Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/972/DVXtLsYExq_ukvGCaP_WUC0o_r4.roa
File:                     DVXtLsYExq_ukvGCaP_WUC0o_r4.roa (raw, json)
Hash identifier:          qJ5vJaZ/Td0JEEcXWOJBj8aWFMlrv++PTLdkeeWkSSA=
Subject key identifier:   0D:55:ED:2E:C6:04:C6:AF:EE:92:F1:82:68:FF:D6:50:2D:28:FE:BE
Certificate issuer:       /CN=5F3E33AA6F92A837FA8944AB83627D3B44E0CF4A
Certificate serial:       24
Authority key identifier: 5F:3E:33:AA:6F:92:A8:37:FA:89:44:AB:83:62:7D:3B:44:E0:CF:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/972/DVXtLsYExq_ukvGCaP_WUC0o_r4.roa
Signing time:             Sat 01 Oct 2022 01:29:47 +0000
ROA not before:           Sat 01 Oct 2022 01:29:47 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     38651
IP address blocks:        110.44.176.0/21 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F3E33AA6F92A837FA8944AB83627D3B44E0CF4A
        Validity
            Not Before: Oct  1 01:29:47 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=0D55ED2EC604C6AFEE92F18268FFD6502D28FEBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a9:99:63:c4:f1:e1:ed:48:97:82:a4:a5:ce:
                    3e:71:da:81:44:53:d8:d8:65:96:08:e5:18:33:96:
                    54:57:eb:9b:95:91:df:8d:1f:3e:b9:ed:e0:2a:85:
                    df:78:eb:a0:40:bb:7a:19:50:97:3a:9e:a5:31:98:
                    17:af:69:f4:f8:ae:d2:75:6d:10:53:44:69:e2:5a:
                    e1:83:7e:39:32:27:39:63:73:73:13:7f:3c:1d:73:
                    4a:2a:08:3d:ca:35:4a:7c:67:13:1b:39:10:6d:2d:
                    15:a3:31:a6:bd:ac:21:a8:6c:3c:11:1e:1b:75:8c:
                    2c:a0:1a:54:85:ba:f1:49:e4:fd:65:74:8c:04:47:
                    1d:b8:4c:0d:14:8c:2d:a8:0a:a0:c7:44:b6:3b:ef:
                    aa:74:fe:78:74:29:0d:86:74:9f:cf:50:cf:34:df:
                    18:a2:c2:9d:06:06:d3:2d:2e:1b:53:10:c3:61:ab:
                    d1:8b:ac:82:7f:6b:e2:3d:84:13:a3:b7:43:6f:80:
                    f2:10:e4:aa:55:37:89:06:73:6f:11:ea:cb:60:fb:
                    fa:9e:7c:63:bd:b3:6c:92:47:a5:cc:99:97:c2:e3:
                    9f:05:00:dc:6e:ba:1c:fb:06:f4:00:f3:6d:95:96:
                    38:47:87:de:83:c0:46:76:a5:f0:b2:13:b0:f4:d3:
                    c1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:55:ED:2E:C6:04:C6:AF:EE:92:F1:82:68:FF:D6:50:2D:28:FE:BE
            X509v3 Authority Key Identifier:
                keyid:5F:3E:33:AA:6F:92:A8:37:FA:89:44:AB:83:62:7D:3B:44:E0:CF:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/972/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/972/DVXtLsYExq_ukvGCaP_WUC0o_r4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.44.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         75:8f:4c:ae:6d:c9:f1:80:1b:a2:e7:f2:c9:0c:72:d5:f9:72:
         1b:b6:dd:e8:bc:9b:85:e7:93:d5:f8:74:50:60:c7:d1:98:99:
         40:62:93:fa:e1:b3:56:00:60:7b:f0:e5:28:73:99:7e:d4:73:
         a4:cd:62:2b:86:ef:18:2b:83:c3:00:d5:15:18:6e:71:b8:d1:
         b8:57:fb:1f:90:a8:a7:a5:82:98:ae:43:9b:09:e5:c1:93:df:
         ca:13:f6:18:03:a3:5f:f6:aa:89:32:9a:35:97:ff:8c:c8:73:
         d5:65:73:60:88:ee:49:2f:5d:c3:7a:8e:5c:be:a5:54:b8:2f:
         e1:88:f4:c5:b0:d0:68:ab:24:49:20:35:23:61:aa:79:dd:df:
         02:54:ae:bd:62:c5:ae:0d:9f:8e:86:db:a1:8c:55:cf:01:48:
         65:79:0b:35:79:c8:5a:7f:b8:cc:4d:79:97:47:8a:46:8e:6a:
         79:a0:87:61:bb:57:65:62:92:f0:2f:05:fa:41:0a:f7:e1:9b:
         b0:72:08:4e:7e:dd:33:05:e0:d1:d7:db:32:87:b5:3b:0c:0a:
         48:3f:85:33:b9:0f:86:9b:fb:ab:2e:c3:a4:1d:e3:a1:4b:cf:
         66:36:d4:e3:57:ee:00:b1:1c:ce:1b:10:06:81:fe:d4:f0:ba:
         ad:b3:7e:2b
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBJDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1RjNF
MzNBQTZGOTJBODM3RkE4OTQ0QUI4MzYyN0QzQjQ0RTBDRjRBMB4XDTIyMTAwMTAx
Mjk0N1oXDTIzMDkxNTAxMzAwM1owMzExMC8GA1UEAxMoMEQ1NUVEMkVDNjA0QzZB
RkVFOTJGMTgyNjhGRkQ2NTAyRDI4RkVCRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK6pmWPE8eHtSJeCpKXOPnHagURT2NhllgjlGDOWVFfrm5WR340f
Prnt4CqF33jroEC7ehlQlzqepTGYF69p9Piu0nVtEFNEaeJa4YN+OTInOWNzcxN/
PB1zSioIPco1SnxnExs5EG0tFaMxpr2sIahsPBEeG3WMLKAaVIW68Unk/WV0jARH
HbhMDRSMLagKoMdEtjvvqnT+eHQpDYZ0n89QzzTfGKLCnQYG0y0uG1MQw2Gr0Yus
gn9r4j2EE6O3Q2+A8hDkqlU3iQZzbxHqy2D7+p58Y72zbJJHpcyZl8LjnwUA3G66
HPsG9ADzbZWWOEeH3oPARnal8LITsPTTwS8CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQNVe0uxgTGr+6S8YJo/9ZQLSj+vjAfBgNVHSMEGDAWgBRfPjOqb5KoN/qJRKuD
Yn07RODPSjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTcyL1h6NHpxbS1TcURmNmlVU3JnMko5TzBUZ3owby5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1h6NHpxbS1TcURmNmlVU3JnMko5TzBU
Z3owby5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85NzIvRFZYdExzWUV4cV91a3ZHQ2FQX1dVQzBvX3I0LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA24ssDANBgkqhkiG9w0BAQsFAAOCAQEAdY9Mrm3J8YAboufyyQxy1flyG7bd
6LybheeT1fh0UGDH0ZiZQGKT+uGzVgBge/DlKHOZftRzpM1iK4bvGCuDwwDVFRhu
cbjRuFf7H5Cop6WCmK5DmwnlwZPfyhP2GAOjX/aqiTKaNZf/jMhz1WVzYIjuSS9d
w3qOXL6lVLgv4Yj0xbDQaKskSSA1I2Gqed3fAlSuvWLFrg2fjobboYxVzwFIZXkL
NXnIWn+4zE15l0eKRo5qeaCHYbtXZWKS8C8F+kEK9+GbsHIITn7dMwXg0dfbMoe1
OwwKSD+FM7kPhpv7qy7DpB3joUvPZjbU41fuALEczhsQBoH+1PC6rbN+Kw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org