Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/602/5T-sCB0MvFITh3LgCyHyb1ZSx2o.roa
File:                     5T-sCB0MvFITh3LgCyHyb1ZSx2o.roa (raw, json)
Hash identifier:          CgC0Hc1oS1YHRCIZsja2mGID95gDagbfoRyRT3iF+w0=
Subject key identifier:   E5:3F:AC:08:1D:0C:BC:52:13:87:72:E0:0B:21:F2:6F:56:52:C7:6A
Certificate issuer:       /CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Certificate serial:       30
Authority key identifier: 4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/5T-sCB0MvFITh3LgCyHyb1ZSx2o.roa
Signing time:             Mon 01 Aug 2022 01:28:55 +0000
ROA not before:           Mon 01 Aug 2022 01:28:55 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     17675
IP address blocks:        203.169.8.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
        Validity
            Not Before: Aug  1 01:28:55 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=E53FAC081D0CBC52138772E00B21F26F5652C76A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:09:c7:5e:46:01:36:2e:62:6c:f5:79:6e:15:
                    02:9d:04:f1:89:92:42:93:73:2f:5d:98:f9:40:e5:
                    d3:25:24:e1:24:82:43:5e:d4:f8:f0:af:72:7c:1e:
                    eb:0f:6c:cc:2a:6f:f1:66:3e:dc:29:6c:d3:06:1e:
                    ff:e5:a5:23:c9:3c:76:0a:ef:c7:05:2a:56:a5:45:
                    2a:17:82:62:c5:f2:34:db:c7:61:bb:23:90:93:12:
                    6e:2d:6b:e7:97:8a:7d:92:ba:9e:6f:42:34:f1:4e:
                    41:bf:14:7a:4b:fb:64:b6:c6:bd:2f:19:20:fa:00:
                    11:0f:5d:72:ef:77:32:1b:6e:c4:57:19:78:f8:5e:
                    e8:c1:a3:84:e0:8f:7a:e1:8d:6f:6d:e4:60:95:70:
                    41:32:1e:0d:2d:6d:24:0f:2e:9e:32:64:31:2f:86:
                    01:49:66:4e:89:d2:25:1f:7b:19:fb:ff:96:f5:37:
                    85:87:37:eb:d9:5d:1b:e7:69:8b:1f:70:eb:e5:b7:
                    74:4f:53:e4:95:d1:e7:45:da:fb:12:23:3a:c2:59:
                    88:e9:34:54:ae:7f:8e:3c:98:1f:15:3f:68:42:30:
                    ec:7c:46:e3:61:d2:6c:a2:6e:7d:5f:23:b6:b7:8b:
                    26:73:9f:49:6d:7d:0d:3c:77:0e:b1:5d:31:d1:82:
                    b2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:3F:AC:08:1D:0C:BC:52:13:87:72:E0:0B:21:F2:6F:56:52:C7:6A
            X509v3 Authority Key Identifier:
                keyid:4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/5T-sCB0MvFITh3LgCyHyb1ZSx2o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.169.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         19:cb:37:61:dc:de:90:4f:26:20:cb:cd:09:00:d5:84:a9:f9:
         e5:36:97:f4:92:47:00:08:1c:b5:a9:ed:04:16:59:4e:e8:b3:
         cf:75:47:0e:07:e6:f4:92:87:26:2d:bf:b9:c7:8e:42:5d:17:
         8d:37:7c:82:14:38:60:cb:bc:43:89:9d:04:e9:14:7f:d6:62:
         59:d7:dd:80:16:29:81:c8:6e:1a:3d:17:25:9d:44:83:03:bf:
         ac:43:5c:47:3e:b2:cb:05:10:68:4a:a0:0c:49:20:78:e0:38:
         dc:c6:62:fb:9f:2a:5e:17:43:ba:3c:ef:0a:36:4f:98:a9:6d:
         76:36:af:af:1d:96:41:2a:37:18:ad:9f:4d:7f:c0:1d:e5:d1:
         a3:cf:a8:5e:0d:8c:79:16:36:91:4c:f8:9e:43:aa:ad:49:87:
         20:93:99:6a:2c:8e:4c:c9:8a:c8:b4:a0:d2:f8:9b:31:a7:77:
         f1:a7:ea:59:4b:fe:40:81:04:16:d4:fb:4d:d7:9d:9c:8d:2c:
         8c:bb:0a:7f:62:7b:b1:9b:6f:15:8d:4d:b1:34:8d:a8:1c:3f:
         df:9a:b8:3b:11:45:e5:9f:b7:93:53:58:fd:54:87:ce:7e:75:
         b4:51:ba:e2:ed:07:04:04:ab:26:36:b8:fc:c5:2f:58:fc:bf:
         fb:0c:d7:a6
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBMDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0RUZG
MUFCNkVBREEyNzNCQTA2NkRCMEY3N0I3OUQ2QTBEOTAxNTQyMB4XDTIyMDgwMTAx
Mjg1NVoXDTIzMDcxNTAxMzAwM1owMzExMC8GA1UEAxMoRTUzRkFDMDgxRDBDQkM1
MjEzODc3MkUwMEIyMUYyNkY1NjUyQzc2QTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM8Jx15GATYuYmz1eW4VAp0E8YmSQpNzL12Y+UDl0yUk4SSCQ17U
+PCvcnwe6w9szCpv8WY+3Cls0wYe/+WlI8k8dgrvxwUqVqVFKheCYsXyNNvHYbsj
kJMSbi1r55eKfZK6nm9CNPFOQb8Uekv7ZLbGvS8ZIPoAEQ9dcu93MhtuxFcZePhe
6MGjhOCPeuGNb23kYJVwQTIeDS1tJA8unjJkMS+GAUlmTonSJR97Gfv/lvU3hYc3
69ldG+dpix9w6+W3dE9T5JXR50Xa+xIjOsJZiOk0VK5/jjyYHxU/aEIw7HxG42HS
bKJufV8jtreLJnOfSW19DTx3DrFdMdGCsskCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTlP6wIHQy8UhOHcuALIfJvVlLHajAfBgNVHSMEGDAWgBRO/xq26tonO6Bm2w93
t51qDZAVQjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjAyL1R2OGF0dXJhSnp1Z1p0c1BkN2VkYWcyUUZVSS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1R2OGF0dXJhSnp1Z1p0c1BkN2VkYWcy
UUZVSS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC82MDIvNVQtc0NCME12RklUaDNMZ0N5SHliMVpTeDJvLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA8upCDANBgkqhkiG9w0BAQsFAAOCAQEAGcs3YdzekE8mIMvNCQDVhKn55TaX
9JJHAAgctantBBZZTuizz3VHDgfm9JKHJi2/uceOQl0XjTd8ghQ4YMu8Q4mdBOkU
f9ZiWdfdgBYpgchuGj0XJZ1EgwO/rENcRz6yywUQaEqgDEkgeOA43MZi+58qXhdD
ujzvCjZPmKltdjavrx2WQSo3GK2fTX/AHeXRo8+oXg2MeRY2kUz4nkOqrUmHIJOZ
aiyOTMmKyLSg0vibMad38afqWUv+QIEEFtT7TdednI0sjLsKf2J7sZtvFY1NsTSN
qBw/35q4OxFF5Z+3k1NY/VSHzn51tFG64u0HBASrJja4/MUvWPy/+wzXpg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org