Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/6Hz3NE8tPdGuyrFY-ZpC83wBEQI.roa
File:                     6Hz3NE8tPdGuyrFY-ZpC83wBEQI.roa (raw, json)
Hash identifier:          4WeqWZ0O2fYOHyWGqe5KF7QGeDD4/eOl5nGcJpxlxHU=
Subject key identifier:   E8:7C:F7:34:4F:2D:3D:D1:AE:CA:B1:58:F9:9A:42:F3:7C:01:11:02
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       015B
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/6Hz3NE8tPdGuyrFY-ZpC83wBEQI.roa
Signing time:             Mon 01 May 2023 01:28:18 +0000
ROA not before:           Mon 01 May 2023 01:28:18 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     4713
IP address blocks:        114.144.0.0/12 maxlen: 12

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 347 (0x15b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  1 01:28:18 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=E87CF7344F2D3DD1AECAB158F99A42F37C011102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:47:46:8b:a2:42:cd:c6:e8:6a:83:7c:17:ec:
                    60:a9:f6:66:67:a1:48:27:3b:2a:f5:bd:02:82:49:
                    75:05:22:4a:fc:af:65:ac:a9:33:9b:71:c6:81:6a:
                    9e:9d:62:c4:58:d8:31:a7:5a:b2:c5:7b:b7:76:a1:
                    35:2d:9b:9e:11:fe:d8:c1:a7:b3:40:ee:d2:11:a0:
                    bb:4e:c4:53:37:15:2e:9a:9a:1e:e2:10:39:5d:6a:
                    25:44:11:a6:8e:ef:fd:88:f5:c7:a5:41:59:bf:02:
                    d3:5e:dc:2f:40:e6:6b:bb:9d:6d:72:a8:13:20:82:
                    d1:6e:29:d5:be:2a:2e:21:01:fc:d6:e2:eb:c4:61:
                    9d:3b:24:36:af:a6:9c:88:4b:93:08:86:ae:31:45:
                    9b:c2:48:8e:35:6a:5a:da:eb:b1:20:fc:6e:cd:35:
                    33:9b:4f:ba:d5:e4:16:92:c7:81:81:b4:f6:37:f3:
                    fd:3f:70:70:ec:33:9b:17:b6:15:ed:7e:dd:54:dc:
                    87:3d:bf:ba:71:9e:e4:57:f7:38:3f:c0:e3:a6:57:
                    95:10:69:f3:d8:b2:af:62:46:4d:2e:93:f5:54:a6:
                    a7:76:14:ae:89:5e:61:c7:4a:f0:a3:d0:32:be:9d:
                    f6:43:b2:38:13:31:be:34:16:a9:08:70:0f:31:8a:
                    09:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:7C:F7:34:4F:2D:3D:D1:AE:CA:B1:58:F9:9A:42:F3:7C:01:11:02
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/6Hz3NE8tPdGuyrFY-ZpC83wBEQI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.144.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         b7:d0:5f:da:2c:48:d1:0e:49:56:cb:c8:69:86:46:70:a0:45:
         d9:d7:fd:b2:f4:29:3c:11:97:cc:08:fe:a7:32:d4:94:5b:bd:
         ad:72:34:02:04:f4:a9:e5:78:d4:e0:16:40:3b:e7:16:34:ee:
         19:18:bd:7c:fe:3b:03:d1:8e:09:0b:b9:1a:d1:d4:34:5f:e0:
         b4:69:a7:4e:17:5d:42:66:a3:f1:af:2b:6e:43:1d:7e:8f:bd:
         6d:0d:82:06:eb:38:f3:6e:df:8f:52:1b:23:50:4b:53:4b:3e:
         23:01:2a:b9:c8:37:e3:4b:fd:29:86:99:bc:db:06:ff:f6:8a:
         61:cf:81:f1:c9:10:3a:f6:f9:2c:5b:cf:7c:7f:f4:6d:d6:dc:
         eb:93:2b:19:9f:47:08:5c:85:72:0b:dc:d9:e4:2f:5e:31:36:
         09:42:10:ea:82:7b:b3:d7:38:46:6a:21:f0:44:ba:e6:3f:8c:
         23:1a:0e:8f:80:21:57:32:65:78:77:43:da:33:59:47:f9:76:
         26:86:26:51:c0:35:f4:cc:4c:36:a7:74:34:b4:e2:f9:5b:99:
         8b:a2:4c:88:f0:e2:bd:bd:f9:73:36:74:53:d8:9e:b8:05:fb:
         27:fd:67:6c:19:44:18:52:b2:cb:f8:08:df:66:b1:3d:eb:5a:
         ee:86:70:d2
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAVswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yMzA1MDEw
MTI4MThaFw0yNDA0MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEU4N0NGNzM0NEYyRDNE
RDFBRUNBQjE1OEY5OUE0MkYzN0MwMTExMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVR0aLokLNxuhqg3wX7GCp9mZnoUgnOyr1vQKCSXUFIkr8r2Ws
qTObccaBap6dYsRY2DGnWrLFe7d2oTUtm54R/tjBp7NA7tIRoLtOxFM3FS6amh7i
EDldaiVEEaaO7/2I9celQVm/AtNe3C9A5mu7nW1yqBMggtFuKdW+Ki4hAfzW4uvE
YZ07JDavppyIS5MIhq4xRZvCSI41alra67Eg/G7NNTObT7rV5BaSx4GBtPY38/0/
cHDsM5sXthXtft1U3Ic9v7pxnuRX9zg/wOOmV5UQafPYsq9iRk0uk/VUpqd2FK6J
XmHHSvCj0DK+nfZDsjgTMb40FqkIcA8xiglHAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQU6Hz3NE8tPdGuyrFY+ZpC83wBEQIwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTMxLzZIejNORTh0UGRHdXlyRlktWnBDODN3QkVRSS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwRykDANBgkqhkiG9w0BAQsFAAOCAQEAt9Bf2ixI0Q5JVsvIaYZGcKBF2df9
svQpPBGXzAj+pzLUlFu9rXI0AgT0qeV41OAWQDvnFjTuGRi9fP47A9GOCQu5GtHU
NF/gtGmnThddQmaj8a8rbkMdfo+9bQ2CBus4827fj1IbI1BLU0s+IwEqucg340v9
KYaZvNsG//aKYc+B8ckQOvb5LFvPfH/0bdbc65MrGZ9HCFyFcgvc2eQvXjE2CUIQ
6oJ7s9c4Rmoh8ES65j+MIxoOj4AhVzJleHdD2jNZR/l2JoYmUcA19MxMNqd0NLTi
+VuZi6JMiPDivb35czZ0U9ieuAX7J/1nbBlEGFKyy/gI32axPeta7oZw0g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org