Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/XXByz0G-q7AP0fnXUeOSAFQyfXk.roa
File:                     XXByz0G-q7AP0fnXUeOSAFQyfXk.roa (raw, json)
Hash identifier:          TEQ0xsdL07p+YcqgOSMwW+Z+k13Xy+YTL3VhKT0aDhY=
Subject key identifier:   5D:70:72:CF:41:BE:AB:B0:0F:D1:F9:D7:51:E3:92:00:54:32:7D:79
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       35
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/XXByz0G-q7AP0fnXUeOSAFQyfXk.roa
Signing time:             Fri 22 Jul 2022 00:41:55 +0000
ROA not before:           Fri 22 Jul 2022 00:41:55 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        36.55.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 00:41:55 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=5D7072CF41BEABB00FD1F9D751E3920054327D79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8c:8d:fd:e0:f5:05:b9:65:90:97:5e:59:27:
                    a7:e3:27:0c:c3:11:8f:0e:50:c6:75:03:48:ee:0a:
                    92:7d:67:bb:ab:69:94:5b:27:d8:2f:1e:92:ee:f4:
                    fa:a1:36:d6:c1:f2:68:9c:41:be:c7:c0:5c:7a:86:
                    5e:8a:c3:c0:c5:68:36:cc:c1:04:44:c2:f9:33:0e:
                    c8:90:16:25:22:5b:0c:a6:77:f7:96:d2:d1:09:b6:
                    30:09:ce:1d:e8:58:32:13:43:0a:25:f1:00:1a:44:
                    5a:34:0c:82:fb:04:fc:57:f8:f0:50:f5:65:22:4f:
                    75:9f:c0:c4:a3:4c:65:94:56:a7:98:fe:f1:d5:c6:
                    4e:c4:a1:af:ca:a6:ca:14:e4:c1:cf:64:db:56:c0:
                    c2:d1:0e:ba:91:cb:ce:fe:87:d2:85:1b:a1:13:b5:
                    d4:6f:c5:be:02:67:c0:6e:0d:b5:f0:ad:cc:98:ab:
                    b4:0f:7b:aa:bc:44:e6:93:16:30:2c:9d:5f:21:b6:
                    09:8e:06:2c:ec:45:7c:d8:7f:ec:e4:36:b0:6c:62:
                    7d:34:37:be:07:72:9c:16:e9:d6:24:55:e6:85:d1:
                    18:23:bc:a0:8a:d8:e8:46:65:e0:d3:eb:50:75:54:
                    5a:cf:1f:4d:76:27:59:22:b1:91:4f:a5:ca:00:b2:
                    c8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:70:72:CF:41:BE:AB:B0:0F:D1:F9:D7:51:E3:92:00:54:32:7D:79
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/XXByz0G-q7AP0fnXUeOSAFQyfXk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.55.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         78:f9:c4:60:33:9f:36:e5:a0:97:64:77:6e:18:b0:01:7e:17:
         3b:a8:00:8b:5e:b4:f5:f4:19:09:1d:ef:f6:6b:f8:9f:4e:f0:
         7d:0d:b5:3f:5b:96:9f:df:3f:59:63:15:7f:b9:33:42:78:53:
         8c:3f:05:d5:16:67:57:a2:14:20:73:a0:49:fe:a3:c8:7d:00:
         32:d8:38:53:de:23:6e:7e:46:54:af:2f:c6:a1:39:b3:b9:70:
         67:ab:18:00:fd:bf:f1:e5:eb:ab:53:10:04:83:fb:b4:19:b1:
         4d:91:38:e3:27:3a:e0:de:14:dc:e9:05:be:34:73:dc:5f:42:
         8c:5b:1f:7b:08:ef:b3:69:bc:f1:b9:cd:42:26:b0:1a:88:a9:
         b3:a9:6d:d1:94:45:35:7b:57:04:17:d7:4a:c4:7b:8c:b6:60:
         5c:8b:5a:c3:35:6e:29:0f:8c:07:42:1a:2d:15:37:ce:06:af:
         86:be:ee:d1:58:01:4f:7d:8b:42:f0:e4:97:fc:10:92:9c:44:
         96:85:eb:b9:fb:ab:f6:d5:51:e1:ef:bc:3a:fc:3c:8e:4a:b4:
         b8:50:9d:90:51:49:ad:47:11:f3:a3:16:6d:ff:07:59:ea:65:
         ec:f2:29:f9:83:57:43:2b:ba:1d:1c:cb:eb:78:55:29:59:7e:
         71:bf:9a:e6
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIBNTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwRDcx
MjVBRTRDRUFFMTMzNUZFNUQ0MjlBQTAzMENFOTA3MERGMTlDMB4XDTIyMDcyMjAw
NDE1NVoXDTIzMDcyMTA0MDcxM1owMzExMC8GA1UEAxMoNUQ3MDcyQ0Y0MUJFQUJC
MDBGRDFGOUQ3NTFFMzkyMDA1NDMyN0Q3OTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMmMjf3g9QW5ZZCXXlknp+MnDMMRjw5QxnUDSO4Kkn1nu6tplFsn
2C8eku70+qE21sHyaJxBvsfAXHqGXorDwMVoNszBBETC+TMOyJAWJSJbDKZ395bS
0Qm2MAnOHehYMhNDCiXxABpEWjQMgvsE/Ff48FD1ZSJPdZ/AxKNMZZRWp5j+8dXG
TsShr8qmyhTkwc9k21bAwtEOupHLzv6H0oUboRO11G/FvgJnwG4NtfCtzJirtA97
qrxE5pMWMCydXyG2CY4GLOxFfNh/7OQ2sGxifTQ3vgdynBbp1iRV5oXRGCO8oIrY
6EZl4NPrUHVUWs8fTXYnWSKxkU+lygCyyKkCAwEAAaOCAiMwggIfMB0GA1UdDgQW
BBRdcHLPQb6rsA/R+ddR45IAVDJ9eTAfBgNVHSMEGDAWgBQNcSWuTOrhM1/l1Cmq
AwzpBw3xnDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzk0L0RYRWxya3pxNFROZjVkUXBxZ01NNlFjTjhady5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0RYRWxya3pxNFROZjVkUXBxZ01NNlFj
Tjhady5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zOTQvWFhCeXowRy1xN0FQMGZuWFVlT1NBRlF5ZlhrLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw
BQMDACQ3MA0GCSqGSIb3DQEBCwUAA4IBAQB4+cRgM5825aCXZHduGLABfhc7qACL
XrT19BkJHe/2a/ifTvB9DbU/W5af3z9ZYxV/uTNCeFOMPwXVFmdXohQgc6BJ/qPI
fQAy2DhT3iNufkZUry/GoTmzuXBnqxgA/b/x5eurUxAEg/u0GbFNkTjjJzrg3hTc
6QW+NHPcX0KMWx97CO+zabzxuc1CJrAaiKmzqW3RlEU1e1cEF9dKxHuMtmBci1rD
NW4pD4wHQhotFTfOBq+Gvu7RWAFPfYtC8OSX/BCSnESWheu5+6v21VHh77w6/DyO
SrS4UJ2QUUmtRxHzoxZt/wdZ6mXs8in5g1dDK7odHMvreFUpWX5xv5rm
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:09 2024 by rpki-client on console-ams.rpki-client.org