Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/e2reEqZr4Zd0Sj66mzFICek5YR0.roa
File:                     e2reEqZr4Zd0Sj66mzFICek5YR0.roa (raw, json)
Hash identifier:          NRBzfYTHYVwaMGB2Va7rqaMiZJkVsVJP26k90HogUzM=
Subject key identifier:   7B:6A:DE:12:A6:6B:E1:97:74:4A:3E:BA:9B:31:48:09:E9:39:61:1D
Certificate issuer:       /CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
Certificate serial:       3E
Authority key identifier: 5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/e2reEqZr4Zd0Sj66mzFICek5YR0.roa
Signing time:             Thu 01 Sep 2022 01:28:34 +0000
ROA not before:           Thu 01 Sep 2022 01:28:34 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     55900
IP address blocks:        180.131.224.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
        Validity
            Not Before: Sep  1 01:28:34 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=7B6ADE12A66BE197744A3EBA9B314809E939611D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c9:74:47:2f:fd:34:6b:c4:b6:63:08:0a:9d:
                    24:b4:8f:37:d0:db:55:20:a7:d5:3a:45:cf:47:a1:
                    db:9b:7f:17:4e:6c:91:9c:9a:16:9c:6e:e4:b1:f9:
                    85:2e:81:c2:fb:85:d6:d5:d9:a0:fb:53:42:2e:64:
                    0e:86:bb:c7:fe:b9:5b:8f:03:a7:f4:c6:92:a1:70:
                    3f:24:9c:86:a8:d8:e6:5d:8f:a5:cb:88:c5:b9:cd:
                    8c:ad:35:7d:b6:ac:b5:5d:45:1c:9d:b9:69:46:c5:
                    c3:d4:e0:03:97:30:67:14:2b:06:2f:49:a5:5d:46:
                    49:cd:23:59:d4:4c:77:df:78:80:f9:ea:d5:b2:1a:
                    bf:13:fd:f0:1a:81:1e:ec:9a:a0:d2:3a:72:4d:61:
                    1b:86:50:dd:99:1a:db:49:fe:8e:9e:e9:5d:77:e2:
                    c0:9f:80:89:ed:67:c8:2c:c6:7e:18:dd:39:61:26:
                    a1:0a:c3:09:58:57:84:66:92:3c:e5:a1:3e:9f:aa:
                    92:91:cd:78:5e:11:9b:d0:ff:b9:dd:6e:dc:60:e8:
                    b3:c0:3c:fa:40:16:e5:3c:d1:95:8d:62:59:09:74:
                    ff:54:20:1a:1f:8e:9b:6f:9b:2c:8a:23:78:5c:f3:
                    bf:f5:c6:7c:8a:13:0c:00:c4:6c:ab:e5:43:ae:28:
                    5b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:6A:DE:12:A6:6B:E1:97:74:4A:3E:BA:9B:31:48:09:E9:39:61:1D
            X509v3 Authority Key Identifier:
                keyid:5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/e2reEqZr4Zd0Sj66mzFICek5YR0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.131.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c9:33:7c:f8:0d:f1:4d:e6:c7:7c:1b:f4:36:a1:0b:0f:5d:8c:
         1d:ff:36:e0:80:c5:4a:6b:ff:81:59:b8:14:e7:b8:b5:6b:30:
         ad:59:eb:cf:19:b3:e8:e0:f2:d3:9e:f0:ff:88:6e:f6:30:6f:
         3e:25:68:8d:47:25:c2:a1:e5:60:4d:1c:a3:e3:46:f0:85:56:
         a7:b5:29:03:39:22:65:23:8d:df:ae:c2:00:b9:09:c4:65:6e:
         5b:50:fc:b6:39:7f:1d:33:76:6e:10:98:b5:bd:f4:23:b9:15:
         b8:a4:8a:9b:76:9a:54:50:33:63:28:4a:35:d7:ca:3d:44:65:
         19:37:3e:3e:47:27:cb:15:ca:ff:91:d7:8d:9b:f8:36:4a:17:
         ba:53:c3:92:3f:c9:3b:47:67:d5:4b:c1:19:63:6b:8a:61:5b:
         73:ce:68:eb:0d:c1:fe:ab:05:56:a5:bd:c1:cc:5f:d4:b4:53:
         e7:78:b8:ca:11:94:1a:e5:91:eb:d9:4e:29:eb:0f:7e:71:6d:
         ef:8f:4d:0e:d8:e1:3a:27:a2:5b:ed:2f:b4:53:06:1a:2d:ab:
         a9:b4:c7:81:7c:66:4d:d2:da:79:2c:08:cd:58:d6:a3:d8:5f:
         98:82:a5:88:63:f6:f5:50:86:4d:fa:4a:5f:d8:4e:49:69:dc:
         4d:76:1c:11
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBPjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1QjBE
NzJGOUY0MzBCN0Q0MDAzMzc1RjEwRDUwMjVCOUU1QzAwNDM3MB4XDTIyMDkwMTAx
MjgzNFoXDTIzMDgxNTAxMzAwM1owMzExMC8GA1UEAxMoN0I2QURFMTJBNjZCRTE5
Nzc0NEEzRUJBOUIzMTQ4MDlFOTM5NjExRDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKfJdEcv/TRrxLZjCAqdJLSPN9DbVSCn1TpFz0eh25t/F05skZya
Fpxu5LH5hS6BwvuF1tXZoPtTQi5kDoa7x/65W48Dp/TGkqFwPySchqjY5l2PpcuI
xbnNjK01fbastV1FHJ25aUbFw9TgA5cwZxQrBi9JpV1GSc0jWdRMd994gPnq1bIa
vxP98BqBHuyaoNI6ck1hG4ZQ3Zka20n+jp7pXXfiwJ+Aie1nyCzGfhjdOWEmoQrD
CVhXhGaSPOWhPp+qkpHNeF4Rm9D/ud1u3GDos8A8+kAW5TzRlY1iWQl0/1QgGh+O
m2+bLIojeFzzv/XGfIoTDADEbKvlQ64oW/0CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBR7at4Spmvhl3RKPrqbMUgJ6TlhHTAfBgNVHSMEGDAWgBRbDXL59DC31AAzdfEN
UCW55cAENzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTM5L1d3MXktZlF3dDlRQU0zWHhEVkFsdWVYQUJEYy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1d3MXktZlF3dDlRQU0zWHhEVkFsdWVY
QUJEYy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC81MzkvZTJyZUVxWnI0WmQwU2o2Nm16RklDZWs1WVIwLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBbSD4DANBgkqhkiG9w0BAQsFAAOCAQEAyTN8+A3xTebHfBv0NqELD12MHf82
4IDFSmv/gVm4FOe4tWswrVnrzxmz6ODy057w/4hu9jBvPiVojUclwqHlYE0co+NG
8IVWp7UpAzkiZSON367CALkJxGVuW1D8tjl/HTN2bhCYtb30I7kVuKSKm3aaVFAz
YyhKNdfKPURlGTc+PkcnyxXK/5HXjZv4NkoXulPDkj/JO0dn1UvBGWNrimFbc85o
6w3B/qsFVqW9wcxf1LRT53i4yhGUGuWR69lOKesPfnFt749NDtjhOieiW+0vtFMG
Gi2rqbTHgXxmTdLaeSwIzVjWo9hfmIKliGP29VCGTfpKX9hOSWncTXYcEQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org