Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/LhewPaoBqyGvmzrn5u1anXKjFT0.roa
File:                     LhewPaoBqyGvmzrn5u1anXKjFT0.roa (raw, json)
Hash identifier:          HEJSQjr7qZoHl9+FUY/WrdZCHEbaornznBQV68qBq0c=
Subject key identifier:   2E:17:B0:3D:AA:01:AB:21:AF:9B:3A:E7:E6:ED:5A:9D:72:A3:15:3D
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0372
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/LhewPaoBqyGvmzrn5u1anXKjFT0.roa
Signing time:             Sun 01 May 2022 01:29:35 +0000
ROA not before:           Sun 01 May 2022 01:29:35 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        27.98.128.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 882 (0x372)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:29:35 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=2E17B03DAA01AB21AF9B3AE7E6ED5A9D72A3153D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:64:f5:a7:4b:18:36:b0:6d:4b:70:c6:d8:a9:
                    d4:0f:d1:50:15:d3:b1:b7:d7:e1:01:32:e7:91:b5:
                    18:2a:7c:11:40:83:db:ef:77:c1:49:ee:59:25:1a:
                    12:59:49:ec:95:22:d7:01:c2:6d:c7:5f:09:25:1d:
                    c6:8d:ca:ae:dd:90:b1:42:83:a8:8a:42:39:9b:02:
                    10:ce:f5:72:2a:0e:b5:39:5f:d8:52:9c:a6:7a:98:
                    bc:9c:11:a9:b3:74:67:de:f6:03:7a:15:42:12:68:
                    30:dd:24:f9:8c:e7:c6:bc:91:24:35:02:a0:42:46:
                    66:ce:1a:a2:f8:6f:f7:7f:0e:00:48:58:79:ba:db:
                    1c:66:ce:fe:48:af:b3:d6:5e:47:30:00:cc:37:a3:
                    f0:1b:fe:c4:20:99:c4:6d:e1:e6:4e:10:ef:cf:9b:
                    7a:7d:d7:44:a2:e7:5c:3d:5e:cb:27:fc:af:9f:db:
                    a9:0a:9c:ab:8b:f5:8f:ae:d3:09:9e:7a:73:03:cf:
                    7b:2c:6a:f4:d0:fc:ef:c7:dc:7b:90:0e:3a:d1:b9:
                    e9:a6:49:87:eb:a5:77:99:78:6e:1e:06:e1:cf:93:
                    6c:2f:6c:3c:e5:f7:d5:2e:0c:35:f8:ff:79:ab:b3:
                    0e:87:df:74:e9:c2:da:64:d2:aa:40:a0:8c:a7:f4:
                    83:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:17:B0:3D:AA:01:AB:21:AF:9B:3A:E7:E6:ED:5A:9D:72:A3:15:3D
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/LhewPaoBqyGvmzrn5u1anXKjFT0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.98.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         08:bf:49:f4:62:75:63:58:08:7e:72:96:e4:d6:ba:f8:08:80:
         c1:7c:9e:71:82:55:a3:4f:5e:64:e1:42:8b:8e:b3:80:41:a6:
         76:74:3e:97:10:09:e1:77:61:3c:2f:43:25:b7:d3:94:a8:14:
         f8:0e:10:fb:1e:c4:3e:2e:20:60:12:7a:00:81:ed:c4:7f:3f:
         fc:4a:f2:a4:4a:57:16:ef:51:e8:4b:db:96:55:d2:59:55:7a:
         ad:6b:89:07:21:27:df:e7:05:42:29:2a:eb:1a:3b:fc:1a:b4:
         60:60:14:b9:6c:ac:19:05:65:0b:cb:4e:ca:6b:bd:f6:56:e5:
         e6:30:af:f3:19:53:85:04:02:62:53:8c:57:5c:01:36:93:bc:
         ad:87:6c:cd:b2:d2:6f:e8:66:93:95:e6:2f:56:4a:36:46:25:
         51:eb:6b:cb:6e:2c:5a:00:63:d9:2f:c6:03:f1:85:10:fc:62:
         a4:ad:f0:88:85:f0:ef:a1:c5:0e:0b:5e:13:23:1e:6c:89:1e:
         7d:8e:5d:cd:09:ab:f9:53:48:21:58:f5:de:af:cb:e9:59:10:
         3e:76:3d:53:f7:dd:22:89:4c:fb:51:2c:f5:8a:e1:b7:34:ce:
         cd:e2:f8:b0:27:7a:0e:5a:da:d5:0e:41:46:96:af:ae:3a:6f:
         6a:da:68:71
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA3IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yMjA1MDEw
MTI5MzVaFw0yMzA0MjcwOTUyMzRaMDMxMTAvBgNVBAMTKDJFMTdCMDNEQUEwMUFC
MjFBRjlCM0FFN0U2RUQ1QTlENzJBMzE1M0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFZPWnSxg2sG1LcMbYqdQP0VAV07G31+EBMueRtRgqfBFAg9vv
d8FJ7lklGhJZSeyVItcBwm3HXwklHcaNyq7dkLFCg6iKQjmbAhDO9XIqDrU5X9hS
nKZ6mLycEamzdGfe9gN6FUISaDDdJPmM58a8kSQ1AqBCRmbOGqL4b/d/DgBIWHm6
2xxmzv5Ir7PWXkcwAMw3o/Ab/sQgmcRt4eZOEO/Pm3p910Si51w9Xssn/K+f26kK
nKuL9Y+u0wmeenMDz3ssavTQ/O/H3HuQDjrRuemmSYfrpXeZeG4eBuHPk2wvbDzl
99UuDDX4/3mrsw6H33Tpwtpk0qpAoIyn9IMbAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQULhewPaoBqyGvmzrn5u1anXKjFT0wHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTQ1L0xoZXdQYW9CcXlHdm16cm41dTFhblhLakZUMC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAYbYoAwDQYJKoZIhvcNAQELBQADggEBAAi/SfRidWNYCH5yluTWuvgIgMF8
nnGCVaNPXmThQouOs4BBpnZ0PpcQCeF3YTwvQyW305SoFPgOEPsexD4uIGASegCB
7cR/P/xK8qRKVxbvUehL25ZV0llVeq1riQchJ9/nBUIpKusaO/watGBgFLlsrBkF
ZQvLTsprvfZW5eYwr/MZU4UEAmJTjFdcATaTvK2HbM2y0m/oZpOV5i9WSjZGJVHr
a8tuLFoAY9kvxgPxhRD8YqSt8IiF8O+hxQ4LXhMjHmyJHn2OXc0Jq/lTSCFY9d6v
y+lZED52PVP33SKJTPtRLPWK4bc0zs3i+LAneg5a2tUOQUaWr646b2raaHE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org