Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/efA59LCbrKSya2boudr8WrXcgtE.roa
File:                     efA59LCbrKSya2boudr8WrXcgtE.roa (raw, json)
Hash identifier:          QqOasjZURZvP/s72slmFFF+H2UTqlq0/X0RD4/tbjSw=
Subject key identifier:   79:F0:39:F4:B0:9B:AC:A4:B2:6B:66:E8:B9:DA:FC:5A:B5:DC:82:D1
Certificate issuer:       /CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Certificate serial:       56
Authority key identifier: AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/efA59LCbrKSya2boudr8WrXcgtE.roa
Signing time:             Wed 04 Jan 2023 08:22:27 +0000
ROA not before:           Wed 04 Jan 2023 08:22:27 +0000
ROA not after:            Fri 15 Dec 2023 01:30:02 +0000
asID:                     9621
IP address blocks:        125.2.224.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
        Validity
            Not Before: Jan  4 08:22:27 2023 GMT
            Not After : Dec 15 01:30:02 2023 GMT
        Subject: CN=79F039F4B09BACA4B26B66E8B9DAFC5AB5DC82D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:29:b6:be:c0:f5:61:6a:cc:f5:12:7e:ae:86:
                    9b:ad:bd:41:f6:07:dc:d7:a2:9f:04:04:14:1e:fe:
                    5e:2c:7c:db:bc:23:49:b7:78:7b:b5:b3:b5:40:ff:
                    02:4d:82:7c:25:c2:c7:a0:92:bd:04:b5:bc:7b:3c:
                    a8:cb:1e:83:6c:62:64:71:f5:26:f5:d9:f8:be:9c:
                    68:9b:07:be:00:36:6e:b7:4d:82:a8:5a:54:61:3d:
                    be:50:1d:d0:aa:69:12:0c:27:36:7f:43:96:90:b9:
                    8f:e4:42:3e:5c:c1:df:cf:6c:3f:7d:43:26:8e:18:
                    61:d6:71:1d:bc:4a:06:f8:cf:7d:76:53:a9:17:68:
                    94:9c:16:0f:7f:2f:60:d1:1f:0b:08:c8:0b:fc:fa:
                    7e:ff:41:1a:b4:b0:88:07:7b:1e:e2:e1:2b:21:f5:
                    d7:d2:48:d3:96:f1:5b:30:f1:db:71:cd:b4:93:3f:
                    ac:3b:7e:28:47:da:a2:b3:ae:36:34:0a:6f:eb:f0:
                    ea:63:14:51:eb:43:9f:0d:f9:68:ee:b5:44:0a:cd:
                    fb:67:13:73:32:40:87:50:8c:aa:da:25:22:a2:9c:
                    e7:ee:f0:2a:b7:21:f7:af:b4:86:1d:0d:4f:27:bb:
                    86:8c:d9:01:15:e1:8e:cb:fc:33:16:2e:6e:8c:04:
                    65:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:F0:39:F4:B0:9B:AC:A4:B2:6B:66:E8:B9:DA:FC:5A:B5:DC:82:D1
            X509v3 Authority Key Identifier:
                keyid:AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/efA59LCbrKSya2boudr8WrXcgtE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.2.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         94:c2:25:c1:aa:dd:0c:6c:4c:66:42:25:75:26:ca:09:c0:36:
         fe:77:64:72:88:e7:56:e9:59:bd:5c:c2:26:a3:6e:7f:fc:05:
         a8:86:22:b0:81:b1:49:42:23:9c:6b:ab:09:13:6f:9f:3d:04:
         9f:08:ca:2a:89:c8:ea:dc:fa:8a:29:7e:00:e9:db:94:56:88:
         ac:27:5f:53:82:2b:e8:99:83:99:d1:4d:0b:a3:4d:3c:3d:4d:
         5b:2f:f3:94:1b:24:35:0b:a6:6b:1a:6a:85:0a:fc:4f:d1:f8:
         5a:81:83:60:b3:a8:cd:d0:44:69:32:30:aa:24:4b:12:da:a5:
         97:2b:6c:c5:bb:ea:f3:69:41:55:f1:16:ff:f6:d2:f6:33:3d:
         7d:1c:a3:06:ac:08:66:81:9d:e8:29:bb:dd:30:47:fe:15:f0:
         9d:72:7d:de:3f:2e:3e:a4:c9:39:d9:8a:f6:9b:bc:86:3b:3f:
         5b:62:1e:66:14:86:be:9e:db:c8:f1:23:4b:36:8f:a2:02:53:
         ca:9e:04:cc:31:6d:5f:61:bc:ef:33:0c:87:60:24:29:4d:31:
         a8:f3:55:a1:57:ad:f6:37:91:30:c6:f1:e1:39:d5:07:3f:2f:
         42:73:2f:d3:64:03:5e:ff:45:e9:26:43:a0:b3:10:2c:1c:5e:
         02:31:b5:e7
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBVjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBQTA4
MDk3QzYwNjA3MTAyODBDREFBQTRFN0UwNkMxRjEzQ0QxNkYyMB4XDTIzMDEwNDA4
MjIyN1oXDTIzMTIxNTAxMzAwMlowMzExMC8GA1UEAxMoNzlGMDM5RjRCMDlCQUNB
NEIyNkI2NkU4QjlEQUZDNUFCNURDODJEMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKwptr7A9WFqzPUSfq6Gm629QfYH3NeinwQEFB7+Xix827wjSbd4
e7WztUD/Ak2CfCXCx6CSvQS1vHs8qMseg2xiZHH1JvXZ+L6caJsHvgA2brdNgqha
VGE9vlAd0KppEgwnNn9DlpC5j+RCPlzB389sP31DJo4YYdZxHbxKBvjPfXZTqRdo
lJwWD38vYNEfCwjIC/z6fv9BGrSwiAd7HuLhKyH119JI05bxWzDx23HNtJM/rDt+
KEfaorOuNjQKb+vw6mMUUetDnw35aO61RArN+2cTczJAh1CMqtolIqKc5+7wKrch
96+0hh0NTye7hozZARXhjsv8MxYubowEZbkCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBR58Dn0sJuspLJrZui52vxatdyC0TAfBgNVHSMEGDAWgBSqCAl8YGBxAoDNqqTn
4GwfE80W8jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODk3L3FnZ0pmR0JnY1FLQXphcWs1LUJzSHhQTkZ2SS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3FnZ0pmR0JnY1FLQXphcWs1LUJzSHhQ
TkZ2SS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84OTcvZWZBNTlMQ2JyS1N5YTJib3VkcjhXclhjZ3RFLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBX0C4DANBgkqhkiG9w0BAQsFAAOCAQEAlMIlwardDGxMZkIldSbKCcA2/ndk
cojnVulZvVzCJqNuf/wFqIYisIGxSUIjnGurCRNvnz0EnwjKKonI6tz6iil+AOnb
lFaIrCdfU4Ir6JmDmdFNC6NNPD1NWy/zlBskNQumaxpqhQr8T9H4WoGDYLOozdBE
aTIwqiRLEtqllytsxbvq82lBVfEW//bS9jM9fRyjBqwIZoGd6Cm73TBH/hXwnXJ9
3j8uPqTJOdmK9pu8hjs/W2IeZhSGvp7byPEjSzaPogJTyp4EzDFtX2G87zMMh2Ak
KU0xqPNVoVet9jeRMMbx4TnVBz8vQnMv02QDXv9F6SZDoLMQLBxeAjG15w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org