Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/602/AifOoCME2EQJ3no1_09xgc-4lIE.roa
File:                     AifOoCME2EQJ3no1_09xgc-4lIE.roa (raw, json)
Hash identifier:          6fwgF1FSnXUwrASMZvZ/lQNhy8b2/sqYX85flg+y6zc=
Subject key identifier:   02:27:CE:A0:23:04:D8:44:09:DE:7A:35:FF:4F:71:81:CF:B8:94:81
Certificate issuer:       /CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Certificate serial:       2F
Authority key identifier: 4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/AifOoCME2EQJ3no1_09xgc-4lIE.roa
Signing time:             Mon 01 Aug 2022 01:28:54 +0000
ROA not before:           Mon 01 Aug 2022 01:28:54 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     17675
IP address blocks:        61.211.160.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
        Validity
            Not Before: Aug  1 01:28:54 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=0227CEA02304D84409DE7A35FF4F7181CFB89481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:39:b9:3d:98:97:36:3f:33:e3:f5:5e:7f:b0:
                    df:72:08:af:a6:6a:32:96:60:91:38:b4:4f:e5:41:
                    18:20:94:5a:77:64:51:3f:2d:0b:81:f3:73:54:8c:
                    f8:d9:82:16:2c:de:ce:2d:b9:a3:90:61:1b:8b:4d:
                    3c:ec:79:fd:c3:d6:bf:a5:b9:9d:9a:c8:bc:61:d8:
                    ce:15:a0:c8:07:f3:a3:db:b1:84:02:de:62:45:d2:
                    60:47:54:53:da:fd:d4:05:60:44:9b:f8:f7:9e:a6:
                    db:31:cb:a8:87:e9:72:ac:90:8c:6e:56:f0:c2:54:
                    01:8e:61:16:33:56:5c:ad:ae:bc:be:94:4d:16:b7:
                    f3:44:87:ed:a4:5d:4d:f6:b3:99:cd:d1:a2:bf:38:
                    68:fd:94:25:dc:90:dc:87:64:d2:e7:ec:f3:c0:c4:
                    65:34:0f:53:19:e8:32:24:ec:4b:1d:30:8f:ab:43:
                    4e:9b:ef:ea:bc:1a:24:f9:22:d5:55:29:0f:5e:f8:
                    0c:51:58:b4:b1:bf:71:76:ea:aa:60:3d:df:62:90:
                    f1:7f:0e:8c:56:01:75:9e:16:78:58:1c:5a:97:14:
                    ce:17:2e:57:f5:6d:35:55:d0:12:b4:67:65:21:fb:
                    0b:a6:c7:3d:fb:ac:c6:f6:87:b9:8e:59:a8:78:4b:
                    fd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:27:CE:A0:23:04:D8:44:09:DE:7A:35:FF:4F:71:81:CF:B8:94:81
            X509v3 Authority Key Identifier:
                keyid:4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/AifOoCME2EQJ3no1_09xgc-4lIE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.211.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         40:2c:09:2a:dd:3f:f7:f7:91:8d:5c:cd:ad:f3:32:df:5e:35:
         02:bf:ea:da:ce:c3:4d:93:f6:46:4b:f5:b8:36:be:6d:cf:c5:
         b9:56:69:69:96:56:e0:a9:44:ef:e2:25:de:a2:e0:77:94:86:
         b6:50:97:ca:a6:89:a7:3c:13:d7:f8:ab:bf:ab:7c:65:48:07:
         9a:3e:3a:74:a4:fe:b3:3a:06:92:c4:82:9a:66:6b:fb:26:87:
         d1:d2:a0:a4:20:47:11:ad:9b:73:50:22:f7:b8:81:e0:a1:fd:
         28:99:0e:a3:83:c5:f7:43:f4:d0:cf:56:6e:f4:dc:9b:94:9d:
         d6:0d:d9:10:c2:13:46:fa:32:30:01:2d:44:18:de:9a:6d:31:
         56:6e:97:e1:ec:ea:bf:4f:64:5f:fa:66:6f:85:05:be:f1:fa:
         7e:e2:10:fd:94:47:9c:b1:8a:b7:17:e3:81:c4:ff:88:6f:7e:
         c8:65:fa:6e:64:6f:ac:a1:66:94:4e:4c:86:e2:a5:cc:1f:0c:
         ca:94:63:98:41:66:bf:c1:3e:be:9d:fc:45:10:c6:c6:8b:14:
         6f:19:ed:76:ad:84:a2:ca:58:50:77:cc:f3:58:35:86:7f:46:
         54:1a:40:00:97:f8:57:72:a8:39:92:d9:af:3b:d9:11:06:22:
         37:aa:e7:a5
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBLzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0RUZG
MUFCNkVBREEyNzNCQTA2NkRCMEY3N0I3OUQ2QTBEOTAxNTQyMB4XDTIyMDgwMTAx
Mjg1NFoXDTIzMDcxNTAxMzAwM1owMzExMC8GA1UEAxMoMDIyN0NFQTAyMzA0RDg0
NDA5REU3QTM1RkY0RjcxODFDRkI4OTQ4MTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMM5uT2YlzY/M+P1Xn+w33IIr6ZqMpZgkTi0T+VBGCCUWndkUT8t
C4Hzc1SM+NmCFizezi25o5BhG4tNPOx5/cPWv6W5nZrIvGHYzhWgyAfzo9uxhALe
YkXSYEdUU9r91AVgRJv4956m2zHLqIfpcqyQjG5W8MJUAY5hFjNWXK2uvL6UTRa3
80SH7aRdTfazmc3Ror84aP2UJdyQ3Idk0ufs88DEZTQPUxnoMiTsSx0wj6tDTpvv
6rwaJPki1VUpD174DFFYtLG/cXbqqmA932KQ8X8OjFYBdZ4WeFgcWpcUzhcuV/Vt
NVXQErRnZSH7C6bHPfusxvaHuY5ZqHhL/UMCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQCJ86gIwTYRAneejX/T3GBz7iUgTAfBgNVHSMEGDAWgBRO/xq26tonO6Bm2w93
t51qDZAVQjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjAyL1R2OGF0dXJhSnp1Z1p0c1BkN2VkYWcyUUZVSS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1R2OGF0dXJhSnp1Z1p0c1BkN2VkYWcy
UUZVSS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC82MDIvQWlmT29DTUUyRVFKM25vMV8wOXhnYy00bElFLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBD3ToDANBgkqhkiG9w0BAQsFAAOCAQEAQCwJKt0/9/eRjVzNrfMy3141Ar/q
2s7DTZP2Rkv1uDa+bc/FuVZpaZZW4KlE7+Il3qLgd5SGtlCXyqaJpzwT1/irv6t8
ZUgHmj46dKT+szoGksSCmmZr+yaH0dKgpCBHEa2bc1Ai97iB4KH9KJkOo4PF90P0
0M9WbvTcm5Sd1g3ZEMITRvoyMAEtRBjemm0xVm6X4ezqv09kX/pmb4UFvvH6fuIQ
/ZRHnLGKtxfjgcT/iG9+yGX6bmRvrKFmlE5MhuKlzB8MypRjmEFmv8E+vp38RRDG
xosUbxntdq2EospYUHfM81g1hn9GVBpAAJf4V3KoOZLZrzvZEQYiN6rnpQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org