Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/840/cixCPvCDci3mmxiGw_kxCAVbb4E.roa
File:                     cixCPvCDci3mmxiGw_kxCAVbb4E.roa (raw, json)
Hash identifier:          XHEykwgzc2f0OcAugVJrZDNKDMPMCO5sG7hJk8KQZYY=
Subject key identifier:   72:2C:42:3E:F0:83:72:2D:E6:9B:18:86:C3:F9:31:08:05:5B:6F:81
Certificate issuer:       /CN=D79B3890C2DA3795148976B954C2024056797554
Certificate serial:       06
Authority key identifier: D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/cixCPvCDci3mmxiGw_kxCAVbb4E.roa
Signing time:             Wed 11 May 2022 02:31:20 +0000
ROA not before:           Wed 11 May 2022 02:31:20 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     131934
IP address blocks:        14.192.96.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79B3890C2DA3795148976B954C2024056797554
        Validity
            Not Before: May 11 02:31:20 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=722C423EF083722DE69B1886C3F93108055B6F81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7f:30:eb:b4:d3:73:a6:bb:3c:a5:9e:a0:5b:
                    d3:b3:13:0f:ed:43:14:04:75:70:60:7b:ff:38:55:
                    e7:3a:55:00:05:6c:a8:d4:67:91:3a:62:58:4d:59:
                    33:40:1b:e9:a1:fe:f1:fa:a8:47:78:04:69:26:9c:
                    de:92:87:30:7a:53:ea:57:81:77:d5:b8:d8:07:0d:
                    84:94:df:35:99:2a:ec:19:72:9c:6c:70:10:3b:9c:
                    e6:43:d5:50:ab:d8:f3:73:f5:f2:9d:66:76:af:65:
                    7c:7b:2b:91:7f:72:35:fb:87:ac:13:f7:c1:76:12:
                    cd:25:ee:cd:e3:d6:88:c6:5d:ae:cf:97:a5:d6:5d:
                    53:b4:94:99:e2:69:aa:14:3f:78:d7:fd:eb:2f:59:
                    67:88:52:e9:74:e7:31:d0:42:d2:2f:aa:de:b1:e7:
                    bf:54:41:d8:b2:bb:37:61:bb:ef:ed:ca:07:7c:24:
                    70:5c:4d:5d:a0:9f:28:20:fe:e4:a0:e9:db:78:1b:
                    5b:54:a7:18:ca:19:57:b3:a2:8c:96:8b:39:40:08:
                    45:3e:84:68:cb:b5:4d:d7:29:3a:b0:db:1f:cc:f5:
                    73:d1:45:b9:a2:d1:4d:22:d3:b6:bc:a0:b5:ad:90:
                    c6:76:a0:a0:46:22:75:ef:70:91:de:e5:2e:93:c4:
                    0b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:2C:42:3E:F0:83:72:2D:E6:9B:18:86:C3:F9:31:08:05:5B:6F:81
            X509v3 Authority Key Identifier:
                keyid:D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/cixCPvCDci3mmxiGw_kxCAVbb4E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.192.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6d:8e:fb:66:85:c4:fc:29:63:b8:f5:b6:83:3c:58:f1:7d:a0:
         b7:3b:2e:34:48:3e:18:bd:99:31:b5:98:c2:a6:27:67:01:a3:
         8d:69:aa:33:94:56:b6:50:28:96:a5:11:a6:43:d2:be:65:45:
         e2:6d:aa:73:ba:aa:97:4f:35:d8:35:31:33:68:88:e3:5e:83:
         98:a7:1e:62:61:b6:33:26:a1:fd:a0:e3:aa:98:c4:53:b0:26:
         54:28:74:9f:11:24:f4:61:5c:16:8a:2d:f9:60:86:98:f9:88:
         db:73:11:20:d6:cf:38:0a:7d:18:ca:5f:e5:aa:eb:a4:80:dc:
         e8:32:26:8d:39:51:85:97:90:3f:5b:f3:c3:51:e6:ca:cd:be:
         ac:30:9b:6d:f5:c6:9e:9c:6e:ff:b8:fc:15:18:f2:7d:94:c2:
         5a:e7:b8:42:2f:2b:78:05:e1:4a:8c:3f:1d:8a:a0:fc:e5:a6:
         b0:75:14:82:aa:c0:b2:be:14:5d:f5:63:2f:52:47:9d:d1:8f:
         1a:35:f9:df:48:b0:a7:e5:f9:4b:51:04:a9:58:44:fc:3d:0e:
         9a:fd:9c:45:ee:2e:85:6f:73:b0:c3:13:70:c1:55:2f:40:d4:
         7d:de:d9:ac:46:df:1f:c5:de:da:d7:08:a8:06:ef:56:be:57:
         12:8d:15:3f
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBBjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENzlC
Mzg5MEMyREEzNzk1MTQ4OTc2Qjk1NEMyMDI0MDU2Nzk3NTU0MB4XDTIyMDUxMTAy
MzEyMFoXDTIzMDQyNzA5NTIzNFowMzExMC8GA1UEAxMoNzIyQzQyM0VGMDgzNzIy
REU2OUIxODg2QzNGOTMxMDgwNTVCNkY4MTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMx/MOu003OmuzylnqBb07MTD+1DFAR1cGB7/zhV5zpVAAVsqNRn
kTpiWE1ZM0Ab6aH+8fqoR3gEaSac3pKHMHpT6leBd9W42AcNhJTfNZkq7BlynGxw
EDuc5kPVUKvY83P18p1mdq9lfHsrkX9yNfuHrBP3wXYSzSXuzePWiMZdrs+XpdZd
U7SUmeJpqhQ/eNf96y9ZZ4hS6XTnMdBC0i+q3rHnv1RB2LK7N2G77+3KB3wkcFxN
XaCfKCD+5KDp23gbW1SnGMoZV7OijJaLOUAIRT6EaMu1TdcpOrDbH8z1c9FFuaLR
TSLTtrygta2QxnagoEYide9wkd7lLpPEC6kCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRyLEI+8INyLeabGIbD+TEIBVtvgTAfBgNVHSMEGDAWgBTXmziQwto3lRSJdrlU
wgJAVnl1VDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODQwLzE1czRrTUxhTjVVVWlYYTVWTUlDUUZaNWRWUS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzE1czRrTUxhTjVVVWlYYTVWTUlDUUZa
NWRWUS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84NDAvY2l4Q1B2Q0RjaTNtbXhpR3dfa3hDQVZiYjRFLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBQ7AYDANBgkqhkiG9w0BAQsFAAOCAQEAbY77ZoXE/CljuPW2gzxY8X2gtzsu
NEg+GL2ZMbWYwqYnZwGjjWmqM5RWtlAolqURpkPSvmVF4m2qc7qql0812DUxM2iI
416DmKceYmG2Myah/aDjqpjEU7AmVCh0nxEk9GFcFoot+WCGmPmI23MRINbPOAp9
GMpf5arrpIDc6DImjTlRhZeQP1vzw1Hmys2+rDCbbfXGnpxu/7j8FRjyfZTCWue4
Qi8reAXhSow/HYqg/OWmsHUUgqrAsr4UXfVjL1JHndGPGjX530iwp+X5S1EEqVhE
/D0Omv2cRe4uhW9zsMMTcMFVL0DUfd7ZrEbfH8Xe2tcIqAbvVr5XEo0VPw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org