Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/21bYaez-xHv51neK-WLU9jzNfFg.roa
File:                     21bYaez-xHv51neK-WLU9jzNfFg.roa (raw, json)
Hash identifier:          GLPzcywBcoOVnRBc4FPQaLhJHHTW0iuenwIQT0/+ELs=
Subject key identifier:   DB:56:D8:69:EC:FE:C4:7B:F9:D6:77:8A:F9:62:D4:F6:3C:CD:7C:58
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       56
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/21bYaez-xHv51neK-WLU9jzNfFg.roa
Signing time:             Tue 23 Feb 2021 08:57:39 +0000
ROA not before:           Tue 23 Feb 2021 08:57:39 +0000
ROA not after:            Tue 15 Feb 2022 01:30:02 +0000
asID:                     2527
IP address blocks:        59.146.0.0/15 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Feb 23 08:57:39 2021 GMT
            Not After : Feb 15 01:30:02 2022 GMT
        Subject: CN=DB56D869ECFEC47BF9D6778AF962D4F63CCD7C58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1c:f1:9e:53:37:37:d4:7c:98:e1:83:52:ec:
                    b3:19:d0:da:72:3a:08:80:73:a1:c2:f8:8b:43:60:
                    bd:9b:20:12:26:79:8d:1b:89:ab:b7:63:de:62:49:
                    b1:58:72:35:ae:8a:7e:8f:3a:24:64:d2:cc:f5:3d:
                    b7:0d:25:d2:8f:bd:7e:19:af:c5:bd:4f:8c:76:d2:
                    bd:4f:5e:3b:ed:6f:6e:cb:46:d2:38:96:b4:84:65:
                    8e:dd:0d:76:55:40:f1:6c:58:0c:76:d5:11:37:57:
                    c5:d6:fb:2a:d3:56:9c:fc:de:0f:bc:e1:8d:85:a1:
                    98:14:13:92:46:f8:2e:5f:74:89:c9:06:4c:fe:f9:
                    2d:f4:3f:d4:06:73:f8:63:0c:f2:8e:3e:4c:79:f5:
                    48:64:ca:b9:3f:64:e3:d3:76:b8:f9:10:0a:44:23:
                    c5:57:96:1c:66:6e:2d:b9:94:f8:12:76:e9:c1:ce:
                    45:28:61:1b:35:29:48:55:21:84:5b:6c:44:b2:83:
                    47:02:d5:3e:21:d5:58:6b:04:a8:ad:7a:1d:84:37:
                    a1:f6:a8:d6:e0:b0:a5:5c:87:5d:bc:c1:4e:f7:7a:
                    3e:87:49:0b:a7:09:85:f7:e1:e1:ea:36:85:d5:b1:
                    dd:7f:2b:e2:22:b0:6b:17:1b:ed:f6:e1:83:24:56:
                    50:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:56:D8:69:EC:FE:C4:7B:F9:D6:77:8A:F9:62:D4:F6:3C:CD:7C:58
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/21bYaez-xHv51neK-WLU9jzNfFg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.146.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         33:41:ce:0a:ec:71:af:00:46:e7:64:c8:e2:43:bb:52:3f:40:
         ba:21:f8:da:3e:15:16:8b:15:70:53:91:d1:ea:66:5c:5e:d9:
         0a:e9:69:27:5d:b5:f8:22:a2:f3:13:14:2f:13:02:41:08:e0:
         bc:b2:b3:43:92:af:c8:f6:8c:76:34:6f:8b:37:50:1e:f9:69:
         b5:8c:93:0e:6f:25:1b:54:f8:92:be:be:e5:0e:dd:79:9f:56:
         5b:87:3d:f1:90:83:de:73:8b:64:18:25:da:eb:6b:70:3d:01:
         83:0a:95:7c:dc:a9:ef:27:fa:e0:8e:44:ab:54:d3:ce:6b:26:
         e6:43:77:fd:26:fc:a8:cb:93:e2:9c:d2:76:be:b1:4d:07:3f:
         7e:cd:e3:fc:de:ca:7d:5b:2f:8a:85:9b:d5:ec:a8:f9:ab:d5:
         5b:a7:c3:c4:63:ca:09:06:ad:ae:90:ab:7f:91:5c:0c:39:75:
         35:d6:a3:9f:50:95:c7:61:ef:75:26:62:2c:02:bc:ba:f0:a7:
         45:cc:de:4f:f8:27:ac:e5:8f:da:47:f4:35:df:fb:84:c5:a9:
         20:94:4d:f6:b1:dc:df:00:61:cd:1c:92:34:c5:38:5e:13:c3:
         89:b6:8c:bd:04:28:2a:c1:b7:0b:22:e2:40:fd:df:76:0c:4c:
         34:c2:48:f3
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIBVjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwOTVB
MTgyRkExOEQ0NTgyMzMyODRBQThEQzg4QkQwNzVFNUQ3MDJEMB4XDTIxMDIyMzA4
NTczOVoXDTIyMDIxNTAxMzAwMlowMzExMC8GA1UEAxMoREI1NkQ4NjlFQ0ZFQzQ3
QkY5RDY3NzhBRjk2MkQ0RjYzQ0NEN0M1ODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALwc8Z5TNzfUfJjhg1LssxnQ2nI6CIBzocL4i0NgvZsgEiZ5jRuJ
q7dj3mJJsVhyNa6Kfo86JGTSzPU9tw0l0o+9fhmvxb1PjHbSvU9eO+1vbstG0jiW
tIRljt0NdlVA8WxYDHbVETdXxdb7KtNWnPzeD7zhjYWhmBQTkkb4Ll90ickGTP75
LfQ/1AZz+GMM8o4+THn1SGTKuT9k49N2uPkQCkQjxVeWHGZuLbmU+BJ26cHORShh
GzUpSFUhhFtsRLKDRwLVPiHVWGsEqK16HYQ3ofao1uCwpVyHXbzBTvd6PodJC6cJ
hffh4eo2hdWx3X8r4iKwaxcb7fbhgyRWUA8CAwEAAaOCAdYwggHSMB0GA1UdDgQW
BBTbVthp7P7Ee/nWd4r5YtT2PM18WDAfBgNVHSMEGDAWgBQJWhgvoY1FgjMoSqjc
iL0HXl1wLTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDMvQ1ZvWUw2R05SWUl6S0VxbzNJaTlCMTVkY0MwLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvQ1ZvWUw2R05SWUl6S0VxbzNJaTlCMTVk
Y0MwLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUF
BzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzLzIxYllhZXoteEh2NTFuZUstV0xVOWp6TmZGZy5yb2EwHgYIKwYB
BQUHAQcBAf8EDzANMAsEAgABMAUDAwE7kjANBgkqhkiG9w0BAQsFAAOCAQEAM0HO
CuxxrwBG52TI4kO7Uj9AuiH42j4VFosVcFOR0epmXF7ZCulpJ121+CKi8xMULxMC
QQjgvLKzQ5KvyPaMdjRvizdQHvlptYyTDm8lG1T4kr6+5Q7deZ9WW4c98ZCD3nOL
ZBgl2utrcD0BgwqVfNyp7yf64I5Eq1TTzmsm5kN3/Sb8qMuT4pzSdr6xTQc/fs3j
/N7KfVsvioWb1eyo+avVW6fDxGPKCQatrpCrf5FcDDl1Ndajn1CVx2HvdSZiLAK8
uvCnRczeT/gnrOWP2kf0Nd/7hMWpIJRN9rHc3wBhzRySNMU4XhPDibaMvQQoKsG3
CyLiQP3fdgxMNMJI8w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org