Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/cdm7qAPmOVH2AhlSmdPXJ11G59I.roa
File:                     cdm7qAPmOVH2AhlSmdPXJ11G59I.roa (raw, json)
Hash identifier:          7z6NZe86qE0n+/RmF/BfSMcGrH5H57bMrGx6iAaq7u4=
Subject key identifier:   71:D9:BB:A8:03:E6:39:51:F6:02:19:52:99:D3:D7:27:5D:46:E7:D2
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       45
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/cdm7qAPmOVH2AhlSmdPXJ11G59I.roa
Signing time:             Fri 22 Jul 2022 01:44:34 +0000
ROA not before:           Fri 22 Jul 2022 01:44:34 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        220.150.83.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 01:44:34 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=71D9BBA803E63951F602195299D3D7275D46E7D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7c:18:64:70:31:50:cd:77:28:25:27:40:33:
                    db:dd:6b:fe:e9:d1:66:73:75:1a:89:84:a2:d8:14:
                    53:3c:cc:6d:e5:82:69:11:95:2f:4d:57:31:3d:40:
                    47:02:25:86:0d:3c:4d:4f:80:6e:00:15:57:f1:00:
                    60:0e:64:db:91:62:81:4e:57:76:bf:ae:c0:4b:d8:
                    ec:07:e9:ac:31:b8:71:8a:db:70:a5:ab:54:43:2f:
                    f9:5e:5f:45:36:a3:6b:62:27:64:ad:be:17:1c:23:
                    32:b3:25:58:eb:a2:09:7f:11:f8:47:05:ff:c9:05:
                    12:dc:57:f6:70:87:29:89:f4:6f:74:3d:ef:a1:2b:
                    08:34:42:0c:fa:a1:7d:19:ee:54:b7:ec:78:e3:c1:
                    ce:93:97:fc:74:ab:90:57:72:67:0d:50:99:f1:07:
                    f4:a0:72:57:7c:16:b9:47:e3:74:82:40:29:d6:6a:
                    e8:fd:03:aa:7f:7c:6c:3c:bd:90:d2:25:2b:87:a3:
                    5b:54:0c:56:f6:db:52:23:b1:ce:18:67:82:91:be:
                    bf:54:25:5e:b1:3b:e5:74:6c:e8:c1:4f:2f:0b:c0:
                    b6:4c:c5:24:7a:92:ac:63:38:4b:06:9a:45:1f:77:
                    e7:b5:36:6f:73:79:78:1d:d2:4b:f5:d8:21:ea:01:
                    d3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D9:BB:A8:03:E6:39:51:F6:02:19:52:99:D3:D7:27:5D:46:E7:D2
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/cdm7qAPmOVH2AhlSmdPXJ11G59I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.150.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:43:e6:98:31:f5:14:e9:17:b5:8f:1d:e7:22:9c:72:f5:c6:
         09:be:6a:10:c6:3f:a6:ae:bf:f0:25:5b:da:b6:e8:69:ec:00:
         02:19:dd:39:a2:fd:e2:04:48:44:21:99:c8:28:40:58:81:78:
         f9:80:8a:66:bb:1b:12:f7:c2:89:ed:76:02:71:ac:f5:81:4b:
         91:7e:aa:18:94:bd:0f:8b:42:4e:e0:0b:01:cb:62:7a:de:6d:
         7c:3e:b9:cb:19:28:94:c8:81:48:8f:94:13:5e:8b:b8:82:71:
         c9:9c:14:02:31:c5:a5:bb:7d:ef:8a:5b:fd:e6:d2:5a:73:ad:
         ef:6e:68:02:34:87:2b:73:fb:23:35:6b:63:48:69:56:61:60:
         05:e6:ca:16:f9:f8:61:e9:5e:0b:7f:61:a8:46:a2:46:42:6f:
         34:4f:ac:f8:2a:0c:51:11:8f:31:27:fc:76:c7:59:86:48:54:
         dc:b6:b8:58:09:89:f7:db:fc:0b:1b:26:c7:6b:16:19:d3:7d:
         15:0e:2e:af:90:7b:b2:f3:db:8d:c6:39:91:41:61:0b:63:b2:
         ec:ea:82:1e:82:52:9c:f6:d3:a8:36:97:ca:11:51:e2:7f:3c:
         63:a1:1f:7c:38:81:30:0c:3b:93:2a:8d:05:f9:d4:83:28:6e:
         77:68:97:c1
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBRTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwRDcx
MjVBRTRDRUFFMTMzNUZFNUQ0MjlBQTAzMENFOTA3MERGMTlDMB4XDTIyMDcyMjAx
NDQzNFoXDTIzMDcyMTA0MDcxM1owMzExMC8GA1UEAxMoNzFEOUJCQTgwM0U2Mzk1
MUY2MDIxOTUyOTlEM0Q3Mjc1RDQ2RTdEMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMF8GGRwMVDNdyglJ0Az291r/unRZnN1GomEotgUUzzMbeWCaRGV
L01XMT1ARwIlhg08TU+AbgAVV/EAYA5k25FigU5Xdr+uwEvY7AfprDG4cYrbcKWr
VEMv+V5fRTaja2InZK2+FxwjMrMlWOuiCX8R+EcF/8kFEtxX9nCHKYn0b3Q976Er
CDRCDPqhfRnuVLfseOPBzpOX/HSrkFdyZw1QmfEH9KByV3wWuUfjdIJAKdZq6P0D
qn98bDy9kNIlK4ejW1QMVvbbUiOxzhhngpG+v1QlXrE75XRs6MFPLwvAtkzFJHqS
rGM4SwaaRR9357U2b3N5eB3SS/XYIeoB0yECAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRx2buoA+Y5UfYCGVKZ09cnXUbn0jAfBgNVHSMEGDAWgBQNcSWuTOrhM1/l1Cmq
AwzpBw3xnDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzk0L0RYRWxya3pxNFROZjVkUXBxZ01NNlFjTjhady5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0RYRWxya3pxNFROZjVkUXBxZ01NNlFj
Tjhady5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zOTQvY2RtN3FBUG1PVkgyQWhsU21kUFhKMTFHNTlJLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEANyWUzANBgkqhkiG9w0BAQsFAAOCAQEAQkPmmDH1FOkXtY8d5yKccvXGCb5q
EMY/pq6/8CVb2rboaewAAhndOaL94gRIRCGZyChAWIF4+YCKZrsbEvfCie12AnGs
9YFLkX6qGJS9D4tCTuALActiet5tfD65yxkolMiBSI+UE16LuIJxyZwUAjHFpbt9
74pb/ebSWnOt725oAjSHK3P7IzVrY0hpVmFgBebKFvn4YeleC39hqEaiRkJvNE+s
+CoMURGPMSf8dsdZhkhU3La4WAmJ99v8Cxsmx2sWGdN9FQ4ur5B7svPbjcY5kUFh
C2Oy7OqCHoJSnPbTqDaXyhFR4n88Y6EffDiBMAw7kyqNBfnUgyhud2iXwQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:09 2024 by rpki-client on console-ams.rpki-client.org