Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/395/DJARk8Wz7H12_rsyd25n6VYZJOk.roa
File:                     DJARk8Wz7H12_rsyd25n6VYZJOk.roa (raw, json)
Hash identifier:          g/e9txntYgFXDGBbXcfTYwXzcQOFIcaC3QGjJ1/J8FY=
Subject key identifier:   0C:90:11:93:C5:B3:EC:7D:76:FE:BB:32:77:6E:67:E9:56:19:24:E9
Certificate issuer:       /CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
Certificate serial:       11
Authority key identifier: B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/DJARk8Wz7H12_rsyd25n6VYZJOk.roa
Signing time:             Mon 20 Feb 2023 03:36:53 +0000
ROA not before:           Mon 20 Feb 2023 03:36:53 +0000
ROA not after:            Fri 16 Feb 2024 07:35:22 +0000
asID:                     9619
IP address blocks:        211.125.139.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
        Validity
            Not Before: Feb 20 03:36:53 2023 GMT
            Not After : Feb 16 07:35:22 2024 GMT
        Subject: CN=0C901193C5B3EC7D76FEBB32776E67E9561924E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:62:ab:df:c4:6e:2e:09:85:08:43:9b:cd:c5:
                    a0:8c:4b:97:98:76:cc:31:95:b3:30:ba:97:be:72:
                    56:ec:fb:ca:be:f7:13:04:9c:d1:b9:a5:99:8d:b6:
                    4d:7d:81:04:b0:d3:27:46:2f:8e:fb:ab:ac:81:4c:
                    d0:ae:5e:7a:44:40:ff:5c:f5:15:0b:80:a6:4c:8a:
                    11:26:bf:ce:11:26:14:5b:4a:75:e0:fc:24:ce:3e:
                    1e:a8:02:cd:b7:c8:3a:79:0f:81:12:67:f2:7e:ac:
                    d3:da:db:0b:c5:1a:b6:8a:14:8d:2e:e6:6b:55:3b:
                    86:81:9f:60:f2:5c:72:39:66:82:82:50:be:fb:44:
                    f9:3c:6f:7d:88:0f:2c:18:3b:43:ff:5c:88:4d:dd:
                    36:a1:eb:ea:6a:b6:a5:92:b8:3a:38:e0:2f:ac:8b:
                    86:a6:94:e3:df:0e:ee:93:e3:11:5c:b7:5d:3e:09:
                    83:3f:b2:c6:d0:04:3a:3e:a8:80:75:75:f6:91:02:
                    05:2c:3d:ee:90:f2:6d:ca:ee:52:31:0f:5e:d3:42:
                    7e:c7:50:b4:2c:08:b8:7a:67:20:40:6a:56:17:88:
                    87:06:71:91:4c:f8:93:e1:12:36:3e:6a:49:3a:a7:
                    12:7c:b6:7e:ce:14:ae:fe:5c:ac:1c:ab:fb:71:56:
                    ce:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:90:11:93:C5:B3:EC:7D:76:FE:BB:32:77:6E:67:E9:56:19:24:E9
            X509v3 Authority Key Identifier:
                keyid:B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/DJARk8Wz7H12_rsyd25n6VYZJOk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.125.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:a3:f9:6e:e0:c6:e4:ed:e6:6d:41:12:c9:f7:29:96:21:cf:
         b5:07:55:1c:ca:8f:72:eb:94:19:0f:e2:88:a9:9b:8e:75:fc:
         3b:d7:a2:fd:8c:87:e6:5d:80:fa:c0:7c:75:ff:82:88:a6:f4:
         b4:0c:ae:78:cd:da:80:23:f1:85:ee:c9:09:ab:04:20:bc:7d:
         15:a3:f3:70:b0:c5:3c:b5:1b:37:8d:14:d2:f5:e3:0f:9c:ae:
         79:bb:f7:25:cb:e3:19:e2:37:cb:e3:3b:bd:2f:4c:f6:3b:bf:
         d3:78:2b:ee:a0:cf:f5:f9:3a:30:63:5b:28:a0:c0:20:de:48:
         af:b8:b8:72:e8:ad:1f:ae:1e:b2:a9:f2:94:58:b5:5a:3f:64:
         26:13:bd:5a:16:62:af:16:79:bb:c1:7d:93:d2:8f:75:2b:ea:
         2c:c7:20:30:b6:9d:4d:9c:74:bb:ee:27:5b:d5:7c:bc:79:69:
         3a:af:d0:06:f0:94:c2:99:25:92:86:39:de:21:52:7b:7e:7a:
         57:00:cf:52:26:ed:e3:18:be:34:14:75:18:75:db:4d:f1:d3:
         46:49:fc:65:05:22:ca:82:83:72:d6:94:3f:f4:e4:5a:48:49:
         cb:62:c4:30:fb:19:5f:c7:d3:3c:03:56:64:7a:68:39:ad:d5:
         81:c1:35:95
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBETANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCMzMz
QUVEQTVCODFBNkIyRjU0RkY3MTQ2NjhGOEQ2M0U4N0I4NUExMB4XDTIzMDIyMDAz
MzY1M1oXDTI0MDIxNjA3MzUyMlowMzExMC8GA1UEAxMoMEM5MDExOTNDNUIzRUM3
RDc2RkVCQjMyNzc2RTY3RTk1NjE5MjRFOTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANhiq9/Ebi4JhQhDm83FoIxLl5h2zDGVszC6l75yVuz7yr73EwSc
0bmlmY22TX2BBLDTJ0YvjvurrIFM0K5eekRA/1z1FQuApkyKESa/zhEmFFtKdeD8
JM4+HqgCzbfIOnkPgRJn8n6s09rbC8UatooUjS7ma1U7hoGfYPJccjlmgoJQvvtE
+TxvfYgPLBg7Q/9ciE3dNqHr6mq2pZK4OjjgL6yLhqaU498O7pPjEVy3XT4Jgz+y
xtAEOj6ogHV19pECBSw97pDybcruUjEPXtNCfsdQtCwIuHpnIEBqVheIhwZxkUz4
k+ESNj5qSTqnEny2fs4Urv5crByr+3FWzrcCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQMkBGTxbPsfXb+uzJ3bmfpVhkk6TAfBgNVHSMEGDAWgBSzM67aW4GmsvVP9xRm
j41j6HuFoTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzk1L3N6T3UybHVCcHJMMVRfY1Vaby1OWS1oN2hhRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3N6T3UybHVCcHJMMVRfY1Vaby1OWS1o
N2hhRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zOTUvREpBUms4V3o3SDEyX3JzeWQyNW42VllaSk9rLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEANN9izANBgkqhkiG9w0BAQsFAAOCAQEANKP5buDG5O3mbUESyfcpliHPtQdV
HMqPcuuUGQ/iiKmbjnX8O9ei/YyH5l2A+sB8df+CiKb0tAyueM3agCPxhe7JCasE
ILx9FaPzcLDFPLUbN40U0vXjD5yuebv3JcvjGeI3y+M7vS9M9ju/03gr7qDP9fk6
MGNbKKDAIN5Ir7i4cuitH64esqnylFi1Wj9kJhO9WhZirxZ5u8F9k9KPdSvqLMcg
MLadTZx0u+4nW9V8vHlpOq/QBvCUwpklkoY53iFSe356VwDPUibt4xi+NBR1GHXb
TfHTRkn8ZQUiyoKDctaUP/TkWkhJy2LEMPsZX8fTPANWZHpoOa3VgcE1lQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org