Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/Vulou6lWAbPnbl6u2HjLE1H9f1M.roa
File:                     Vulou6lWAbPnbl6u2HjLE1H9f1M.roa (raw, json)
Hash identifier:          Z0mqJlRpQVGsAyosp5jgmKAotNKu/8Wvntr5UEDRufI=
Subject key identifier:   56:E9:68:BB:A9:56:01:B3:E7:6E:5E:AE:D8:78:CB:13:51:FD:7F:53
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       E1
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/Vulou6lWAbPnbl6u2HjLE1H9f1M.roa
Signing time:             Sun 01 Jan 2023 01:31:06 +0000
ROA not before:           Sun 01 Jan 2023 01:31:06 +0000
ROA not after:            Fri 15 Dec 2023 01:30:02 +0000
asID:                     2527
IP address blocks:        220.211.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 225 (0xe1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Jan  1 01:31:06 2023 GMT
            Not After : Dec 15 01:30:02 2023 GMT
        Subject: CN=56E968BBA95601B3E76E5EAED878CB1351FD7F53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e9:91:99:98:80:d9:69:d6:57:4e:d4:21:52:
                    be:40:08:25:82:af:f3:40:05:02:18:98:1b:4c:42:
                    c1:46:c3:72:90:dd:64:52:d8:63:5c:5a:4a:60:40:
                    f0:a7:c9:02:cb:cd:84:df:90:f4:f5:f8:c2:32:fb:
                    59:a0:75:d1:68:2f:2f:f5:1e:9f:ca:29:61:99:4a:
                    24:d6:6f:12:5f:b5:5a:46:64:24:77:2d:27:cf:19:
                    e4:a0:5a:cb:85:b7:23:9c:1a:25:a0:fc:e0:13:21:
                    b1:1a:2f:9c:01:ee:58:ef:57:fb:6b:d1:31:6b:a8:
                    6b:43:9a:dd:06:95:8b:8a:f5:f5:d0:7e:82:16:c3:
                    44:d2:89:4a:ec:11:4b:1f:ef:19:5f:36:40:54:d7:
                    bb:29:a2:08:3c:2e:22:bf:d3:ee:a6:c0:1c:02:d8:
                    c1:8f:90:eb:54:f7:ef:aa:62:6d:16:f0:01:c1:8e:
                    95:16:ed:e5:a7:3e:fe:4a:5d:1c:0d:5a:23:04:2a:
                    a5:e4:ae:e6:70:62:01:f2:91:64:fc:6e:15:26:f0:
                    41:e6:51:10:5f:56:c8:22:4b:b2:e9:e6:ba:59:e2:
                    c0:18:d6:41:81:6e:23:35:6d:a4:33:1c:6a:39:3c:
                    40:e2:58:65:12:15:cf:14:07:3d:3f:5b:d7:6a:c8:
                    52:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E9:68:BB:A9:56:01:B3:E7:6E:5E:AE:D8:78:CB:13:51:FD:7F:53
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/Vulou6lWAbPnbl6u2HjLE1H9f1M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.211.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a6:fb:c6:a4:15:17:91:a9:f7:99:88:72:8e:04:e7:34:8f:26:
         e9:ea:ef:99:be:e2:82:f7:e1:9d:1e:41:e7:26:68:5e:5f:81:
         28:40:c0:69:9c:76:37:56:57:96:b6:3a:58:a8:5a:40:50:fd:
         07:4b:c3:ab:36:14:00:55:83:2a:1d:a2:13:18:d0:a0:58:77:
         44:1d:bc:0a:b5:17:79:52:f7:3d:0a:67:41:09:94:29:7b:95:
         42:cc:e9:78:5a:03:63:9a:5d:84:52:7b:32:f4:c1:a6:a4:e2:
         1a:93:a0:5d:00:50:c1:53:c6:52:29:c8:dc:11:98:00:b0:0f:
         6d:b4:74:32:44:ac:97:b9:95:a6:b8:03:db:ca:ea:11:b6:ed:
         42:a6:18:78:97:88:c8:56:c2:51:f9:06:34:26:52:15:bc:cf:
         05:5a:4d:61:96:ae:4a:72:96:14:cb:67:05:78:18:e3:ff:d8:
         10:b4:d8:a8:e9:f9:9e:15:47:f3:17:0f:13:5e:94:0c:6f:ce:
         10:06:dc:27:a6:21:cf:bf:5a:4d:3c:38:6d:19:9d:62:ab:ce:
         bb:7d:be:e0:dc:a7:61:09:94:be:cf:94:4d:4a:f6:0c:6c:a4:
         60:21:60:c3:cc:66:7a:b7:81:74:11:ce:96:07:74:88:51:dc:
         03:f7:b5:a3
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1
QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yMzAxMDEw
MTMxMDZaFw0yMzEyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDU2RTk2OEJCQTk1NjAx
QjNFNzZFNUVBRUQ4NzhDQjEzNTFGRDdGNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDY6ZGZmIDZadZXTtQhUr5ACCWCr/NABQIYmBtMQsFGw3KQ3WRS
2GNcWkpgQPCnyQLLzYTfkPT1+MIy+1mgddFoLy/1Hp/KKWGZSiTWbxJftVpGZCR3
LSfPGeSgWsuFtyOcGiWg/OATIbEaL5wB7ljvV/tr0TFrqGtDmt0GlYuK9fXQfoIW
w0TSiUrsEUsf7xlfNkBU17spogg8LiK/0+6mwBwC2MGPkOtU9++qYm0W8AHBjpUW
7eWnPv5KXRwNWiMEKqXkruZwYgHykWT8bhUm8EHmURBfVsgiS7Lp5rpZ4sAY1kGB
biM1baQzHGo5PEDiWGUSFc8UBz0/W9dqyFL7AgMBAAGjggIhMIICHTAdBgNVHQ4E
FgQUVulou6lWAbPnbl6u2HjLE1H9f1MwHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo
3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1
ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr
BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80My9WdWxvdTZsV0FiUG5ibDZ1MkhqTEUxSDlmMU0ucm9hMEYG
CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk
cC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAF
AwMA3NMwDQYJKoZIhvcNAQELBQADggEBAKb7xqQVF5Gp95mIco4E5zSPJunq75m+
4oL34Z0eQecmaF5fgShAwGmcdjdWV5a2OlioWkBQ/QdLw6s2FABVgyodohMY0KBY
d0QdvAq1F3lS9z0KZ0EJlCl7lULM6XhaA2OaXYRSezL0waak4hqToF0AUMFTxlIp
yNwRmACwD220dDJErJe5laa4A9vK6hG27UKmGHiXiMhWwlH5BjQmUhW8zwVaTWGW
rkpylhTLZwV4GOP/2BC02Kjp+Z4VR/MXDxNelAxvzhAG3CemIc+/Wk08OG0ZnWKr
zrt9vuDcp2EJlL7PlE1K9gxspGAhYMPMZnq3gXQRzpYHdIhR3AP3taM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org