Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/859/pKOAlMV-psx5Za-r3LNWwVHHzh4.roa
File:                     pKOAlMV-psx5Za-r3LNWwVHHzh4.roa (raw, json)
Hash identifier:          bPulK/wCkFRPoQ2aclJZNZ8eisNiE6co1bDjJsVXVDE=
Subject key identifier:   A4:A3:80:94:C5:7E:A6:CC:79:65:AF:AB:DC:B3:56:C1:51:C7:CE:1E
Certificate issuer:       /CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
Certificate serial:       19
Authority key identifier: 3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/pKOAlMV-psx5Za-r3LNWwVHHzh4.roa
Signing time:             Mon 13 Jun 2022 06:20:47 +0000
ROA not before:           Mon 13 Jun 2022 06:20:47 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     23778
IP address blocks:        210.235.40.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
        Validity
            Not Before: Jun 13 06:20:47 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=A4A38094C57EA6CC7965AFABDCB356C151C7CE1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:65:65:f2:b6:ff:96:a9:98:7a:af:29:6a:3a:
                    a9:40:20:4b:e8:5d:cb:20:d2:11:8a:b3:c8:7b:34:
                    fc:19:21:ec:7d:d3:e9:15:8d:b0:d9:a3:8d:af:7c:
                    00:b9:cf:81:2c:6d:e2:4c:ec:cc:fb:34:a0:6b:d2:
                    b7:bd:7c:67:5f:c4:48:52:7d:bc:7e:c8:ff:90:b9:
                    0e:95:70:44:a7:6c:54:93:f6:ee:43:f0:70:62:b6:
                    f7:e6:5d:af:75:f2:ea:0e:74:f7:5d:d7:4e:01:22:
                    07:8b:b9:c3:58:db:04:6a:f3:1a:46:aa:16:13:e7:
                    19:17:ff:54:aa:cf:77:9b:02:6c:77:d2:bb:ba:0e:
                    92:7f:17:54:f9:05:39:a5:87:7e:c1:cc:19:5d:7a:
                    9d:44:99:6c:37:8f:ae:4d:49:cf:ab:f1:2c:88:42:
                    32:10:4e:ed:da:23:f1:21:9a:9d:f9:eb:4b:05:e5:
                    71:04:01:65:86:d6:53:3d:8b:6c:7b:55:6b:22:3f:
                    4f:6b:5e:72:62:1c:b7:67:ac:f6:8e:f5:02:bf:6d:
                    df:9c:e4:86:90:a2:3e:ec:6d:8a:d6:a2:de:59:62:
                    e4:1c:57:e4:e0:59:11:a0:c5:78:44:53:6d:93:2f:
                    58:15:1d:12:e6:80:ea:f5:91:6d:9f:6a:bd:b8:e5:
                    9b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A3:80:94:C5:7E:A6:CC:79:65:AF:AB:DC:B3:56:C1:51:C7:CE:1E
            X509v3 Authority Key Identifier:
                keyid:3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/pKOAlMV-psx5Za-r3LNWwVHHzh4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.235.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         52:c0:49:85:5e:15:75:4b:29:c4:23:9c:53:32:9f:8a:1a:ca:
         e9:45:91:1c:b0:c8:a2:fe:ff:1f:93:bf:9d:c4:d1:3c:2a:23:
         7c:95:9c:9a:e9:1c:20:07:f7:c8:e9:1e:5b:03:2f:95:31:15:
         2b:a3:be:a9:48:90:fc:b6:e5:46:6e:0d:04:09:7a:4d:57:f0:
         35:fc:09:74:c5:eb:d5:af:fe:1f:a3:67:46:71:a6:18:7e:e8:
         4b:82:42:e4:68:19:86:62:ea:27:53:18:85:62:3d:be:44:cd:
         27:1b:ff:a5:53:df:7d:eb:04:d1:20:8f:9e:37:34:40:e4:ec:
         7d:d8:5c:a8:0c:e6:f1:e6:cd:1e:05:d2:21:95:b4:61:7b:5d:
         f1:56:38:9e:fc:ee:59:5a:45:57:20:11:05:28:d5:4a:70:ab:
         5f:19:fb:f0:42:3d:5b:c6:b5:82:ee:c6:f6:46:04:8b:77:bf:
         40:09:54:74:60:b5:bf:82:ad:81:93:a6:e0:1d:3f:23:7a:0a:
         f9:71:0f:d1:49:7d:b1:a4:f3:33:62:0a:75:48:5c:a9:27:3d:
         33:53:ba:a2:7f:de:3f:5b:52:2f:71:02:4e:ac:82:8c:24:8d:
         97:10:1c:b2:61:c6:d7:a1:f9:bf:8b:c3:e2:f9:aa:66:21:d4:
         0b:a9:54:2a
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBGTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzRjkw
RjJGQkNBQTI1MzhDQTY1NzRGQjIyRDhDNkVCM0U5Q0EwNDZCMB4XDTIyMDYxMzA2
MjA0N1oXDTIzMDUxNTAxMzAwNFowMzExMC8GA1UEAxMoQTRBMzgwOTRDNTdFQTZD
Qzc5NjVBRkFCRENCMzU2QzE1MUM3Q0UxRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL5lZfK2/5apmHqvKWo6qUAgS+hdyyDSEYqzyHs0/Bkh7H3T6RWN
sNmjja98ALnPgSxt4kzszPs0oGvSt718Z1/ESFJ9vH7I/5C5DpVwRKdsVJP27kPw
cGK29+Zdr3Xy6g50913XTgEiB4u5w1jbBGrzGkaqFhPnGRf/VKrPd5sCbHfSu7oO
kn8XVPkFOaWHfsHMGV16nUSZbDePrk1Jz6vxLIhCMhBO7doj8SGanfnrSwXlcQQB
ZYbWUz2LbHtVayI/T2tecmIct2es9o71Ar9t35zkhpCiPuxtitai3lli5BxX5OBZ
EaDFeERTbZMvWBUdEuaA6vWRbZ9qvbjlm3ECAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSko4CUxX6mzHllr6vcs1bBUcfOHjAfBgNVHSMEGDAWgBQ/kPL7yqJTjKZXT7It
jG6z6coEazAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODU5L1A1RHktOHFpVTR5bVYwLXlMWXh1cy1uS0JHcy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1A1RHktOHFpVTR5bVYwLXlMWXh1cy1u
S0JHcy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84NTkvcEtPQWxNVi1wc3g1WmEtcjNMTld3VkhIemg0LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA9LrKDANBgkqhkiG9w0BAQsFAAOCAQEAUsBJhV4VdUspxCOcUzKfihrK6UWR
HLDIov7/H5O/ncTRPCojfJWcmukcIAf3yOkeWwMvlTEVK6O+qUiQ/LblRm4NBAl6
TVfwNfwJdMXr1a/+H6NnRnGmGH7oS4JC5GgZhmLqJ1MYhWI9vkTNJxv/pVPffesE
0SCPnjc0QOTsfdhcqAzm8ebNHgXSIZW0YXtd8VY4nvzuWVpFVyARBSjVSnCrXxn7
8EI9W8a1gu7G9kYEi3e/QAlUdGC1v4KtgZOm4B0/I3oK+XEP0Ul9saTzM2IKdUhc
qSc9M1O6on/eP1tSL3ECTqyCjCSNlxAcsmHG16H5v4vD4vmqZiHUC6lUKg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org