Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/yf2t_C4p-39JsW0rdyH_WsZm0gA.roa
File:                     yf2t_C4p-39JsW0rdyH_WsZm0gA.roa (raw, json)
Hash identifier:          /McTwlvCeCYqwV4juFcOEcrkkgmCPEqk1542KHM5N1Q=
Subject key identifier:   C9:FD:AD:FC:2E:29:FB:7F:49:B1:6D:2B:77:21:FF:5A:C6:66:D2:00
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       CE
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/yf2t_C4p-39JsW0rdyH_WsZm0gA.roa
Signing time:             Sun 01 Jan 2023 01:29:38 +0000
ROA not before:           Sun 01 Jan 2023 01:29:38 +0000
ROA not after:            Fri 15 Dec 2023 01:30:02 +0000
asID:                     2527
IP address blocks:        210.139.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 206 (0xce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Jan  1 01:29:38 2023 GMT
            Not After : Dec 15 01:30:02 2023 GMT
        Subject: CN=C9FDADFC2E29FB7F49B16D2B7721FF5AC666D200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e1:e9:01:bd:00:22:85:1a:18:9d:9a:dc:a8:
                    4a:ca:fa:d3:ad:91:1e:3c:7c:d0:50:ff:3f:f5:08:
                    54:f0:80:75:f2:70:c7:b2:e7:31:17:5d:82:0f:da:
                    3a:7f:cf:67:4d:21:d8:1c:8a:c8:87:65:29:c0:e0:
                    2d:aa:fb:5d:98:cc:4d:e4:bd:dd:25:72:65:a3:4c:
                    ac:34:15:76:e9:00:20:05:27:a4:86:8b:11:22:f4:
                    eb:99:67:15:a0:ed:d7:b4:58:36:aa:f0:a8:2f:ad:
                    a2:13:bc:00:11:50:ac:3b:6e:1a:80:39:04:e4:c5:
                    b4:a1:ba:d6:45:62:89:d0:fb:c4:f5:4d:d5:9f:a2:
                    c9:1d:57:21:17:c9:9b:ca:ca:3f:18:26:4e:a8:13:
                    53:34:b4:a6:6b:19:56:e0:43:cb:19:f3:73:b9:ad:
                    5e:95:e4:bb:7d:ad:cc:11:2c:e1:53:27:fa:74:04:
                    93:a3:e3:ec:b1:5d:e5:22:7e:a7:cb:cc:95:a3:7e:
                    bb:ff:fe:5d:49:4f:5e:a1:a4:db:d0:59:48:e5:0e:
                    19:cf:4f:76:7a:2f:4b:6d:ba:fa:59:22:f0:bb:12:
                    d1:5f:7b:f9:6a:24:b6:74:97:82:e9:f1:a3:b1:92:
                    f8:dc:35:17:30:e2:16:79:03:00:3c:19:a0:d3:4e:
                    60:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:FD:AD:FC:2E:29:FB:7F:49:B1:6D:2B:77:21:FF:5A:C6:66:D2:00
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/yf2t_C4p-39JsW0rdyH_WsZm0gA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.139.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         2f:5d:49:45:99:c7:ee:f6:1a:78:bc:37:19:ef:d5:96:f4:70:
         2e:1b:9d:f1:91:64:59:f2:ef:dc:83:39:d2:5e:76:d8:c7:a3:
         7a:99:5e:8b:3b:00:7b:36:6d:b9:83:ac:fb:80:15:e3:08:9f:
         b1:aa:c5:13:41:2c:c2:c7:08:e1:95:45:40:e0:ae:4e:01:36:
         18:8c:37:9d:33:a1:15:d4:4a:a4:99:58:e5:50:b9:76:ab:9b:
         51:31:c1:68:3d:b6:93:b5:61:c8:4a:ea:38:cc:f2:b7:a0:9b:
         36:fd:2f:f7:b2:af:28:12:80:97:e7:7a:30:7b:ff:ff:0c:79:
         ed:28:76:ea:90:ef:20:b5:b8:b6:16:00:de:c9:7c:b2:d8:03:
         2b:bd:db:4e:9f:70:fe:a2:4e:d5:48:82:cd:2d:8b:d5:da:31:
         f4:4e:fb:9f:f9:b3:6e:56:f0:50:c6:e0:cd:19:79:79:e4:ad:
         4d:85:c1:84:f9:9f:01:1a:46:86:d4:0c:0a:d8:73:a0:ea:51:
         7e:e0:83:0b:28:5e:a7:a0:f0:2e:e4:c1:bf:97:34:e1:ca:4a:
         7a:13:02:a2:af:dd:c2:e5:d5:a8:11:c7:f4:1c:9c:52:18:bf:
         33:96:1f:67:b3:9d:54:8f:2b:2b:06:19:00:fa:ed:13:a4:01:
         56:b0:c3:5b
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgICAM4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1
QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yMzAxMDEw
MTI5MzhaFw0yMzEyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM5RkRBREZDMkUyOUZC
N0Y0OUIxNkQyQjc3MjFGRjVBQzY2NkQyMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDl4ekBvQAihRoYnZrcqErK+tOtkR48fNBQ/z/1CFTwgHXycMey
5zEXXYIP2jp/z2dNIdgcisiHZSnA4C2q+12YzE3kvd0lcmWjTKw0FXbpACAFJ6SG
ixEi9OuZZxWg7de0WDaq8KgvraITvAARUKw7bhqAOQTkxbShutZFYonQ+8T1TdWf
oskdVyEXyZvKyj8YJk6oE1M0tKZrGVbgQ8sZ83O5rV6V5Lt9rcwRLOFTJ/p0BJOj
4+yxXeUifqfLzJWjfrv//l1JT16hpNvQWUjlDhnPT3Z6L0ttuvpZIvC7EtFfe/lq
JLZ0l4Lp8aOxkvjcNRcw4hZ5AwA8GaDTTmDHAgMBAAGjggIiMIICHjAdBgNVHQ4E
FgQUyf2t/C4p+39JsW0rdyH/WsZm0gAwHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo
3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1
ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr
BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80My95ZjJ0X0M0cC0zOUpzVzByZHlIX1dzWm0wZ0Eucm9hMEYG
CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk
cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQH0ouAMA0GCSqGSIb3DQEBCwUAA4IBAQAvXUlFmcfu9hp4vDcZ79WW9HAuG53x
kWRZ8u/cgznSXnbYx6N6mV6LOwB7Nm25g6z7gBXjCJ+xqsUTQSzCxwjhlUVA4K5O
ATYYjDedM6EV1EqkmVjlULl2q5tRMcFoPbaTtWHISuo4zPK3oJs2/S/3sq8oEoCX
53owe///DHntKHbqkO8gtbi2FgDeyXyy2AMrvdtOn3D+ok7VSILNLYvV2jH0Tvuf
+bNuVvBQxuDNGXl55K1NhcGE+Z8BGkaG1AwK2HOg6lF+4IMLKF6noPAu5MG/lzTh
ykp6EwKir93C5dWoEcf0HJxSGL8zlh9ns51UjysrBhkA+u0TpAFWsMNb
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org