Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/uAJ2Too7XGNKzGFDigLvxS8sku8.roa
File:                     uAJ2Too7XGNKzGFDigLvxS8sku8.roa (raw, json)
Hash identifier:          dSZzLzQ4rnqzUsInCbklzjpTbQLcT/oXIr5hf/HGE2E=
Subject key identifier:   B8:02:76:4E:8A:3B:5C:63:4A:CC:61:43:8A:02:EF:C5:2F:2C:92:EF
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       E8
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/uAJ2Too7XGNKzGFDigLvxS8sku8.roa
Signing time:             Thu 28 Jul 2022 05:53:35 +0000
ROA not before:           Thu 28 Jul 2022 05:53:35 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        210.159.142.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 232 (0xe8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 28 05:53:35 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=B802764E8A3B5C634ACC61438A02EFC52F2C92EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:55:7c:7b:7f:c6:61:75:4f:71:4f:8c:73:93:
                    26:91:14:e5:b4:83:eb:99:ed:c0:e5:1e:72:b8:a3:
                    76:f6:0c:00:86:7e:d2:3c:fa:1d:0c:d6:68:b6:d5:
                    8b:41:a6:b3:91:1f:71:9a:c8:23:51:35:5f:8e:32:
                    1e:07:d7:a2:78:74:fe:a6:5f:bc:4c:cb:b4:83:50:
                    70:f5:17:ff:9f:de:97:e7:70:65:7d:90:0c:ec:58:
                    5f:85:b3:29:66:52:5b:83:1e:a2:2b:1e:8a:24:0f:
                    c2:43:4d:17:29:bb:d0:06:3f:f2:5c:1c:8f:43:f4:
                    79:20:ed:c7:c6:6b:ea:c3:cf:f6:53:ca:b1:10:40:
                    9b:73:7f:82:84:ef:03:84:fc:54:c7:4b:b0:c0:2e:
                    84:8c:e8:1a:a0:8f:32:94:dd:42:7a:12:b2:54:d5:
                    4d:e0:57:9e:93:76:fc:ea:0e:2e:0f:30:4f:bf:1c:
                    90:a3:3e:c1:bb:68:2e:39:04:fc:d4:66:83:7e:8f:
                    02:ed:68:f1:fa:3c:51:9f:e4:fb:2c:26:f0:84:04:
                    e6:53:87:4f:c6:a9:0a:02:1a:48:e2:75:c0:6a:a4:
                    a6:cb:a2:94:d8:56:3b:06:8b:70:84:9f:00:b6:a4:
                    43:04:e7:58:24:e1:6e:eb:01:b1:10:af:a3:a3:50:
                    68:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:02:76:4E:8A:3B:5C:63:4A:CC:61:43:8A:02:EF:C5:2F:2C:92:EF
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/uAJ2Too7XGNKzGFDigLvxS8sku8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.159.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:79:eb:c6:61:0c:4b:cd:2f:57:f1:35:93:dc:29:40:10:68:
         a3:c9:29:7d:87:66:30:60:6e:87:c8:e1:ed:0e:19:26:da:a4:
         b1:f0:24:53:1a:70:65:77:7c:f5:15:51:a4:f8:81:25:15:9c:
         10:fa:d3:7b:5d:0e:fe:fe:13:77:7c:d7:71:71:4a:e6:08:2f:
         57:86:be:d8:48:c0:3b:88:cd:f4:25:46:7b:7e:8c:bf:be:30:
         c2:48:74:dc:83:80:cc:a5:d6:02:e0:7e:0f:31:7f:e9:70:05:
         1d:73:76:bd:6e:9a:c4:4f:b6:67:dc:e9:33:27:1e:91:45:f9:
         16:3a:4a:96:79:e9:75:97:4c:54:e5:ce:d0:4f:7c:5f:c1:08:
         4e:4c:83:a0:86:1d:3e:02:b7:64:d4:ee:e3:8a:73:0b:ba:78:
         ed:72:0e:2f:54:cc:26:bb:a0:f8:18:dc:79:d1:7c:e7:79:24:
         c6:ae:c0:3d:38:99:04:cf:4e:e6:fe:c8:9f:c4:ab:58:9a:61:
         20:19:0c:7c:4f:46:dc:8f:19:76:cd:df:47:92:ed:e5:30:fd:
         26:18:0a:44:ab:1d:07:69:b5:d2:02:c7:09:db:6d:e2:ab:66:
         e9:f0:61:af:da:81:06:02:09:2a:bb:57:a5:96:f0:7e:7f:bc:
         a8:a1:1b:a4
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yMjA3Mjgw
NTUzMzVaFw0yMzA3MjEwNDA3MTNaMDMxMTAvBgNVBAMTKEI4MDI3NjRFOEEzQjVD
NjM0QUNDNjE0MzhBMDJFRkM1MkYyQzkyRUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6VXx7f8ZhdU9xT4xzkyaRFOW0g+uZ7cDlHnK4o3b2DACGftI8
+h0M1mi21YtBprORH3GayCNRNV+OMh4H16J4dP6mX7xMy7SDUHD1F/+f3pfncGV9
kAzsWF+FsylmUluDHqIrHookD8JDTRcpu9AGP/JcHI9D9Hkg7cfGa+rDz/ZTyrEQ
QJtzf4KE7wOE/FTHS7DALoSM6BqgjzKU3UJ6ErJU1U3gV56TdvzqDi4PME+/HJCj
PsG7aC45BPzUZoN+jwLtaPH6PFGf5PssJvCEBOZTh0/GqQoCGkjidcBqpKbLopTY
VjsGi3CEnwC2pEME51gk4W7rAbEQr6OjUGiDAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUuAJ2Too7XGNKzGFDigLvxS8sku8wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L3VBSjJUb283WEdOS3pHRkRpZ0x2eFM4c2t1OC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAHSn44wDQYJKoZIhvcNAQELBQADggEBACJ568ZhDEvNL1fxNZPcKUAQaKPJ
KX2HZjBgbofI4e0OGSbapLHwJFMacGV3fPUVUaT4gSUVnBD603tdDv7+E3d813Fx
SuYIL1eGvthIwDuIzfQlRnt+jL++MMJIdNyDgMyl1gLgfg8xf+lwBR1zdr1umsRP
tmfc6TMnHpFF+RY6SpZ56XWXTFTlztBPfF/BCE5Mg6CGHT4Ct2TU7uOKcwu6eO1y
Di9UzCa7oPgY3HnRfOd5JMauwD04mQTPTub+yJ/Eq1iaYSAZDHxPRtyPGXbN30eS
7eUw/SYYCkSrHQdptdICxwnbbeKrZunwYa/agQYCCSq7V6WW8H5/vKihG6Q=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:09 2024 by rpki-client on console-ams.rpki-client.org