Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/679/EL1CItjbJptB0Jp67O3PUlNrUE0.roa
File:                     EL1CItjbJptB0Jp67O3PUlNrUE0.roa (raw, json)
Hash identifier:          PEnn6QnRke++E3I2XGvlb4AOoWl9WOZx0pbU6TBy+5I=
Subject key identifier:   10:BD:42:22:D8:DB:26:9B:41:D0:9A:7A:EC:ED:CF:52:53:6B:50:4D
Certificate issuer:       /CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91
Certificate serial:       04
Authority key identifier: 0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/EL1CItjbJptB0Jp67O3PUlNrUE0.roa
Signing time:             Mon 13 Jun 2022 06:28:58 +0000
ROA not before:           Mon 13 Jun 2022 06:28:58 +0000
ROA not after:            Tue 13 Jun 2023 06:06:17 +0000
asID:                     17958
IP address blocks:        218.40.96.0/20 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91
        Validity
            Not Before: Jun 13 06:28:58 2022 GMT
            Not After : Jun 13 06:06:17 2023 GMT
        Subject: CN=10BD4222D8DB269B41D09A7AECEDCF52536B504D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:fe:8b:fb:cc:48:b7:39:45:07:a1:ca:05:0d:
                    47:ea:ce:ba:a6:d2:e0:9b:2d:d8:8b:cd:f8:14:bb:
                    eb:1a:93:da:65:cd:8c:88:d0:5e:57:1f:cf:53:ec:
                    da:a4:ae:68:b2:27:53:2d:9a:9b:43:b6:9f:e2:9d:
                    61:e6:66:b0:2d:58:30:af:69:77:0d:e9:78:10:a3:
                    76:2a:73:c1:d4:04:fe:c7:14:b7:d7:84:ce:62:2b:
                    db:5d:22:c2:64:0e:c8:d8:21:29:b1:f1:57:61:46:
                    b4:c6:f6:e7:cc:e8:01:b7:d8:87:9b:4e:e9:89:fb:
                    e3:be:4a:11:64:8a:70:95:e0:47:06:dd:b5:93:29:
                    19:59:19:c1:d6:5a:b6:3c:78:0d:d7:77:09:a2:be:
                    9e:92:a9:92:db:87:e1:46:b1:4e:d0:4e:ff:d2:24:
                    e2:d1:ec:b0:15:cb:a0:87:88:30:f9:96:99:b8:9b:
                    a0:a4:ed:f1:43:65:93:11:1a:98:8a:01:87:20:88:
                    09:51:b0:5e:d7:15:c8:79:77:40:a3:df:31:d6:27:
                    7a:b9:02:80:9a:de:1a:1c:16:1e:5c:e9:6c:3b:60:
                    2c:71:d2:a4:02:a6:f5:9e:87:6e:78:c4:5d:c3:95:
                    5c:a7:95:b6:69:87:6d:e3:d1:19:75:d9:6e:5f:18:
                    57:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:BD:42:22:D8:DB:26:9B:41:D0:9A:7A:EC:ED:CF:52:53:6B:50:4D
            X509v3 Authority Key Identifier:
                keyid:0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/EL1CItjbJptB0Jp67O3PUlNrUE0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.40.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         02:af:18:ae:c6:51:ba:9e:ef:af:a4:d5:d9:1b:0e:d5:bc:16:
         6e:61:a8:72:c8:79:11:7d:47:a3:9d:9a:27:9c:e3:07:b1:e2:
         82:d8:c1:06:96:e4:fd:53:11:0e:d3:91:5a:d9:12:e5:3d:db:
         36:f3:2b:df:c0:0c:7f:ac:a2:d5:c0:0b:f0:df:3d:a7:7e:62:
         1f:0b:25:46:e2:dd:40:5e:6f:b4:0f:9a:f3:54:e0:0f:3b:05:
         c6:d2:cc:8b:45:43:08:58:c4:55:bd:8d:ce:76:c5:b5:db:83:
         ae:4a:25:7f:71:6f:3d:20:8c:9c:38:07:2f:19:0f:fc:cd:d2:
         1a:68:e0:74:89:7f:3d:de:32:47:01:03:9e:6f:5e:ce:35:5e:
         0a:5a:22:de:7f:9f:6c:37:5d:99:4e:13:4a:ad:50:e5:66:22:
         c8:78:39:ea:f2:d1:ec:33:e5:a8:f1:d3:8e:5e:88:69:98:2c:
         7b:29:a5:99:b4:dc:84:2a:b2:24:af:75:c7:e1:50:40:7e:0c:
         80:02:bd:20:f3:b8:49:e9:fd:02:33:9f:88:0c:e5:a6:d5:38:
         04:54:f7:72:ec:62:40:43:60:8b:25:d6:39:ef:fb:00:07:79:
         12:91:fa:13:8c:e8:80:81:99:02:ca:1e:a9:a9:c9:0d:c0:a7:
         3e:6d:b8:ba
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwRjdG
MzMwOEZDOTUyMzI0NTk4MzZGREYxNTlBRjZCNEZBQUJBQzkxMB4XDTIyMDYxMzA2
Mjg1OFoXDTIzMDYxMzA2MDYxN1owMzExMC8GA1UEAxMoMTBCRDQyMjJEOERCMjY5
QjQxRDA5QTdBRUNFRENGNTI1MzZCNTA0RDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPb+i/vMSLc5RQehygUNR+rOuqbS4Jst2IvN+BS76xqT2mXNjIjQ
Xlcfz1Ps2qSuaLInUy2am0O2n+KdYeZmsC1YMK9pdw3peBCjdipzwdQE/scUt9eE
zmIr210iwmQOyNghKbHxV2FGtMb258zoAbfYh5tO6Yn7475KEWSKcJXgRwbdtZMp
GVkZwdZatjx4Ddd3CaK+npKpktuH4UaxTtBO/9Ik4tHssBXLoIeIMPmWmbiboKTt
8UNlkxEamIoBhyCICVGwXtcVyHl3QKPfMdYnerkCgJreGhwWHlzpbDtgLHHSpAKm
9Z6HbnjEXcOVXKeVtmmHbePRGXXZbl8YV8sCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQQvUIi2Nsmm0HQmnrs7c9SU2tQTTAfBgNVHSMEGDAWgBQPfzMI/JUjJFmDb98V
mva0+quskTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjc5L0QzOHpDUHlWSXlSWmcyX2ZGWnIydFBxcnJKRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0QzOHpDUHlWSXlSWmcyX2ZGWnIydFBx
cnJKRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC82NzkvRUwxQ0l0amJKcHRCMEpwNjdPM1BVbE5yVUUwLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBNooYDANBgkqhkiG9w0BAQsFAAOCAQEAAq8YrsZRup7vr6TV2RsO1bwWbmGo
csh5EX1Ho52aJ5zjB7HigtjBBpbk/VMRDtORWtkS5T3bNvMr38AMf6yi1cAL8N89
p35iHwslRuLdQF5vtA+a81TgDzsFxtLMi0VDCFjEVb2NznbFtduDrkolf3FvPSCM
nDgHLxkP/M3SGmjgdIl/Pd4yRwEDnm9ezjVeCloi3n+fbDddmU4TSq1Q5WYiyHg5
6vLR7DPlqPHTjl6IaZgseymlmbTchCqyJK91x+FQQH4MgAK9IPO4Sen9AjOfiAzl
ptU4BFT3cuxiQENgiyXWOe/7AAd5EpH6E4zogIGZAsoeqanJDcCnPm24ug==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:11 2023 by rpki-client on console-fra.rpki-client.org