Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/XgLlsWC-xrwGbV525NMz0l7hla4.roa
File:                     XgLlsWC-xrwGbV525NMz0l7hla4.roa (raw, json)
Hash identifier:          JPBWIzw9u/WDqFemHrrFFIztx5z5yXkCRaA7MDK5hf4=
Subject key identifier:   5E:02:E5:B1:60:BE:C6:BC:06:6D:5E:76:E4:D3:33:D2:5E:E1:95:AE
Certificate issuer:       /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Certificate serial:       09
Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/XgLlsWC-xrwGbV525NMz0l7hla4.roa
Signing time:             Thu 13 Oct 2022 06:48:05 +0000
ROA not before:           Thu 13 Oct 2022 06:48:05 +0000
ROA not after:            Fri 13 Oct 2023 06:37:32 +0000
asID:                     10000
IP address blocks:        180.214.224.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
        Validity
            Not Before: Oct 13 06:48:05 2022 GMT
            Not After : Oct 13 06:37:32 2023 GMT
        Subject: CN=5E02E5B160BEC6BC066D5E76E4D333D25EE195AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:08:14:07:48:f7:ee:30:de:ba:69:54:6a:55:
                    26:51:e9:7b:47:fa:94:9a:7d:1e:76:54:6f:3e:b2:
                    d8:f2:f9:34:eb:42:37:18:37:9e:fe:1d:ea:a0:9c:
                    86:6b:2a:01:52:4e:57:29:5e:4c:b6:a3:66:4a:d4:
                    74:f0:a4:23:77:8a:9f:89:e4:e5:a3:76:a6:0a:4b:
                    02:5e:2b:6b:24:1b:89:78:98:05:88:7e:fc:f1:e4:
                    a4:15:5d:3b:fb:da:aa:87:70:91:de:66:58:1b:ae:
                    c9:11:e8:cf:cd:fa:2e:2b:fa:66:24:c7:47:44:2a:
                    2b:c6:83:7d:37:da:9c:4e:b6:ff:7d:a9:e3:e7:71:
                    02:d6:64:5c:0a:d9:20:61:0e:85:56:e6:61:5f:ba:
                    81:0f:1f:1c:73:61:71:f6:fc:dd:7b:a5:95:14:8c:
                    77:5e:70:6a:50:5a:3a:d6:e8:0e:7f:1f:2c:df:21:
                    0b:3a:7e:45:e0:a8:43:76:53:ac:47:34:b5:e1:38:
                    67:1a:5c:f8:78:23:d8:ae:a8:74:3f:13:ef:31:73:
                    e0:e8:8b:3e:1e:a3:90:7f:37:38:47:04:f9:8c:18:
                    f8:e3:c5:88:b0:ad:50:ee:a7:3f:72:85:6d:65:a9:
                    8a:5a:d0:48:82:6a:24:88:ff:b6:59:d4:b8:4e:0a:
                    df:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:02:E5:B1:60:BE:C6:BC:06:6D:5E:76:E4:D3:33:D2:5E:E1:95:AE
            X509v3 Authority Key Identifier:
                keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/XgLlsWC-xrwGbV525NMz0l7hla4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.214.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7d:d6:3f:8e:a1:cb:f0:a8:8d:52:2c:92:e2:36:d6:e7:f9:27:
         84:2d:84:da:ee:74:90:0f:0a:e0:29:80:50:65:a5:f4:3d:e9:
         86:c0:5b:c1:90:1a:69:eb:53:9f:9b:fb:41:70:9a:29:e0:8b:
         7f:35:9d:a8:42:2a:57:b0:61:07:17:9b:e3:78:f9:83:5b:54:
         59:90:57:eb:31:b4:ac:52:56:39:1e:e0:0c:45:5e:44:15:b1:
         0e:16:bf:a8:c0:b2:74:3c:12:bd:3f:fb:bb:b8:ed:f0:33:fe:
         56:69:30:56:36:a0:e6:a2:f0:ab:c6:e6:9e:83:5c:ac:0b:80:
         8c:81:54:50:da:b0:cb:70:f3:0e:b0:01:d2:6d:e0:e5:1a:7e:
         8e:79:25:f3:04:f9:bb:f6:92:42:08:b1:8d:e9:f8:e4:23:2b:
         46:b7:d1:d4:ff:86:8f:f8:22:36:15:f3:0d:5d:d7:7b:2a:09:
         03:2c:23:0f:09:18:03:c0:ee:5d:11:d5:2d:31:6e:ff:09:29:
         54:51:2c:f0:ca:70:a7:ce:59:e2:d0:12:f9:0b:c9:49:64:e1:
         fb:d0:81:9b:9c:b4:ae:ca:81:75:42:9e:3c:d5:9e:44:e4:d8:
         d0:68:1a:06:3e:10:3b:4b:2e:1c:14:1a:5a:0f:97:57:8a:c5:
         a7:0d:e2:74
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBCTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBRDQ3
NDFGMDM0OUZCQzE1QTcwOEUyOEEyQ0UzMDc5MDZDQUM1REUwMB4XDTIyMTAxMzA2
NDgwNVoXDTIzMTAxMzA2MzczMlowMzExMC8GA1UEAxMoNUUwMkU1QjE2MEJFQzZC
QzA2NkQ1RTc2RTREMzMzRDI1RUUxOTVBRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALQIFAdI9+4w3rppVGpVJlHpe0f6lJp9HnZUbz6y2PL5NOtCNxg3
nv4d6qCchmsqAVJOVyleTLajZkrUdPCkI3eKn4nk5aN2pgpLAl4rayQbiXiYBYh+
/PHkpBVdO/vaqodwkd5mWBuuyRHoz836Liv6ZiTHR0QqK8aDfTfanE62/32p4+dx
AtZkXArZIGEOhVbmYV+6gQ8fHHNhcfb83XullRSMd15walBaOtboDn8fLN8hCzp+
ReCoQ3ZTrEc0teE4Zxpc+Hgj2K6odD8T7zFz4OiLPh6jkH83OEcE+YwY+OPFiLCt
UO6nP3KFbWWpilrQSIJqJIj/tlnUuE4K318CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBReAuWxYL7GvAZtXnbk0zPSXuGVrjAfBgNVHSMEGDAWgBStR0HwNJ+8FacI4oos
4weQbKxd4DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDU0L3JVZEI4RFNmdkJXbkNPS0tMT01Ia0d5c1hlQS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3JVZEI4RFNmdkJXbkNPS0tMT01Ia0d5
c1hlQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80NTQvWGdMbHNXQy14cndHYlY1MjVOTXowbDdobGE0LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA7TW4DANBgkqhkiG9w0BAQsFAAOCAQEAfdY/jqHL8KiNUiyS4jbW5/knhC2E
2u50kA8K4CmAUGWl9D3phsBbwZAaaetTn5v7QXCaKeCLfzWdqEIqV7BhBxeb43j5
g1tUWZBX6zG0rFJWOR7gDEVeRBWxDha/qMCydDwSvT/7u7jt8DP+VmkwVjag5qLw
q8bmnoNcrAuAjIFUUNqwy3DzDrAB0m3g5Rp+jnkl8wT5u/aSQgixjen45CMrRrfR
1P+Gj/giNhXzDV3XeyoJAywjDwkYA8DuXRHVLTFu/wkpVFEs8Mpwp85Z4tAS+QvJ
SWTh+9CBm5y0rsqBdUKePNWeROTY0GgaBj4QO0suHBQaWg+XV4rFpw3idA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org