Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/Yux_BRmjQ-TNjXI5VHFipQkUdBk.roa
File:                     Yux_BRmjQ-TNjXI5VHFipQkUdBk.roa (raw, json)
Hash identifier:          BkvFhGERZa44ISWMbP4/qHZwUlx9O1AVgacOVwpH+uU=
Subject key identifier:   62:EC:7F:05:19:A3:43:E4:CD:8D:72:39:54:71:62:A5:09:14:74:19
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0F
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Yux_BRmjQ-TNjXI5VHFipQkUdBk.roa
Signing time:             Thu 21 Jul 2022 07:45:39 +0000
ROA not before:           Thu 21 Jul 2022 07:45:39 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        27.132.64.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 21 07:45:39 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=62EC7F0519A343E4CD8D7239547162A509147419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:18:1f:07:cd:06:cd:d7:e5:61:14:2d:ca:22:
                    ba:27:0e:aa:fb:ab:c4:fd:02:48:8c:fc:bc:80:5d:
                    1b:00:31:ee:28:e1:30:17:04:d3:44:bb:bd:7f:c7:
                    6e:ef:61:e5:dc:fc:ff:4e:1a:74:54:b4:a5:d0:ca:
                    c9:1e:db:83:d0:10:fe:98:9d:bb:b4:54:ec:ce:83:
                    97:3e:05:9d:0f:d6:6d:d1:78:24:c7:a8:7d:9f:5f:
                    d5:19:00:b6:e8:75:d8:d3:44:86:7f:99:a4:8e:8f:
                    e6:8a:4d:c3:a7:bc:2b:78:c3:b4:c9:04:75:db:4f:
                    24:2a:db:fc:04:31:b8:c1:84:90:42:1c:f9:78:0c:
                    b1:4c:6d:c2:c4:93:9a:e1:26:b0:59:2a:90:d2:32:
                    aa:d2:f1:e0:15:cb:0b:cf:77:ab:85:f6:df:f1:09:
                    bc:55:68:ee:68:90:13:aa:a4:a7:57:a7:e1:52:fb:
                    aa:97:ab:43:2d:ad:60:36:5d:14:b9:cd:3e:f3:cc:
                    72:41:c2:ba:68:1c:f4:fa:c8:6e:e9:88:2d:80:67:
                    bf:52:55:a8:c1:ac:e0:f7:cb:61:66:5e:0c:09:a7:
                    79:c7:3f:28:ec:74:ec:86:3f:17:61:de:ea:4e:f6:
                    4e:35:12:9b:c8:ef:61:68:47:cb:7c:53:e0:1b:54:
                    48:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:EC:7F:05:19:A3:43:E4:CD:8D:72:39:54:71:62:A5:09:14:74:19
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Yux_BRmjQ-TNjXI5VHFipQkUdBk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.132.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         83:cc:f1:2f:8e:8e:5b:0c:aa:01:5d:b0:22:32:9b:9c:0d:ec:
         2f:17:66:59:ee:f9:f2:61:ea:3a:3e:f6:3b:81:16:bf:3d:5a:
         c1:e3:9b:6a:4f:5e:bb:bb:97:ca:6d:3a:4d:b8:7b:50:f7:d6:
         00:13:08:0f:b6:e0:80:93:bb:a7:de:83:91:02:81:30:d1:b5:
         ff:48:b0:47:11:e4:a2:68:46:0d:23:88:73:8d:fe:30:e5:32:
         ad:c0:34:ea:f6:d0:36:f9:b0:2b:ee:5c:17:95:8a:1f:7f:2a:
         36:7a:5a:db:89:e2:11:a2:76:e4:55:54:39:78:42:fe:32:df:
         60:fb:41:24:8a:7e:9f:2d:24:d6:c7:6d:34:57:0b:81:9d:f8:
         86:18:56:7d:20:55:90:78:1a:46:91:1b:ff:f9:ea:a2:01:ff:
         2f:f2:f7:16:9a:7e:f3:78:bf:98:d1:fb:7f:81:17:33:e7:f6:
         ca:8f:cb:e2:40:27:84:ba:ba:a6:11:62:5a:49:cb:cd:d7:91:
         5c:d9:77:c8:94:25:7a:d3:76:4f:41:f7:08:c5:3f:63:df:b9:
         ad:4e:87:65:94:85:e4:fa:4d:a0:ee:07:17:de:72:34:f2:cc:
         d4:1f:28:ec:ef:79:15:c9:07:84:f7:3e:65:71:3e:2e:9f:36:
         bc:36:3f:59
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBDzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwRDcx
MjVBRTRDRUFFMTMzNUZFNUQ0MjlBQTAzMENFOTA3MERGMTlDMB4XDTIyMDcyMTA3
NDUzOVoXDTIzMDcyMTA0MDcxM1owMzExMC8GA1UEAxMoNjJFQzdGMDUxOUEzNDNF
NENEOEQ3MjM5NTQ3MTYyQTUwOTE0NzQxOTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMsYHwfNBs3X5WEULcoiuicOqvurxP0CSIz8vIBdGwAx7ijhMBcE
00S7vX/Hbu9h5dz8/04adFS0pdDKyR7bg9AQ/pidu7RU7M6Dlz4FnQ/WbdF4JMeo
fZ9f1RkAtuh12NNEhn+ZpI6P5opNw6e8K3jDtMkEddtPJCrb/AQxuMGEkEIc+XgM
sUxtwsSTmuEmsFkqkNIyqtLx4BXLC893q4X23/EJvFVo7miQE6qkp1en4VL7qper
Qy2tYDZdFLnNPvPMckHCumgc9PrIbumILYBnv1JVqMGs4PfLYWZeDAmnecc/KOx0
7IY/F2He6k72TjUSm8jvYWhHy3xT4BtUSNkCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRi7H8FGaND5M2NcjlUcWKlCRR0GTAfBgNVHSMEGDAWgBQNcSWuTOrhM1/l1Cmq
AwzpBw3xnDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzk0L0RYRWxya3pxNFROZjVkUXBxZ01NNlFjTjhady5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0RYRWxya3pxNFROZjVkUXBxZ01NNlFj
Tjhady5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zOTQvWXV4X0JSbWpRLVROalhJNVZIRmlwUWtVZEJrLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBhuEQDANBgkqhkiG9w0BAQsFAAOCAQEAg8zxL46OWwyqAV2wIjKbnA3sLxdm
We758mHqOj72O4EWvz1aweObak9eu7uXym06Tbh7UPfWABMID7bggJO7p96DkQKB
MNG1/0iwRxHkomhGDSOIc43+MOUyrcA06vbQNvmwK+5cF5WKH38qNnpa24niEaJ2
5FVUOXhC/jLfYPtBJIp+ny0k1sdtNFcLgZ34hhhWfSBVkHgaRpEb//nqogH/L/L3
Fpp+83i/mNH7f4EXM+f2yo/L4kAnhLq6phFiWknLzdeRXNl3yJQletN2T0H3CMU/
Y9+5rU6HZZSF5PpNoO4HF95yNPLM1B8o7O95FckHhPc+ZXE+Lp82vDY/WQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:09 2024 by rpki-client on console-ams.rpki-client.org