Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/602/kWgIEgHkhXXf5U-UpJD-kNP4ANA.roa
File:                     kWgIEgHkhXXf5U-UpJD-kNP4ANA.roa (raw, json)
Hash identifier:          k8oJvw7K5Q55fUtk/qk9XEPeJcp/DsQkAquyTTewJ2M=
Subject key identifier:   91:68:08:12:01:E4:85:75:DF:E5:4F:94:A4:90:FE:90:D3:F8:00:D0
Certificate issuer:       /CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Certificate serial:       38
Authority key identifier: 4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/kWgIEgHkhXXf5U-UpJD-kNP4ANA.roa
Signing time:             Sat 01 Oct 2022 01:29:30 +0000
ROA not before:           Sat 01 Oct 2022 01:29:30 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     24295
IP address blocks:        203.169.14.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
        Validity
            Not Before: Oct  1 01:29:30 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=9168081201E48575DFE54F94A490FE90D3F800D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:01:28:b0:1b:b3:2b:0a:7b:b7:09:dd:1c:88:
                    e4:d9:79:b9:2a:d2:3b:1e:e7:91:ce:71:f7:48:75:
                    50:9b:4c:5d:85:1b:ea:82:7a:7d:4c:af:29:03:15:
                    f9:90:45:10:80:a5:a7:40:18:f5:e5:78:91:74:66:
                    33:0a:e4:f4:4e:7a:f5:2e:13:78:d9:b9:e4:19:41:
                    43:af:f3:f6:c8:f1:c1:ac:90:fd:27:de:fb:27:6d:
                    0b:49:c8:0d:a2:e6:14:d3:51:ef:3e:59:1c:7d:c8:
                    0c:60:ca:a4:33:1b:69:57:7f:e6:53:c7:21:a5:33:
                    49:c4:be:4e:12:8f:2f:c6:46:39:54:f3:b0:3b:91:
                    7c:20:ba:fe:d8:46:a9:d9:2f:fb:89:90:8f:10:72:
                    a0:29:58:4a:9b:09:b2:00:b4:41:51:dc:fb:1a:a5:
                    1e:06:0b:97:b2:54:ca:7f:fb:d1:4b:e7:90:8b:05:
                    6d:66:51:2e:ea:23:8d:b0:2f:cc:39:b0:8f:10:37:
                    61:eb:47:77:a6:81:b0:ee:24:d7:13:0c:c8:cf:17:
                    70:d4:8c:ec:84:53:52:38:cf:69:e5:34:5b:99:c4:
                    3b:f4:9d:49:bd:b1:db:a2:1b:c2:65:4e:b7:e1:a5:
                    c1:6f:3a:7d:ba:b1:c2:f2:63:06:f1:dd:01:d6:01:
                    5c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:68:08:12:01:E4:85:75:DF:E5:4F:94:A4:90:FE:90:D3:F8:00:D0
            X509v3 Authority Key Identifier:
                keyid:4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/kWgIEgHkhXXf5U-UpJD-kNP4ANA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.169.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:b4:6c:f3:59:75:5f:d3:fc:ff:ac:c9:25:a0:3c:96:db:4e:
         ae:33:e0:b3:c0:b4:50:d3:e1:f2:eb:18:35:11:5d:fa:d1:97:
         7a:62:f7:27:9d:18:ed:69:ed:62:ee:b9:46:b9:09:fd:37:8e:
         29:8c:82:00:80:6c:9e:ef:88:0b:b9:d3:e4:91:e5:41:4c:7f:
         7d:83:3b:3f:3c:62:bf:02:62:6b:59:16:04:be:02:44:c3:e4:
         11:57:8e:22:a5:21:8f:ca:75:5f:86:55:99:21:1f:4d:31:64:
         19:d9:7c:30:93:e5:c5:8b:00:8a:27:2c:05:12:a1:40:98:99:
         4c:df:1c:11:01:4c:e0:9e:15:56:8f:a1:11:4f:51:a9:bc:1a:
         eb:e5:e9:df:6a:44:1b:05:29:84:e9:73:bd:d6:80:74:be:af:
         f8:b5:76:b7:db:d4:b6:44:a5:aa:95:da:5b:97:86:2c:ed:ed:
         7e:f2:e4:d3:0c:98:5e:d1:71:24:e6:49:85:0e:d6:80:ff:60:
         5e:66:82:3f:be:38:f8:d3:0d:e3:c2:d5:f8:68:97:3a:b4:42:
         f3:f9:51:69:f9:11:4c:ac:02:ca:b6:2f:53:c2:1e:bf:ad:04:
         5c:ce:27:a4:b6:25:94:74:3f:b8:09:b9:87:2e:9d:a4:aa:82:
         a9:6f:be:b3
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBODANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0RUZG
MUFCNkVBREEyNzNCQTA2NkRCMEY3N0I3OUQ2QTBEOTAxNTQyMB4XDTIyMTAwMTAx
MjkzMFoXDTIzMDkxNTAxMzAwM1owMzExMC8GA1UEAxMoOTE2ODA4MTIwMUU0ODU3
NURGRTU0Rjk0QTQ5MEZFOTBEM0Y4MDBEMDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJ8BKLAbsysKe7cJ3RyI5Nl5uSrSOx7nkc5x90h1UJtMXYUb6oJ6
fUyvKQMV+ZBFEIClp0AY9eV4kXRmMwrk9E569S4TeNm55BlBQ6/z9sjxwayQ/Sfe
+ydtC0nIDaLmFNNR7z5ZHH3IDGDKpDMbaVd/5lPHIaUzScS+ThKPL8ZGOVTzsDuR
fCC6/thGqdkv+4mQjxByoClYSpsJsgC0QVHc+xqlHgYLl7JUyn/70UvnkIsFbWZR
LuojjbAvzDmwjxA3YetHd6aBsO4k1xMMyM8XcNSM7IRTUjjPaeU0W5nEO/SdSb2x
26IbwmVOt+GlwW86fbqxwvJjBvHdAdYBXIcCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSRaAgSAeSFdd/lT5SkkP6Q0/gA0DAfBgNVHSMEGDAWgBRO/xq26tonO6Bm2w93
t51qDZAVQjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjAyL1R2OGF0dXJhSnp1Z1p0c1BkN2VkYWcyUUZVSS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1R2OGF0dXJhSnp1Z1p0c1BkN2VkYWcy
UUZVSS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC82MDIva1dnSUVnSGtoWFhmNVUtVXBKRC1rTlA0QU5BLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAMupDjANBgkqhkiG9w0BAQsFAAOCAQEAArRs81l1X9P8/6zJJaA8lttOrjPg
s8C0UNPh8usYNRFd+tGXemL3J50Y7WntYu65RrkJ/TeOKYyCAIBsnu+IC7nT5JHl
QUx/fYM7PzxivwJia1kWBL4CRMPkEVeOIqUhj8p1X4ZVmSEfTTFkGdl8MJPlxYsA
iicsBRKhQJiZTN8cEQFM4J4VVo+hEU9Rqbwa6+Xp32pEGwUphOlzvdaAdL6v+LV2
t9vUtkSlqpXaW5eGLO3tfvLk0wyYXtFxJOZJhQ7WgP9gXmaCP744+NMN48LV+GiX
OrRC8/lRafkRTKwCyrYvU8Iev60EXM4npLYllHQ/uAm5hy6dpKqCqW++sw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org