Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/679/3HSnZA-yFuBKAyFGAwM0RbMlOtg.roa
File:                     3HSnZA-yFuBKAyFGAwM0RbMlOtg.roa (raw, json)
Hash identifier:          Rc+/+XuraihPcfwjCTn9BGJbkq6uuRRnhG8vPGKkDMI=
Subject key identifier:   DC:74:A7:64:0F:B2:16:E0:4A:03:21:46:03:03:34:45:B3:25:3A:D8
Certificate issuer:       /CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91
Certificate serial:       03
Authority key identifier: 0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/3HSnZA-yFuBKAyFGAwM0RbMlOtg.roa
Signing time:             Mon 13 Jun 2022 06:28:58 +0000
ROA not before:           Mon 13 Jun 2022 06:28:58 +0000
ROA not after:            Tue 13 Jun 2023 06:06:17 +0000
asID:                     17958
IP address blocks:        180.178.80.0/21 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91
        Validity
            Not Before: Jun 13 06:28:58 2022 GMT
            Not After : Jun 13 06:06:17 2023 GMT
        Subject: CN=DC74A7640FB216E04A03214603033445B3253AD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:42:26:4b:ee:c7:9e:d6:4b:e7:8a:95:ae:46:
                    78:7f:38:e7:c6:b9:e3:3e:1e:03:00:54:cc:e2:81:
                    de:50:5e:45:46:3e:4b:d5:4b:0c:4d:8c:b4:61:c6:
                    03:c8:64:4c:cc:50:75:7c:c1:50:a0:ba:fb:33:01:
                    86:0c:7e:2d:e8:a6:b2:4b:33:2c:0b:3b:5e:65:18:
                    7f:b4:58:b7:4a:aa:8c:55:91:5b:c6:4a:fe:ca:95:
                    33:7b:d4:55:05:c0:dc:21:11:c3:1c:b9:e7:21:79:
                    e0:4e:99:9f:20:e8:93:b0:c7:a3:bc:54:91:a6:ec:
                    71:04:f6:f4:82:b4:b8:3b:df:d8:cf:f5:16:d3:c3:
                    94:19:f3:64:ef:6a:d3:9c:a5:59:82:0e:c9:78:dd:
                    67:f5:09:4b:a2:97:04:72:60:17:c8:57:cd:7a:d0:
                    94:98:8f:5a:23:90:92:e6:44:af:8e:b5:b4:bd:32:
                    77:23:25:f2:9e:1b:a2:72:4e:da:03:d5:d0:3c:93:
                    91:65:b2:67:2f:c0:d3:10:06:ee:c2:15:93:b2:2e:
                    44:34:b4:f4:44:87:38:36:92:dc:ea:4b:f8:56:e3:
                    7e:31:02:21:94:f4:33:b6:4d:50:e6:17:ad:b0:20:
                    ed:c7:54:c0:b8:6f:db:ad:98:a6:87:4d:d4:56:03:
                    89:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:74:A7:64:0F:B2:16:E0:4A:03:21:46:03:03:34:45:B3:25:3A:D8
            X509v3 Authority Key Identifier:
                keyid:0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/3HSnZA-yFuBKAyFGAwM0RbMlOtg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.178.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1d:49:21:90:75:f2:6a:fa:7a:4f:3d:79:1e:15:ae:8c:33:f7:
         aa:86:62:2f:3e:26:fc:09:e0:b7:bd:3a:b6:82:b2:bb:fc:b2:
         64:f9:d2:e3:10:25:50:5e:4a:1b:0c:d9:f2:12:6d:b7:b3:af:
         d8:f1:df:9a:6e:f9:d2:5f:f4:e5:ae:0e:61:80:0f:f6:8e:de:
         51:9c:7c:6c:eb:a7:50:4b:e7:33:1a:50:64:ea:0e:88:f2:77:
         d1:0f:29:bd:59:62:bd:9d:8c:4b:d9:c6:25:fd:cb:17:ed:36:
         05:e7:79:93:a3:e1:50:02:a6:8d:3d:12:ff:00:f9:54:c2:27:
         18:c4:69:cd:a3:69:f6:b0:56:87:f1:89:2f:e7:11:22:87:5d:
         9d:58:5e:d6:e9:51:d0:b0:ed:24:10:a3:b6:28:9e:ee:91:92:
         b3:e5:d8:de:7b:4f:aa:d8:2a:a4:01:7e:12:87:b6:57:c6:2b:
         50:86:53:06:17:21:98:8f:da:4c:41:5c:f9:8d:72:dc:98:37:
         45:75:d1:c5:32:12:3e:5b:ec:f6:6e:85:85:fe:e7:5c:30:a1:
         c0:64:ad:ac:15:50:7c:95:be:d7:28:54:07:f5:e5:bd:0e:e6:
         57:0e:07:74:4d:24:24:f0:d5:c3:da:16:54:b0:4e:dc:bb:2f:
         c2:c3:d0:52
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwRjdG
MzMwOEZDOTUyMzI0NTk4MzZGREYxNTlBRjZCNEZBQUJBQzkxMB4XDTIyMDYxMzA2
Mjg1OFoXDTIzMDYxMzA2MDYxN1owMzExMC8GA1UEAxMoREM3NEE3NjQwRkIyMTZF
MDRBMDMyMTQ2MDMwMzM0NDVCMzI1M0FEODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANdCJkvux57WS+eKla5GeH8458a54z4eAwBUzOKB3lBeRUY+S9VL
DE2MtGHGA8hkTMxQdXzBUKC6+zMBhgx+LeimskszLAs7XmUYf7RYt0qqjFWRW8ZK
/sqVM3vUVQXA3CERwxy55yF54E6ZnyDok7DHo7xUkabscQT29IK0uDvf2M/1FtPD
lBnzZO9q05ylWYIOyXjdZ/UJS6KXBHJgF8hXzXrQlJiPWiOQkuZEr461tL0ydyMl
8p4bonJO2gPV0DyTkWWyZy/A0xAG7sIVk7IuRDS09ESHODaS3OpL+FbjfjECIZT0
M7ZNUOYXrbAg7cdUwLhv262YpodN1FYDiYUCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTcdKdkD7IW4EoDIUYDAzRFsyU62DAfBgNVHSMEGDAWgBQPfzMI/JUjJFmDb98V
mva0+quskTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjc5L0QzOHpDUHlWSXlSWmcyX2ZGWnIydFBxcnJKRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0QzOHpDUHlWSXlSWmcyX2ZGWnIydFBx
cnJKRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC82NzkvM0hTblpBLXlGdUJLQXlGR0F3TTBSYk1sT3RnLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA7SyUDANBgkqhkiG9w0BAQsFAAOCAQEAHUkhkHXyavp6Tz15HhWujDP3qoZi
Lz4m/Angt706toKyu/yyZPnS4xAlUF5KGwzZ8hJtt7Ov2PHfmm750l/05a4OYYAP
9o7eUZx8bOunUEvnMxpQZOoOiPJ30Q8pvVlivZ2MS9nGJf3LF+02Bed5k6PhUAKm
jT0S/wD5VMInGMRpzaNp9rBWh/GJL+cRIoddnVhe1ulR0LDtJBCjtiie7pGSs+XY
3ntPqtgqpAF+Eoe2V8YrUIZTBhchmI/aTEFc+Y1y3Jg3RXXRxTISPlvs9m6Fhf7n
XDChwGStrBVQfJW+1yhUB/XlvQ7mVw4HdE0kJPDVw9oWVLBO3LsvwsPQUg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org