Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/QowLysPeNThXM81Uh-R93IjMvWY.roa
File:                     QowLysPeNThXM81Uh-R93IjMvWY.roa (raw, json)
Hash identifier:          QLtlxeI7QSpBW1MFr1UuZVC2QFed7lAbzUQZRol1v/w=
Subject key identifier:   42:8C:0B:CA:C3:DE:35:38:57:33:CD:54:87:E4:7D:DC:88:CC:BD:66
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       59
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/QowLysPeNThXM81Uh-R93IjMvWY.roa
Signing time:             Mon 17 Oct 2022 02:09:57 +0000
ROA not before:           Mon 17 Oct 2022 02:09:57 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     18136
IP address blocks:        27.126.128.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 17 02:09:57 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=428C0BCAC3DE35385733CD5487E47DDC88CCBD66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8c:be:60:f6:ed:d1:7f:48:c8:27:5c:52:74:
                    0a:6f:76:20:89:30:22:73:6e:38:55:93:4a:c0:b6:
                    23:9c:ef:c5:c4:15:16:7d:cd:da:bf:ee:80:b7:2d:
                    73:a0:11:37:bb:a5:41:8c:c6:a3:b1:95:81:b8:4b:
                    cd:05:a0:e7:ec:31:a3:c4:ba:8d:94:c1:d6:c1:e6:
                    cc:d5:57:5c:5c:26:7a:c1:a6:77:04:ca:8a:15:03:
                    8d:0b:df:92:93:ee:2a:65:8d:03:ff:48:01:7c:6d:
                    0b:4e:98:e2:34:bb:6e:e8:b1:07:5b:42:0d:c2:d0:
                    ef:c4:60:9a:0b:ca:37:78:bf:9a:a1:69:95:72:20:
                    17:02:a5:3e:13:fa:ad:9a:2c:5f:01:50:1c:7f:43:
                    aa:68:64:b0:90:e2:0b:46:e3:86:96:fe:59:38:60:
                    f6:0e:3c:c2:42:50:11:7a:2a:11:06:cb:63:7a:1d:
                    0f:3f:c7:8a:63:4f:3b:76:c1:0f:9e:18:e6:a1:08:
                    2e:a1:ef:7d:c9:81:e7:6c:cf:89:73:34:7f:b4:44:
                    20:58:ef:a0:87:57:d4:4a:74:07:7a:49:c0:b3:af:
                    55:e4:15:94:a4:af:f3:63:02:72:04:b7:e4:00:a7:
                    9c:6d:7a:0e:7c:e3:4c:23:10:2f:da:d1:5e:4a:3a:
                    6f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:8C:0B:CA:C3:DE:35:38:57:33:CD:54:87:E4:7D:DC:88:CC:BD:66
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/QowLysPeNThXM81Uh-R93IjMvWY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.126.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2f:61:f6:ab:a1:25:7b:30:e2:92:55:05:61:e9:68:70:57:8d:
         72:4d:04:39:eb:c1:b7:cb:0b:4d:db:0a:ef:4b:d3:8d:20:63:
         f0:f2:81:51:56:27:2c:c6:d2:46:d4:99:07:95:59:e1:92:a5:
         22:89:25:4a:d2:6d:af:94:6c:81:f8:d9:2e:e5:37:3c:38:f9:
         93:6e:8a:8e:b1:62:89:4c:64:08:db:41:a3:e9:45:38:e3:c9:
         84:82:be:7f:39:7b:89:cf:59:20:d9:9b:fa:89:f2:dc:e1:6a:
         db:f8:f6:f9:60:83:ee:55:5b:f0:7b:ea:6f:61:86:6c:ca:23:
         a8:47:5f:f5:3b:27:8d:19:d5:18:ad:0d:aa:e9:f7:62:d0:23:
         6e:dc:3e:8c:cb:f0:83:b9:22:d4:7c:a6:ab:cb:4c:7a:e0:f8:
         8b:fb:b3:ef:95:99:8c:f8:39:59:08:ca:7a:2a:18:79:68:07:
         21:78:62:15:7e:98:66:a1:cf:ec:1a:0d:93:55:f5:10:71:93:
         50:08:ee:69:1e:70:80:da:4a:eb:30:3d:79:3d:cb:4e:34:68:
         1d:87:4a:69:f3:64:9c:f7:10:57:72:01:6c:e3:0e:69:90:67:
         38:ba:cb:9c:56:45:e6:ee:28:d1:69:1e:d1:d5:2c:64:51:ff:
         e6:b3:5f:67
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBWTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQjA2
QjJFNEE5RDU2N0VCN0Q4MEZGNTlBNzU1RkQyODNCRkIxM0FCMB4XDTIyMTAxNzAy
MDk1N1oXDTIzMTAxNTAxMzAwMlowMzExMC8GA1UEAxMoNDI4QzBCQ0FDM0RFMzUz
ODU3MzNDRDU0ODdFNDdEREM4OENDQkQ2NjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANWMvmD27dF/SMgnXFJ0Cm92IIkwInNuOFWTSsC2I5zvxcQVFn3N
2r/ugLctc6ARN7ulQYzGo7GVgbhLzQWg5+wxo8S6jZTB1sHmzNVXXFwmesGmdwTK
ihUDjQvfkpPuKmWNA/9IAXxtC06Y4jS7buixB1tCDcLQ78RgmgvKN3i/mqFplXIg
FwKlPhP6rZosXwFQHH9DqmhksJDiC0bjhpb+WThg9g48wkJQEXoqEQbLY3odDz/H
imNPO3bBD54Y5qEILqHvfcmB52zPiXM0f7REIFjvoIdX1Ep0B3pJwLOvVeQVlKSv
82MCcgS35ACnnG16DnzjTCMQL9rRXko6bxUCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRCjAvKw941OFczzVSH5H3ciMy9ZjAfBgNVHSMEGDAWgBT7BrLkqdVn632A/1mn
Vf0oO/sTqzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjcxLy13YXk1S25WWi10OWdQOVpwMVg5S0R2N0U2cy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLy13YXk1S25WWi10OWdQOVpwMVg5S0R2
N0U2cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC82NzEvUW93THlzUGVOVGhYTTgxVWgtUjkzSWpNdldZLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBBt+gDANBgkqhkiG9w0BAQsFAAOCAQEAL2H2q6ElezDiklUFYelocFeNck0E
OevBt8sLTdsK70vTjSBj8PKBUVYnLMbSRtSZB5VZ4ZKlIoklStJtr5RsgfjZLuU3
PDj5k26KjrFiiUxkCNtBo+lFOOPJhIK+fzl7ic9ZINmb+ony3OFq2/j2+WCD7lVb
8Hvqb2GGbMojqEdf9TsnjRnVGK0Nqun3YtAjbtw+jMvwg7ki1Hymq8tMeuD4i/uz
75WZjPg5WQjKeioYeWgHIXhiFX6YZqHP7BoNk1X1EHGTUAjuaR5wgNpK6zA9eT3L
TjRoHYdKafNknPcQV3IBbOMOaZBnOLrLnFZF5u4o0Wke0dUsZFH/5rNfZw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org