Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/868/OMgchmGQpAnVsU74NE0GOuXXbRE.roa
File:                     OMgchmGQpAnVsU74NE0GOuXXbRE.roa (raw, json)
Hash identifier:          NkeB4/H2podKFbYRN3UdZ9Hp+lrAlRTyTr4zcbat1cw=
Subject key identifier:   38:C8:1C:86:61:90:A4:09:D5:B1:4E:F8:34:4D:06:3A:E5:D7:6D:11
Certificate issuer:       /CN=8D0962EDE0F5E21A7E8F9E1AB006FF940E04ED46
Certificate serial:       0D
Authority key identifier: 8D:09:62:ED:E0:F5:E2:1A:7E:8F:9E:1A:B0:06:FF:94:0E:04:ED:46
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQli7eD14hp-j54asAb_lA4E7UY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/OMgchmGQpAnVsU74NE0GOuXXbRE.roa
Signing time:             Tue 31 May 2022 01:44:40 +0000
ROA not before:           Tue 31 May 2022 01:44:40 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     24271
IP address blocks:        202.177.112.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D0962EDE0F5E21A7E8F9E1AB006FF940E04ED46
        Validity
            Not Before: May 31 01:44:40 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=38C81C866190A409D5B14EF8344D063AE5D76D11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9f:31:d0:cf:d2:f9:d0:de:68:12:bd:23:49:
                    c1:fa:12:08:38:b2:b4:54:7e:3c:fe:2a:88:bc:b3:
                    3e:d3:d7:62:91:13:1b:6b:36:2c:da:d3:ae:70:3c:
                    1c:20:84:a2:00:47:1d:26:a9:67:93:5c:75:cf:dd:
                    a6:34:4d:91:c2:e0:a1:20:c1:9b:b7:a6:8e:eb:4a:
                    7c:d1:63:10:6a:d9:8c:95:cc:a5:e8:ae:fe:ad:b9:
                    31:da:dd:a9:54:9c:c7:dc:57:da:45:d2:f0:48:8b:
                    97:1b:67:89:12:a1:c5:9e:bd:ec:99:89:94:22:4c:
                    a1:c4:a4:e7:38:a4:3d:f0:1e:14:72:df:d6:1f:bc:
                    4a:22:21:31:70:64:d0:a8:dd:34:70:90:d9:e5:45:
                    f5:1b:7f:62:0b:2f:32:35:14:e5:38:88:81:84:7d:
                    e8:a8:08:de:8b:6c:f2:70:c8:0d:ab:4b:05:62:7b:
                    22:8c:0f:19:e2:b8:60:c1:8d:ed:e5:3e:5f:82:82:
                    ee:51:d9:9a:2b:4c:a6:f6:9c:1e:97:b9:3a:48:b6:
                    25:f3:09:10:97:37:e7:52:e7:6f:e6:57:0f:fd:8e:
                    ba:9b:16:aa:e0:aa:5a:72:f9:96:ef:bb:bc:df:c4:
                    79:d1:f4:90:87:a8:95:2c:12:29:96:dc:92:4e:de:
                    f3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C8:1C:86:61:90:A4:09:D5:B1:4E:F8:34:4D:06:3A:E5:D7:6D:11
            X509v3 Authority Key Identifier:
                keyid:8D:09:62:ED:E0:F5:E2:1A:7E:8F:9E:1A:B0:06:FF:94:0E:04:ED:46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/jQli7eD14hp-j54asAb_lA4E7UY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQli7eD14hp-j54asAb_lA4E7UY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/OMgchmGQpAnVsU74NE0GOuXXbRE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.177.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         60:95:c0:68:da:5e:6e:57:d3:67:eb:46:ac:66:52:6a:72:d8:
         51:b5:ab:a9:a6:ad:60:56:4e:0e:87:92:31:69:2d:14:05:77:
         d3:92:ed:1d:8a:ca:d6:a8:b7:0b:44:b4:8b:00:e3:f4:4a:77:
         3e:b4:2c:e1:df:01:a9:d6:f2:5b:2a:a2:96:3f:e3:ac:3f:f2:
         e9:95:47:d7:8b:30:0a:61:d2:1b:66:8d:a0:b4:e2:3c:81:c0:
         35:30:4a:f2:a2:b9:a6:7a:16:cd:36:13:2d:3c:ee:75:6d:de:
         7f:52:da:49:10:43:16:c0:d3:93:7e:d4:e2:35:86:3a:1d:f4:
         a8:d2:78:20:35:88:80:82:b3:2d:4a:c8:03:73:b9:cc:43:60:
         f4:c0:ad:c3:12:2a:fe:70:dc:54:35:3e:71:a1:96:52:85:f6:
         b8:e6:8d:65:69:05:12:84:32:af:38:60:42:6e:a3:f1:a8:8e:
         c3:1f:fd:79:d5:bc:8e:84:e0:f7:74:2c:69:1e:66:ec:4e:74:
         01:9a:5c:dc:5a:2b:f0:d6:6e:fe:76:50:b5:8e:f6:64:02:bc:
         36:b1:f7:93:3d:68:ca:1f:c4:ba:63:bd:5b:55:be:03:d0:a5:
         21:b5:7f:e5:e6:d9:bc:f8:c9:29:9a:5b:80:de:fa:3e:1a:6b:
         f3:8c:f8:b1
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBDTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDA5
NjJFREUwRjVFMjFBN0U4RjlFMUFCMDA2RkY5NDBFMDRFRDQ2MB4XDTIyMDUzMTAx
NDQ0MFoXDTIzMDUxNTAxMzAwNFowMzExMC8GA1UEAxMoMzhDODFDODY2MTkwQTQw
OUQ1QjE0RUY4MzQ0RDA2M0FFNUQ3NkQxMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANWfMdDP0vnQ3mgSvSNJwfoSCDiytFR+PP4qiLyzPtPXYpETG2s2
LNrTrnA8HCCEogBHHSapZ5Ncdc/dpjRNkcLgoSDBm7emjutKfNFjEGrZjJXMpeiu
/q25MdrdqVScx9xX2kXS8EiLlxtniRKhxZ697JmJlCJMocSk5zikPfAeFHLf1h+8
SiIhMXBk0KjdNHCQ2eVF9Rt/YgsvMjUU5TiIgYR96KgI3ots8nDIDatLBWJ7IowP
GeK4YMGN7eU+X4KC7lHZmitMpvacHpe5Oki2JfMJEJc351Lnb+ZXD/2OupsWquCq
WnL5lu+7vN/EedH0kIeolSwSKZbckk7e868CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQ4yByGYZCkCdWxTvg0TQY65ddtETAfBgNVHSMEGDAWgBSNCWLt4PXiGn6Pnhqw
Bv+UDgTtRjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODY4L2pRbGk3ZUQxNGhwLWo1NGFzQWJfbEE0RTdVWS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pRbGk3ZUQxNGhwLWo1NGFzQWJfbEE0
RTdVWS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84NjgvT01nY2htR1FwQW5Wc1U3NE5FMEdPdVhYYlJFLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBMqxcDANBgkqhkiG9w0BAQsFAAOCAQEAYJXAaNpeblfTZ+tGrGZSanLYUbWr
qaatYFZODoeSMWktFAV305LtHYrK1qi3C0S0iwDj9Ep3PrQs4d8BqdbyWyqilj/j
rD/y6ZVH14swCmHSG2aNoLTiPIHANTBK8qK5pnoWzTYTLTzudW3ef1LaSRBDFsDT
k37U4jWGOh30qNJ4IDWIgIKzLUrIA3O5zENg9MCtwxIq/nDcVDU+caGWUoX2uOaN
ZWkFEoQyrzhgQm6j8aiOwx/9edW8joTg93QsaR5m7E50AZpc3For8NZu/nZQtY72
ZAK8NrH3kz1oyh/EumO9W1W+A9ClIbV/5ebZvPjJKZpbgN76Phpr84z4sQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:11 2023 by rpki-client on console-fra.rpki-client.org