Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/xvqpi5sWi-__09435ugCS6Us64g.roa
File:                     xvqpi5sWi-__09435ugCS6Us64g.roa (raw, json)
Hash identifier:          JV6wkWc7BS726VqUPJFa2mKv8sUGok9OA0SvC+p3Oyk=
Subject key identifier:   C6:FA:A9:8B:9B:16:8B:EF:FF:D3:DE:37:E6:E8:02:4B:A5:2C:EB:88
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       40
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/xvqpi5sWi-__09435ugCS6Us64g.roa
Signing time:             Fri 22 Jul 2022 01:26:31 +0000
ROA not before:           Fri 22 Jul 2022 01:26:31 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        27.133.160.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 01:26:31 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=C6FAA98B9B168BEFFFD3DE37E6E8024BA52CEB88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9d:30:6b:a6:66:f4:f5:58:3f:f9:bb:b4:c0:
                    2b:fc:54:7f:30:f4:d3:d1:8d:59:77:08:06:1e:cd:
                    b5:90:78:2f:d7:66:b4:90:2f:40:67:37:d8:8a:6d:
                    c7:85:85:d0:ed:84:ad:31:6d:42:e9:f8:5f:e2:fc:
                    20:9a:dd:58:a7:38:06:e3:1f:40:d9:a1:34:24:0a:
                    e4:e6:5a:a5:b3:25:84:9b:6b:0a:06:f4:e4:40:b4:
                    4f:f9:df:d4:20:eb:d3:4c:db:95:5b:9a:3a:15:30:
                    7e:52:50:3c:c2:be:80:da:de:b9:38:b9:5b:ef:a4:
                    a8:04:16:c1:bc:d2:1c:34:3c:82:f0:71:bc:8e:41:
                    98:6a:a0:3d:c8:54:dd:c0:5e:e2:14:62:28:ef:60:
                    7b:ad:89:94:ee:fb:c5:c0:02:a9:9f:74:77:a5:3f:
                    bc:66:42:6c:2b:b5:98:b3:0b:5c:1b:04:f2:32:09:
                    46:d6:e0:76:9b:cf:55:e3:e5:f1:8e:b8:51:7d:c2:
                    ee:35:3f:8e:20:ad:1e:0d:d8:87:5b:f8:44:c7:fd:
                    66:50:9c:3c:9e:5b:6e:ab:fb:10:56:b5:d0:1b:5c:
                    3e:ef:73:2b:df:20:58:35:39:23:51:3d:b6:40:a5:
                    2a:65:da:31:dd:1c:27:b5:1f:3c:4c:3a:0d:61:60:
                    70:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:FA:A9:8B:9B:16:8B:EF:FF:D3:DE:37:E6:E8:02:4B:A5:2C:EB:88
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/xvqpi5sWi-__09435ugCS6Us64g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.133.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         48:e3:2a:06:e6:cf:b8:28:94:96:1c:dc:0d:0e:0a:67:d3:90:
         d6:ec:e9:7c:28:dd:0e:99:ce:6e:75:1e:d9:53:f9:b3:77:63:
         93:38:49:39:fe:82:90:e2:63:51:40:c8:fd:a6:e0:f7:34:d4:
         5e:93:3f:b7:f9:a7:d7:b0:93:d1:3b:e7:b8:4b:97:82:de:2c:
         70:bc:fb:24:26:99:ab:10:59:6a:2f:09:c8:10:fe:01:55:b5:
         f3:41:f0:56:2c:27:74:35:83:66:df:3f:e8:91:b1:40:39:8a:
         8a:4c:28:7c:dc:d8:9c:c7:98:51:f7:b0:a2:a9:20:95:10:6b:
         2c:c4:a1:f4:a7:80:cb:d3:9e:29:aa:5a:e3:3d:0f:e4:65:f7:
         53:e1:6c:1f:8f:04:d7:0b:69:58:b6:0d:52:31:c8:5e:d2:0d:
         aa:b4:a9:a6:ef:c3:1f:1e:2a:6a:3a:cf:ee:62:5c:7e:63:af:
         00:f8:89:d3:1b:cd:f2:82:58:c5:3c:d1:ae:5a:bf:cf:72:85:
         04:08:f8:51:ef:75:2d:bf:6f:1f:28:c5:cc:c5:79:c6:f2:8e:
         22:f3:3d:a5:b6:4b:79:80:a0:88:e9:5f:33:bb:05:c2:cf:4a:
         d6:a5:58:4a:ef:43:c8:cc:4f:7f:d6:3d:0d:2c:e0:14:b8:ed:
         63:01:9e:47
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBQDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwRDcx
MjVBRTRDRUFFMTMzNUZFNUQ0MjlBQTAzMENFOTA3MERGMTlDMB4XDTIyMDcyMjAx
MjYzMVoXDTIzMDcyMTA0MDcxM1owMzExMC8GA1UEAxMoQzZGQUE5OEI5QjE2OEJF
RkZGRDNERTM3RTZFODAyNEJBNTJDRUI4ODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMWdMGumZvT1WD/5u7TAK/xUfzD009GNWXcIBh7NtZB4L9dmtJAv
QGc32Iptx4WF0O2ErTFtQun4X+L8IJrdWKc4BuMfQNmhNCQK5OZapbMlhJtrCgb0
5EC0T/nf1CDr00zblVuaOhUwflJQPMK+gNreuTi5W++kqAQWwbzSHDQ8gvBxvI5B
mGqgPchU3cBe4hRiKO9ge62JlO77xcACqZ90d6U/vGZCbCu1mLMLXBsE8jIJRtbg
dpvPVePl8Y64UX3C7jU/jiCtHg3Yh1v4RMf9ZlCcPJ5bbqv7EFa10BtcPu9zK98g
WDU5I1E9tkClKmXaMd0cJ7UfPEw6DWFgcNECAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTG+qmLmxaL7//T3jfm6AJLpSzriDAfBgNVHSMEGDAWgBQNcSWuTOrhM1/l1Cmq
AwzpBw3xnDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzk0L0RYRWxya3pxNFROZjVkUXBxZ01NNlFjTjhady5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0RYRWxya3pxNFROZjVkUXBxZ01NNlFj
Tjhady5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zOTQveHZxcGk1c1dpLV9fMDk0MzV1Z0NTNlVzNjRnLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAxuFoDANBgkqhkiG9w0BAQsFAAOCAQEASOMqBubPuCiUlhzcDQ4KZ9OQ1uzp
fCjdDpnObnUe2VP5s3djkzhJOf6CkOJjUUDI/abg9zTUXpM/t/mn17CT0TvnuEuX
gt4scLz7JCaZqxBZai8JyBD+AVW180HwViwndDWDZt8/6JGxQDmKikwofNzYnMeY
UfewoqkglRBrLMSh9KeAy9OeKapa4z0P5GX3U+FsH48E1wtpWLYNUjHIXtINqrSp
pu/DHx4qajrP7mJcfmOvAPiJ0xvN8oJYxTzRrlq/z3KFBAj4Ue91Lb9vHyjFzMV5
xvKOIvM9pbZLeYCgiOlfM7sFws9K1qVYSu9DyMxPf9Y9DSzgFLjtYwGeRw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org