Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/eCZKAm0fouPAF3KFdCFBaZjs3nQ.roa
File:                     eCZKAm0fouPAF3KFdCFBaZjs3nQ.roa (raw, json)
Hash identifier:          YV0ao8CqO6TCHX1hq4D3kyACD63pVYBjZfaPirzahOY=
Subject key identifier:   78:26:4A:02:6D:1F:A2:E3:C0:17:72:85:74:21:41:69:98:EC:DE:74
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       039F
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/eCZKAm0fouPAF3KFdCFBaZjs3nQ.roa
Signing time:             Sun 01 May 2022 01:32:00 +0000
ROA not before:           Sun 01 May 2022 01:32:00 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        112.137.192.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 927 (0x39f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:32:00 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=78264A026D1FA2E3C01772857421416998ECDE74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:36:00:7f:6a:a4:36:3a:e0:b5:60:cc:b4:b2:
                    73:f1:54:d5:c1:3e:54:fd:66:24:b0:70:ec:28:52:
                    86:67:24:ab:b0:28:4d:51:25:6f:f9:a0:da:06:98:
                    4f:6e:51:ff:d2:8d:16:08:cd:e6:bb:4a:62:58:40:
                    6b:d5:4d:c5:02:4c:74:1e:70:af:d0:f5:86:fa:cf:
                    eb:25:89:df:07:78:fb:20:d1:f0:81:b6:e4:38:a1:
                    8c:35:a1:cf:6c:26:b5:00:00:27:52:24:52:53:5a:
                    61:bd:94:4f:11:44:55:d0:91:be:db:09:98:2f:e2:
                    73:63:9a:35:1d:91:fb:ac:19:2f:23:c2:45:b2:ea:
                    3e:0f:81:e8:9f:f0:9d:6c:59:29:b8:a4:54:a4:d2:
                    ce:05:74:d7:0e:66:a5:b3:41:82:3e:c8:64:3c:76:
                    c3:01:fb:d5:72:87:3b:8f:03:4a:c1:8d:a7:4a:44:
                    dc:d2:7f:72:01:8e:84:53:fa:bc:8a:d5:c9:c7:5f:
                    2f:e1:1b:e1:69:ad:cb:5e:5a:3a:57:18:f0:7a:41:
                    fe:77:b3:bf:dd:a2:4f:b0:73:79:1c:4e:e8:6a:ee:
                    3f:4f:23:be:62:12:67:b5:76:ed:8e:94:49:aa:20:
                    10:32:dc:21:0e:24:96:3f:c2:6e:68:dc:4f:34:50:
                    b0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:26:4A:02:6D:1F:A2:E3:C0:17:72:85:74:21:41:69:98:EC:DE:74
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/eCZKAm0fouPAF3KFdCFBaZjs3nQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.137.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         40:7d:b7:95:61:f3:2e:19:f1:91:b1:a2:e6:c3:87:7d:20:95:
         b5:df:80:af:a6:29:23:53:8c:06:4c:07:98:9e:71:82:2b:66:
         6a:da:89:a2:f8:4b:d9:b3:f5:1e:85:b0:f6:43:cc:16:2e:00:
         63:8f:1c:d7:dd:f5:7d:ed:54:d8:cd:14:85:ce:34:a2:95:70:
         aa:db:4a:02:28:06:82:a8:2a:dc:23:cc:a8:db:e5:9a:69:67:
         a2:07:b8:8a:4f:f6:11:b5:96:dc:8a:8a:dc:db:7a:b2:00:17:
         6c:48:dd:b7:65:0e:47:4e:4c:d4:82:44:9c:6d:6c:a1:5b:7c:
         1f:58:37:d1:7d:ac:cd:45:81:cd:c8:d6:2d:04:c0:56:d2:b2:
         f0:1e:8e:a6:76:75:cb:91:7d:06:90:7a:a8:df:cd:54:a9:f7:
         01:d2:86:ba:bb:61:56:dc:0f:9c:2a:46:24:b1:47:9d:07:1d:
         0d:1b:b8:52:4c:ba:5a:c3:66:22:ce:1d:7b:ef:cc:cd:ed:4a:
         6a:db:4d:1e:d4:fa:3c:25:94:7f:c5:3f:f9:ff:48:1d:d6:55:
         13:d2:4a:ff:e4:55:0b:bd:b8:d9:17:30:79:01:f2:92:0c:62:
         76:10:cd:61:6b:3c:bb:d6:da:da:2a:e4:f4:0c:24:af:59:7f:
         3d:e5:75:00
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA58wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yMjA1MDEw
MTMyMDBaFw0yMzA0MjcwOTUyMzRaMDMxMTAvBgNVBAMTKDc4MjY0QTAyNkQxRkEy
RTNDMDE3NzI4NTc0MjE0MTY5OThFQ0RFNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLNgB/aqQ2OuC1YMy0snPxVNXBPlT9ZiSwcOwoUoZnJKuwKE1R
JW/5oNoGmE9uUf/SjRYIzea7SmJYQGvVTcUCTHQecK/Q9Yb6z+slid8HePsg0fCB
tuQ4oYw1oc9sJrUAACdSJFJTWmG9lE8RRFXQkb7bCZgv4nNjmjUdkfusGS8jwkWy
6j4Pgeif8J1sWSm4pFSk0s4FdNcOZqWzQYI+yGQ8dsMB+9VyhzuPA0rBjadKRNzS
f3IBjoRT+ryK1cnHXy/hG+FprcteWjpXGPB6Qf53s7/dok+wc3kcTuhq7j9PI75i
Eme1du2OlEmqIBAy3CEOJJY/wm5o3E80ULALAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUeCZKAm0fouPAF3KFdCFBaZjs3nQwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTQ1L2VDWktBbTBmb3VQQUYzS0ZkQ0ZCYVpqczNuUS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAZwicAwDQYJKoZIhvcNAQELBQADggEBAEB9t5Vh8y4Z8ZGxoubDh30glbXf
gK+mKSNTjAZMB5iecYIrZmraiaL4S9mz9R6FsPZDzBYuAGOPHNfd9X3tVNjNFIXO
NKKVcKrbSgIoBoKoKtwjzKjb5ZppZ6IHuIpP9hG1ltyKitzberIAF2xI3bdlDkdO
TNSCRJxtbKFbfB9YN9F9rM1Fgc3I1i0EwFbSsvAejqZ2dcuRfQaQeqjfzVSp9wHS
hrq7YVbcD5wqRiSxR50HHQ0buFJMulrDZiLOHXvvzM3tSmrbTR7U+jwllH/FP/n/
SB3WVRPSSv/kVQu9uNkXMHkB8pIMYnYQzWFrPLvW2toq5PQMJK9Zfz3ldQA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org