMloXDTIzMDcyMTA0MDcxM1owMzExMC8GA1UEAxMoNTRERkEyODNGRTU2NzMz
MERCMzY2OTk2NkFFMUQ0NDc2OTgwRkE3NDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMUCXl50O2h0VlWtjawTtsBB4xACJabXvhv7NdaxzBKOBOy4I74/
fQFyi4kqQu0kf8TEgXSU5LjtqFU1OmkcIgGYH/t7KHup9XP8KbCmMjRjb0N13Kme
c/oYNKx+DYAKD+9PqWw1kCwFeV3dMvlFCrcaGj4U7GPFQ9ME3MymKmXXQKyzSzZT
bCiLuOHMf1XuyaiUZBqOUVAQWWU8ezgr30AIqlcJ11R7QXhoMhwWpbDWrKPSN0jb
/82Gs/zFMfB3OqRgDPEPy7oM2SRtFhglqHsGuNZ+NFRzXPqCcudkSGfVnqomzXrX
bme3PC/4OvARDfJir9EHSWWfz3fL85ST9lECAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRU36KD/lZzMNs2aZZq4dRHaYD6dDAfBgNVHSMEGDAWgBQNcSWuTOrhM1/l1Cmq
AwzpBw3xnDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzk0L0RYRWxya3pxNFROZjVkUXBxZ01NNlFjTjhady5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0RYRWxya3pxNFROZjVkUXBxZ01NNlFj
Tjhady5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zOTQvVk4taWdfNVdjekRiTm1tV2F1SFVSMm1BLW5RLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEATuchDANBgkqhkiG9w0BAQsFAAOCAQEANT3A62lRr0IF+nocjiiUuBgowX2T
7BnOzSx2cMqZzTW0va3ySOKKCFryG5Y92+PgYygsuQ9ipFKG2WWW8j32kPRXrlDp
6NF5C0woGtOtfDYC3yvezuE7Xnh/KfehjAhobitI0Q0o59xwhYsZDO1o2y5yYUN/
A85hGeMpqmariv8bN6s5scHdt7GKavFFfYzqdHLWNnmLwAPuTQp4rkTeNnLkxIpA
Rb2xen9bIzhrAmNudZCsmpIlYoWhYja+zbeNyvu4hAxeyQhtHIU8jG86TqGDNsAY
bexwKroBp4TeNHewSJp+py8heqKjtR6/jY1h682tZkVhGsZPeHLxwWuv1A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org