Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/7g2u_J84sfnr9ydHSoPrCsGB8pI.roa
File:                     7g2u_J84sfnr9ydHSoPrCsGB8pI.roa (raw, json)
Hash identifier:          EwCIaknOGc71CZyEyx3zCsXwrLLvy6pay+wle2nt9ZY=
Subject key identifier:   EE:0D:AE:FC:9F:38:B1:F9:EB:F7:27:47:4A:83:EB:0A:C1:81:F2:92
Certificate issuer:       /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial:       3E
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/7g2u_J84sfnr9ydHSoPrCsGB8pI.roa
Signing time:             Tue 01 Feb 2022 01:31:50 +0000
ROA not before:           Tue 01 Feb 2022 01:31:50 +0000
ROA not after:            Sun 15 Jan 2023 01:30:03 +0000
asID:                     2527
IP address blocks:        131.213.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
        Validity
            Not Before: Feb  1 01:31:50 2022 GMT
            Not After : Jan 15 01:30:03 2023 GMT
        Subject: CN=EE0DAEFC9F38B1F9EBF727474A83EB0AC181F292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cc:f9:51:0d:ce:07:96:2d:de:c1:48:a6:09:
                    78:99:75:22:49:ee:3d:59:ec:01:be:92:35:f0:18:
                    d8:1e:98:94:c3:dc:62:db:9c:e4:77:c6:85:ac:30:
                    91:87:78:33:70:8f:24:b7:9b:ea:91:a9:56:44:e6:
                    74:35:1f:15:c3:06:4f:76:23:2b:73:b0:3e:98:89:
                    a0:c9:1f:e1:3d:a9:79:53:0b:ab:ef:1e:b2:9f:de:
                    da:c8:7a:15:e9:b0:62:c3:cb:56:9c:ec:c1:0f:20:
                    d3:f1:52:72:b1:dd:54:ab:89:b5:40:37:d6:94:a5:
                    87:40:35:92:eb:f0:50:09:97:a3:1e:c7:f7:59:9b:
                    99:01:0e:66:c1:54:69:ba:20:c8:c7:ca:03:f3:3d:
                    86:cb:37:f4:1a:43:29:14:95:0b:c2:2e:49:bb:fd:
                    18:8b:47:54:d5:52:45:6e:0b:a1:81:42:73:f4:e7:
                    05:12:ed:b0:96:05:d1:c4:34:85:db:e5:23:fd:26:
                    d5:9e:a5:46:59:cf:16:ea:1e:d4:55:68:71:aa:ee:
                    30:7f:fc:82:75:86:f4:40:2e:17:f8:c8:d3:b5:fb:
                    f6:c7:72:26:64:8c:c5:c9:c6:81:6f:10:e3:76:ad:
                    0b:64:62:9d:97:67:8d:bb:54:99:64:9c:99:e6:f8:
                    55:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:0D:AE:FC:9F:38:B1:F9:EB:F7:27:47:4A:83:EB:0A:C1:81:F2:92
            X509v3 Authority Key Identifier:
                keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/7g2u_J84sfnr9ydHSoPrCsGB8pI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.213.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         71:44:19:85:01:a5:ec:b3:7a:ea:70:b0:b4:92:bf:e6:71:19:
         3c:ca:5c:4b:8a:64:a0:04:ab:dc:f4:db:34:54:53:f8:3f:dc:
         ea:ac:91:85:03:2e:4d:92:ab:05:ab:33:ff:f4:cf:59:89:15:
         d7:9b:d4:c1:14:64:a9:e9:34:a6:65:4b:1f:ee:06:ec:26:cf:
         f3:2e:e6:b2:7b:82:39:aa:57:7d:08:43:49:2e:92:bc:77:cc:
         25:80:93:9c:29:6b:75:8e:0d:d0:63:25:13:cb:ab:9c:8a:21:
         78:9f:fb:da:89:3d:93:2c:fc:20:86:6f:24:ea:d8:bd:9a:45:
         b5:7c:22:49:a3:dc:02:e7:e7:80:b1:b3:18:4b:80:72:10:63:
         56:48:1a:d9:99:e2:47:49:2c:60:f8:31:c4:c1:12:1d:55:90:
         06:a5:69:90:2f:7b:50:3b:61:a2:aa:4b:4d:33:d5:fb:77:b7:
         14:05:00:8d:fe:13:5e:ab:da:e5:5c:d4:05:a2:d0:4d:bc:f4:
         52:d5:49:8c:3e:44:32:ba:b9:ab:4a:38:74:e9:8e:7d:e4:5d:
         62:e1:77:d2:5e:dc:de:11:bb:9f:09:b9:2a:00:8d:37:57:29:
         a0:85:11:87:73:9f:48:d9:93:6d:dc:5c:e5:ee:ff:43:23:ca:
         4b:85:d5:ff
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIBPjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwNENB
N0YzNUFGMUE4RjUyNTc1QTlGRUZGRjIxQzRBNDcwODBEREZBMB4XDTIyMDIwMTAx
MzE1MFoXDTIzMDExNTAxMzAwM1owMzExMC8GA1UEAxMoRUUwREFFRkM5RjM4QjFG
OUVCRjcyNzQ3NEE4M0VCMEFDMTgxRjI5MjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMvM+VENzgeWLd7BSKYJeJl1IknuPVnsAb6SNfAY2B6YlMPcYtuc
5HfGhawwkYd4M3CPJLeb6pGpVkTmdDUfFcMGT3YjK3OwPpiJoMkf4T2peVMLq+8e
sp/e2sh6FemwYsPLVpzswQ8g0/FScrHdVKuJtUA31pSlh0A1kuvwUAmXox7H91mb
mQEOZsFUabogyMfKA/M9hss39BpDKRSVC8IuSbv9GItHVNVSRW4LoYFCc/TnBRLt
sJYF0cQ0hdvlI/0m1Z6lRlnPFuoe1FVocaruMH/8gnWG9EAuF/jI07X79sdyJmSM
xcnGgW8Q43atC2RinZdnjbtUmWScmeb4VeMCAwEAAaOCAdYwggHSMB0GA1UdDgQW
BBTuDa78nzix+ev3J0dKg+sKwYHykjAfBgNVHSMEGDAWgBQEyn81rxqPUldan+//
IcSkcIDd+jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDMvQk1wX05hOGFqMUpYV3Bfdl95SEVwSENBM2ZvLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvQk1wX05hOGFqMUpYV3Bfdl95SEVwSENB
M2ZvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUF
BzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzLzdnMnVfSjg0c2Zucjl5ZEhTb1ByQ3NHQjhwSS5yb2EwHgYIKwYB
BQUHAQcBAf8EDzANMAsEAgABMAUDAwCD1TANBgkqhkiG9w0BAQsFAAOCAQEAcUQZ
hQGl7LN66nCwtJK/5nEZPMpcS4pkoASr3PTbNFRT+D/c6qyRhQMuTZKrBasz//TP
WYkV15vUwRRkqek0pmVLH+4G7CbP8y7msnuCOapXfQhDSS6SvHfMJYCTnClrdY4N
0GMlE8urnIoheJ/72ok9kyz8IIZvJOrYvZpFtXwiSaPcAufngLGzGEuAchBjVkga
2ZniR0ksYPgxxMESHVWQBqVpkC97UDthoqpLTTPV+3e3FAUAjf4TXqva5VzUBaLQ
Tbz0UtVJjD5EMrq5q0o4dOmOfeRdYuF30l7c3hG7nwm5KgCNN1cpoIURh3OfSNmT
bdxc5e7/QyPKS4XV/w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org