Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/ZE_QWuVU44YCLAEy59IQT22n1Rs.roa
File:                     ZE_QWuVU44YCLAEy59IQT22n1Rs.roa (raw, json)
Hash identifier:          YXJLd6vnhiIrXOdZ7KIl8oduVdPDJoQ/CA0Q7Nv4UzQ=
Subject key identifier:   64:4F:D0:5A:E5:54:E3:86:02:2C:01:32:E7:D2:10:4F:6D:A7:D5:1B
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       E7
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ZE_QWuVU44YCLAEy59IQT22n1Rs.roa
Signing time:             Thu 28 Jul 2022 05:51:43 +0000
ROA not before:           Thu 28 Jul 2022 05:51:43 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        210.159.152.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231 (0xe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 28 05:51:43 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=644FD05AE554E386022C0132E7D2104F6DA7D51B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c2:71:f6:28:5a:23:d3:01:e9:e5:d6:5c:a6:
                    30:f4:20:cf:f2:e7:8e:00:ba:a9:bb:64:84:a7:6b:
                    dc:a5:e6:da:1d:1a:bb:c6:d4:2e:3f:d3:0a:21:4b:
                    83:e5:1b:09:47:04:40:c7:95:de:60:98:88:65:7f:
                    53:bb:c6:e4:a6:bf:62:54:15:e9:e4:92:5f:4a:62:
                    10:fc:04:60:5b:f5:18:18:0b:85:6a:2c:67:3b:e0:
                    5b:40:81:fb:98:35:41:c7:30:10:96:d5:56:9c:09:
                    ab:2d:ed:a7:b6:fc:cb:0b:e8:50:e9:a9:1f:2f:67:
                    37:6b:a7:62:be:68:33:5e:ac:c9:b4:7d:2c:d3:d9:
                    55:62:82:37:f0:2a:0f:18:0b:33:f3:36:97:4d:ba:
                    a3:21:e4:d4:60:de:74:14:06:82:90:ab:49:94:e5:
                    1b:2f:fc:fe:23:49:33:a3:af:7a:85:c8:31:cf:7d:
                    76:c9:48:34:17:82:14:43:76:5c:98:f8:0a:e2:65:
                    65:3b:e8:d3:46:f6:02:a7:f5:6e:01:fd:43:aa:41:
                    01:95:14:0f:23:bb:1e:50:65:c8:6f:c2:29:66:37:
                    0b:cc:26:b3:e1:d6:55:52:0a:b2:d6:c4:d0:d4:55:
                    44:84:83:b8:71:b6:f0:4e:6c:70:bd:82:bd:6b:0b:
                    08:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:4F:D0:5A:E5:54:E3:86:02:2C:01:32:E7:D2:10:4F:6D:A7:D5:1B
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ZE_QWuVU44YCLAEy59IQT22n1Rs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.159.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         76:95:2b:1e:35:37:95:0c:ee:bd:5f:5c:56:e1:25:d8:71:a9:
         6f:e8:91:48:4c:04:b2:53:7d:e8:6e:d2:d2:a7:e0:79:f3:8b:
         38:58:a1:dd:f2:1f:56:d4:a5:47:7e:81:42:38:b8:db:3a:ef:
         94:0c:f3:8d:13:2d:00:35:8a:a3:8a:7f:89:5d:26:20:6d:17:
         7e:2c:2e:d1:c6:fb:de:c6:69:c6:7d:dc:3b:c3:aa:a1:52:eb:
         5b:64:cc:99:5f:e8:a1:9a:bb:07:72:3f:4e:4c:57:4f:9a:6b:
         1f:3d:b9:6f:83:13:14:c0:c7:3c:94:45:ab:48:2f:5e:49:20:
         7a:7b:57:fc:29:84:dd:e9:c3:d4:20:f9:3b:34:46:b4:15:d2:
         09:4a:83:e6:b8:18:14:29:90:73:d1:34:1c:5b:2c:d1:9d:cd:
         42:c9:fd:44:fc:38:3f:cc:2a:b0:19:2d:f5:33:6a:0e:32:be:
         97:b0:ed:cb:97:b9:a2:2e:83:64:2a:73:df:6c:61:a6:0e:56:
         a1:6e:8e:a0:5a:6d:58:91:fe:ba:6c:09:12:b3:f9:b1:4d:dd:
         17:f7:b2:ce:ad:da:ea:10:af:a1:5a:cb:c6:43:90:93:fb:02:
         ef:31:e3:3c:59:aa:8d:1f:73:eb:64:06:c7:0d:ab:b2:b3:d2:
         48:c4:74:da
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yMjA3Mjgw
NTUxNDNaFw0yMzA3MjEwNDA3MTNaMDMxMTAvBgNVBAMTKDY0NEZEMDVBRTU1NEUz
ODYwMjJDMDEzMkU3RDIxMDRGNkRBN0Q1MUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLwnH2KFoj0wHp5dZcpjD0IM/y544Auqm7ZISna9yl5todGrvG
1C4/0wohS4PlGwlHBEDHld5gmIhlf1O7xuSmv2JUFenkkl9KYhD8BGBb9RgYC4Vq
LGc74FtAgfuYNUHHMBCW1VacCast7ae2/MsL6FDpqR8vZzdrp2K+aDNerMm0fSzT
2VVigjfwKg8YCzPzNpdNuqMh5NRg3nQUBoKQq0mU5Rsv/P4jSTOjr3qFyDHPfXbJ
SDQXghRDdlyY+AriZWU76NNG9gKn9W4B/UOqQQGVFA8jux5QZchvwilmNwvMJrPh
1lVSCrLWxNDUVUSEg7hxtvBObHC9gr1rCwhTAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUZE/QWuVU44YCLAEy59IQT22n1RswHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L1pFX1FXdVZVNDRZQ0xBRXk1OUlRVDIybjFScy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAPSn5gwDQYJKoZIhvcNAQELBQADggEBAHaVKx41N5UM7r1fXFbhJdhxqW/o
kUhMBLJTfehu0tKn4HnzizhYod3yH1bUpUd+gUI4uNs675QM840TLQA1iqOKf4ld
JiBtF34sLtHG+97GacZ93DvDqqFS61tkzJlf6KGauwdyP05MV0+aax89uW+DExTA
xzyURatIL15JIHp7V/wphN3pw9Qg+Ts0RrQV0glKg+a4GBQpkHPRNBxbLNGdzULJ
/UT8OD/MKrAZLfUzag4yvpew7cuXuaIug2Qqc99sYaYOVqFujqBabViR/rpsCRKz
+bFN3Rf3ss6t2uoQr6Fay8ZDkJP7Au8x4zxZqo0fc+tkBscNq7Kz0kjEdNo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org