Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/bYliqNTOuXyLr70zMtaN6AuBZS0.roa
File:                     bYliqNTOuXyLr70zMtaN6AuBZS0.roa (raw, json)
Hash identifier:          /Izxi8tMVDV3RVGIca9MsGikqfuJYzgmWYehhoFe8z0=
Subject key identifier:   6D:89:62:A8:D4:CE:B9:7C:8B:AF:BD:33:32:D6:8D:E8:0B:81:65:2D
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       25
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/bYliqNTOuXyLr70zMtaN6AuBZS0.roa
Signing time:             Fri 22 Jul 2022 00:08:02 +0000
ROA not before:           Fri 22 Jul 2022 00:08:02 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        153.120.212.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 00:08:02 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=6D8962A8D4CEB97C8BAFBD3332D68DE80B81652D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3d:30:6c:28:37:34:56:37:a4:5e:de:58:d6:
                    3e:be:3a:05:40:cf:31:ff:1e:25:d3:2c:40:ea:10:
                    d8:75:dc:78:3c:ca:e3:4b:30:ff:6d:ac:a4:f2:7c:
                    92:28:70:39:91:2f:87:66:94:29:83:db:ea:4d:5a:
                    fb:13:41:6a:01:00:88:04:5b:97:31:7f:16:58:ad:
                    f5:5f:78:d1:5e:52:31:c8:96:48:0e:8f:fa:bd:41:
                    5a:08:f1:cb:b9:2d:cd:08:11:61:a2:d1:01:e2:37:
                    c5:c4:aa:70:bd:9d:5e:a2:5a:35:d7:92:a0:32:8c:
                    51:52:80:7d:0e:76:cb:62:61:2c:92:35:b6:23:e7:
                    92:cb:df:38:a6:9d:64:3c:b5:8e:2e:6c:61:ac:6a:
                    8e:18:db:16:af:24:03:24:55:8b:59:e0:fe:97:55:
                    c0:20:ac:85:92:4e:16:9a:6b:fa:da:1e:44:65:58:
                    08:d4:02:f0:a9:e0:ff:1a:82:17:95:8a:86:d3:82:
                    b2:d7:a3:9f:86:17:7a:56:8d:8b:b4:ab:9f:07:7b:
                    6d:72:2a:85:fe:b0:0b:b4:74:51:a9:db:fe:62:cb:
                    38:4f:76:00:70:7e:d5:59:a5:93:9a:5f:ee:fb:ca:
                    ec:68:03:e5:7c:e8:31:f1:8f:bf:c3:2c:8c:8e:04:
                    71:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:89:62:A8:D4:CE:B9:7C:8B:AF:BD:33:32:D6:8D:E8:0B:81:65:2D
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/bYliqNTOuXyLr70zMtaN6AuBZS0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.120.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:63:13:50:fd:a6:ef:f5:d8:ce:e3:a0:ba:a1:58:73:f4:aa:
         26:42:30:e2:52:9c:c2:23:c7:68:17:a5:36:77:23:03:cf:57:
         70:92:f3:1d:36:67:8b:c6:ed:63:2e:89:f0:6d:6e:6b:6d:ea:
         96:a9:46:a8:ba:03:26:0b:1d:28:e9:62:4d:4a:7e:ab:d6:cd:
         0e:d6:c7:81:54:f8:e9:a3:7c:bc:5e:32:3f:ee:df:a1:9b:fa:
         18:c2:b1:bd:2a:b8:b4:3a:ad:e0:c9:6a:60:28:d0:df:63:3a:
         23:1c:3f:93:50:30:5b:52:1c:6f:ea:a8:c4:14:94:35:ff:fa:
         ed:c8:59:d9:af:f9:3c:2a:f5:d4:59:9f:71:fb:cf:07:3a:6a:
         1e:5e:99:0e:20:01:e8:a1:86:1a:0e:f1:a8:f6:df:96:28:0c:
         dd:68:0b:40:49:d1:4c:96:eb:a8:91:6c:a7:62:04:b4:df:81:
         ae:28:a4:c0:7d:bf:61:ac:f9:85:f0:f7:5d:9f:2d:05:31:3b:
         39:ca:d7:60:a7:b8:9e:c8:b5:c1:4d:f2:e9:2b:9d:8c:68:69:
         c9:94:a6:0d:a7:36:df:e7:50:5b:4d:a5:3c:10:ff:36:75:8d:
         d0:fb:37:ac:73:51:3a:49:39:3c:00:84:0c:ac:c6:a3:0a:fc:
         5f:77:b4:2a
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBJTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwRDcx
MjVBRTRDRUFFMTMzNUZFNUQ0MjlBQTAzMENFOTA3MERGMTlDMB4XDTIyMDcyMjAw
MDgwMloXDTIzMDcyMTA0MDcxM1owMzExMC8GA1UEAxMoNkQ4OTYyQThENENFQjk3
QzhCQUZCRDMzMzJENjhERTgwQjgxNjUyRDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJw9MGwoNzRWN6Re3ljWPr46BUDPMf8eJdMsQOoQ2HXceDzK40sw
/22spPJ8kihwOZEvh2aUKYPb6k1a+xNBagEAiARblzF/Flit9V940V5SMciWSA6P
+r1BWgjxy7ktzQgRYaLRAeI3xcSqcL2dXqJaNdeSoDKMUVKAfQ52y2JhLJI1tiPn
ksvfOKadZDy1ji5sYaxqjhjbFq8kAyRVi1ng/pdVwCCshZJOFppr+toeRGVYCNQC
8Kng/xqCF5WKhtOCstejn4YXelaNi7Srnwd7bXIqhf6wC7R0Uanb/mLLOE92AHB+
1Vmlk5pf7vvK7GgD5XzoMfGPv8MsjI4Eca8CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRtiWKo1M65fIuvvTMy1o3oC4FlLTAfBgNVHSMEGDAWgBQNcSWuTOrhM1/l1Cmq
AwzpBw3xnDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzk0L0RYRWxya3pxNFROZjVkUXBxZ01NNlFjTjhady5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0RYRWxya3pxNFROZjVkUXBxZ01NNlFj
Tjhady5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zOTQvYllsaXFOVE91WHlMcjcwek10YU42QXVCWlMwLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEApl41DANBgkqhkiG9w0BAQsFAAOCAQEAaGMTUP2m7/XYzuOguqFYc/SqJkIw
4lKcwiPHaBelNncjA89XcJLzHTZni8btYy6J8G1ua23qlqlGqLoDJgsdKOliTUp+
q9bNDtbHgVT46aN8vF4yP+7foZv6GMKxvSq4tDqt4MlqYCjQ32M6Ixw/k1AwW1Ic
b+qoxBSUNf/67chZ2a/5PCr11FmfcfvPBzpqHl6ZDiAB6KGGGg7xqPbfligM3WgL
QEnRTJbrqJFsp2IEtN+BriikwH2/Yaz5hfD3XZ8tBTE7OcrXYKe4nsi1wU3y6Sud
jGhpyZSmDac23+dQW02lPBD/NnWN0Ps3rHNROkk5PACEDKzGowr8X3e0Kg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org