Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/934/ZU2V__EbqIKq52kWa6KJiApGbPw.roa
File:                     ZU2V__EbqIKq52kWa6KJiApGbPw.roa (raw, json)
Hash identifier:          6Ox8W9k0V6bBB5sLLln1ISJ7Ah7K/OgL9rGtKpiCjvw=
Subject key identifier:   65:4D:95:FF:F1:1B:A8:82:AA:E7:69:16:6B:A2:89:88:0A:46:6C:FC
Certificate issuer:       /CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
Certificate serial:       39
Authority key identifier: 2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/ZU2V__EbqIKq52kWa6KJiApGbPw.roa
Signing time:             Sun 01 May 2022 01:31:17 +0000
ROA not before:           Sun 01 May 2022 01:31:17 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     37892
IP address blocks:        124.247.128.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
        Validity
            Not Before: May  1 01:31:17 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=654D95FFF11BA882AAE769166BA289880A466CFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:10:f0:2d:35:05:c7:3a:6d:65:0c:32:30:5c:
                    60:70:30:a6:63:e3:21:23:32:fc:0d:ba:55:5e:7a:
                    06:c5:a2:4a:04:93:e8:e4:bc:b7:13:64:86:6c:73:
                    f8:ef:72:99:8a:a8:9c:52:2c:f1:c6:98:0d:ad:be:
                    95:8d:a6:35:34:cd:10:cb:f6:2a:a3:59:84:8c:32:
                    7b:83:b7:64:ca:03:77:e3:08:8d:b1:91:aa:b6:aa:
                    3d:3d:8b:d1:c7:a7:4a:fe:07:06:e0:0c:97:a4:f5:
                    94:6c:ee:52:ea:d2:92:62:dc:86:af:72:ac:eb:c0:
                    ae:23:8f:a8:e0:8f:90:fa:ab:2a:74:7b:21:2f:43:
                    ec:c7:6d:fb:68:2a:3a:01:5e:dc:1b:f9:fe:da:e1:
                    ef:cd:a1:c5:72:7b:f6:07:26:b3:8d:16:cd:c1:b7:
                    1f:e9:73:ad:a2:41:ef:c2:86:c3:cb:8d:d5:39:71:
                    bb:51:6b:3e:d3:4a:e7:8b:5b:9a:35:54:c6:84:b5:
                    b5:73:69:55:78:99:d6:4d:39:aa:ec:ba:37:1e:5a:
                    12:79:17:99:2c:e3:d7:51:c1:63:6d:fb:b3:48:16:
                    74:70:f2:ac:2b:20:dc:1c:43:38:8c:c5:9e:9c:d5:
                    81:35:30:05:d1:a5:a3:55:56:7b:c2:94:38:ee:77:
                    5b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:4D:95:FF:F1:1B:A8:82:AA:E7:69:16:6B:A2:89:88:0A:46:6C:FC
            X509v3 Authority Key Identifier:
                keyid:2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/ZU2V__EbqIKq52kWa6KJiApGbPw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.247.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         c7:80:84:55:09:73:ff:86:1a:e4:55:69:ac:47:99:05:33:54:
         d2:11:8e:1a:55:a6:d2:3f:0d:32:49:0b:9c:9c:22:2d:b3:e9:
         5a:a8:80:11:ac:f2:72:af:a1:ac:30:fc:13:43:94:52:65:f2:
         85:49:02:7a:bc:94:55:06:e6:40:94:c1:3d:1b:4d:e0:d5:0b:
         4a:77:31:e6:87:cc:b3:e4:c5:c6:24:ee:14:1e:46:cd:66:b1:
         ac:da:d1:ad:90:11:8a:a7:3d:75:68:42:a7:ef:3f:36:03:aa:
         b0:c3:ce:7f:18:81:12:78:b0:4a:68:d1:3b:fa:02:65:cd:00:
         6f:ca:17:de:73:9d:b7:df:d9:78:20:a4:fb:fb:89:4e:e3:d3:
         a4:9e:29:7e:9d:7a:19:ce:5a:89:b9:5e:74:f4:84:1b:35:51:
         d4:55:09:a7:bc:4a:b6:a6:81:dd:29:e3:6f:a6:f1:c1:8e:06:
         02:32:7e:2c:b0:34:ce:a9:0f:25:d5:98:d0:4c:fe:18:e9:12:
         71:ee:7b:9b:a7:db:9f:77:c9:d8:e9:e2:1e:8e:da:99:7d:d1:
         33:23:bc:f3:c1:be:2b:21:9b:b5:15:01:0b:c0:58:26:c4:8e:
         9d:a1:3f:6f:7c:29:b4:10:72:cd:aa:2c:9f:82:66:73:f4:6c:
         bf:b9:dc:47
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBOTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyQTRD
RkU5MDlDQTU4MzA3RTdDQTg3MzVBRjI0NUQ3MThEOTlGN0ZCMB4XDTIyMDUwMTAx
MzExN1oXDTIzMDQyNzA5NTIzNFowMzExMC8GA1UEAxMoNjU0RDk1RkZGMTFCQTg4
MkFBRTc2OTE2NkJBMjg5ODgwQTQ2NkNGQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJcQ8C01Bcc6bWUMMjBcYHAwpmPjISMy/A26VV56BsWiSgST6OS8
txNkhmxz+O9ymYqonFIs8caYDa2+lY2mNTTNEMv2KqNZhIwye4O3ZMoDd+MIjbGR
qraqPT2L0cenSv4HBuAMl6T1lGzuUurSkmLchq9yrOvAriOPqOCPkPqrKnR7IS9D
7Mdt+2gqOgFe3Bv5/trh782hxXJ79gcms40WzcG3H+lzraJB78KGw8uN1Tlxu1Fr
PtNK54tbmjVUxoS1tXNpVXiZ1k05quy6Nx5aEnkXmSzj11HBY237s0gWdHDyrCsg
3BxDOIzFnpzVgTUwBdGlo1VWe8KUOO53WzMCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRlTZX/8RuogqrnaRZroomICkZs/DAfBgNVHSMEGDAWgBQqTP6QnKWDB+fKhzWv
JF1xjZn3+zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTM0L0trei1rSnlsZ3dmbnlvYzFyeVJkY1kyWjlfcy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0trei1rSnlsZ3dmbnlvYzFyeVJkY1ky
Wjlfcy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85MzQvWlUyVl9fRWJxSUtxNTJrV2E2S0ppQXBHYlB3LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBnz3gDANBgkqhkiG9w0BAQsFAAOCAQEAx4CEVQlz/4Ya5FVprEeZBTNU0hGO
GlWm0j8NMkkLnJwiLbPpWqiAEazycq+hrDD8E0OUUmXyhUkCeryUVQbmQJTBPRtN
4NULSncx5ofMs+TFxiTuFB5GzWaxrNrRrZARiqc9dWhCp+8/NgOqsMPOfxiBEniw
SmjRO/oCZc0Ab8oX3nOdt9/ZeCCk+/uJTuPTpJ4pfp16Gc5aibledPSEGzVR1FUJ
p7xKtqaB3Snjb6bxwY4GAjJ+LLA0zqkPJdWY0Ez+GOkSce57m6fbn3fJ2OniHo7a
mX3RMyO888G+KyGbtRUBC8BYJsSOnaE/b3wptBByzaosn4Jmc/Rsv7ncRw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org