Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/UnxUuhVV5DUWO8yOavOPKHuoHko.roa
File:                     UnxUuhVV5DUWO8yOavOPKHuoHko.roa (raw, json)
Hash identifier:          Pz0FTDouJbgpEkpv1Y5S9Wk/hCX+9VF4KEpL29lAyNU=
Subject key identifier:   52:7C:54:BA:15:55:E4:35:16:3B:CC:8E:6A:F3:8F:28:7B:A8:1E:4A
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       AA
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/UnxUuhVV5DUWO8yOavOPKHuoHko.roa
Signing time:             Mon 07 Mar 2022 05:19:52 +0000
ROA not before:           Mon 07 Mar 2022 05:19:52 +0000
ROA not after:            Wed 15 Feb 2023 01:30:03 +0000
asID:                     2527
IP address blocks:        219.104.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170 (0xaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Mar  7 05:19:52 2022 GMT
            Not After : Feb 15 01:30:03 2023 GMT
        Subject: CN=527C54BA1555E435163BCC8E6AF38F287BA81E4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c3:e9:50:42:39:61:37:83:e3:0b:4d:dc:75:
                    c5:5f:ed:2a:8a:80:55:b0:c1:d1:9a:30:77:c0:15:
                    7f:50:69:cb:ff:20:ed:16:07:42:69:e1:39:5c:54:
                    ff:d2:73:b0:29:f3:76:11:d1:dd:6a:02:6a:f3:90:
                    bc:ec:82:24:5e:96:f7:b8:bc:57:b1:66:5e:5e:87:
                    08:96:1d:11:1a:a5:88:dc:e1:8a:7c:33:bb:86:6e:
                    fd:e7:7a:2e:4d:7e:4f:97:2f:4f:06:be:f3:73:8b:
                    ce:9a:32:73:c3:99:b3:89:d0:57:30:92:c7:5b:d1:
                    d3:3a:9b:53:ca:24:2b:df:0f:e9:4a:7f:10:5e:ca:
                    4a:f5:b7:0e:c2:b2:70:ee:a3:bb:97:21:8b:4f:a3:
                    ee:f9:4b:c3:e1:63:7e:93:f4:e3:c2:c1:44:ba:c1:
                    5d:0c:bb:8a:d4:66:e2:0e:64:c6:0a:d2:2a:9f:60:
                    c0:ff:71:fd:16:b4:e2:a0:82:72:39:e0:55:65:1a:
                    45:3b:db:fa:e4:f4:03:4e:b9:75:d3:55:fe:82:fc:
                    69:d7:b4:fe:2e:9a:a2:10:70:34:81:0b:d8:f5:d1:
                    1b:62:a2:e6:b6:0c:a2:9f:e8:b6:04:af:e9:d7:ee:
                    e0:80:91:89:90:84:0d:0c:3c:cd:3f:1e:95:54:9c:
                    6a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:7C:54:BA:15:55:E4:35:16:3B:CC:8E:6A:F3:8F:28:7B:A8:1E:4A
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/UnxUuhVV5DUWO8yOavOPKHuoHko.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.104.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ae:d8:b8:69:5e:48:4d:80:c6:c1:ed:8f:86:39:6b:c3:3b:69:
         57:a8:d5:14:5f:af:61:2f:17:0b:6a:59:35:d7:82:8f:43:3a:
         dd:af:fd:9c:84:c8:73:30:2a:6d:20:44:c4:7e:57:a2:f4:b2:
         e6:21:84:10:e2:ef:f0:2b:38:c3:e4:97:e0:50:9c:ab:59:47:
         f2:82:6b:e8:fd:64:a0:07:e6:8f:93:18:aa:5f:1e:0a:25:a9:
         0a:f6:6b:39:53:0f:e3:2a:58:21:bf:1e:f2:5d:bd:86:a3:d1:
         a8:44:61:3e:7d:0a:97:8b:31:cb:3b:9f:39:35:12:68:5f:c3:
         12:0f:f1:93:19:4f:8a:6c:ef:80:87:48:28:27:5f:ef:d3:a3:
         7e:c8:c5:c3:36:6d:b5:10:89:2d:be:08:df:ef:3c:ed:b2:63:
         65:3e:4f:b0:52:a4:9e:7b:ad:a9:9d:5b:67:ea:86:f1:58:dc:
         fc:f4:56:9f:55:c4:cc:c3:7a:5b:07:45:0d:bc:ac:01:5b:e5:
         46:dd:3c:86:9d:ad:93:d2:2d:6d:1a:23:0d:68:fb:88:c2:28:
         60:68:1e:4a:2c:dc:7a:30:b7:db:81:34:19:52:93:54:0f:5b:
         db:6c:c8:b6:31:b9:48:1b:15:c6:f5:39:92:78:42:89:e0:a7:
         77:e3:e9:02
-----BEGIN CERTIFICATE-----
MIIEujCCA6KgAwIBAgICAKowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1
QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yMjAzMDcw
NTE5NTJaFw0yMzAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDUyN0M1NEJBMTU1NUU0
MzUxNjNCQ0M4RTZBRjM4RjI4N0JBODFFNEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCjw+lQQjlhN4PjC03cdcVf7SqKgFWwwdGaMHfAFX9Qacv/IO0W
B0Jp4TlcVP/Sc7Ap83YR0d1qAmrzkLzsgiRelve4vFexZl5ehwiWHREapYjc4Yp8
M7uGbv3nei5Nfk+XL08GvvNzi86aMnPDmbOJ0Fcwksdb0dM6m1PKJCvfD+lKfxBe
ykr1tw7CsnDuo7uXIYtPo+75S8PhY36T9OPCwUS6wV0Mu4rUZuIOZMYK0iqfYMD/
cf0WtOKggnI54FVlGkU72/rk9ANOuXXTVf6C/GnXtP4umqIQcDSBC9j10Rtioua2
DKKf6LYEr+nX7uCAkYmQhA0MPM0/HpVUnGrlAgMBAAGjggHWMIIB0jAdBgNVHQ4E
FgQUUnxUuhVV5DUWO8yOavOPKHuoHkowHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo
3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1
ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF
BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80My9VbnhVdWhWVjVEVVdPOHlPYXZPUEtIdW9Ia28ucm9hMB4GCCsG
AQUFBwEHAQH/BA8wDTALBAIAATAFAwMA22gwDQYJKoZIhvcNAQELBQADggEBAK7Y
uGleSE2AxsHtj4Y5a8M7aVeo1RRfr2EvFwtqWTXXgo9DOt2v/ZyEyHMwKm0gRMR+
V6L0suYhhBDi7/ArOMPkl+BQnKtZR/KCa+j9ZKAH5o+TGKpfHgolqQr2azlTD+Mq
WCG/HvJdvYaj0ahEYT59CpeLMcs7nzk1EmhfwxIP8ZMZT4ps74CHSCgnX+/To37I
xcM2bbUQiS2+CN/vPO2yY2U+T7BSpJ57ramdW2fqhvFY3Pz0Vp9VxMzDelsHRQ28
rAFb5UbdPIadrZPSLW0aIw1o+4jCKGBoHkos3Howt9uBNBlSk1QPW9tsyLYxuUgb
Fcb1OZJ4Qongp3fj6QI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org