Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/Si-Dxjs7xjsw8zWqNxgiz3rmLsE.roa
File:                     Si-Dxjs7xjsw8zWqNxgiz3rmLsE.roa (raw, json)
Hash identifier:          SQile+hPjF1S5kFFzS7Yd2Ajf57Rw/qnI16J/xwhqYo=
Subject key identifier:   4A:2F:83:C6:3B:3B:C6:3B:30:F3:35:AA:37:18:22:CF:7A:E6:2E:C1
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0150
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/Si-Dxjs7xjsw8zWqNxgiz3rmLsE.roa
Signing time:             Mon 01 May 2023 01:28:13 +0000
ROA not before:           Mon 01 May 2023 01:28:13 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     4713
IP address blocks:        211.130.128.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 336 (0x150)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  1 01:28:13 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=4A2F83C63B3BC63B30F335AA371822CF7AE62EC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:04:6b:70:4d:e8:6e:9f:34:ed:4f:dd:e0:31:
                    93:4b:7c:86:f7:f3:5a:b5:e6:f5:9a:7d:cf:f6:eb:
                    f8:7d:b6:ee:ca:66:04:25:63:c0:19:47:35:72:b6:
                    a2:b2:86:dd:1e:b9:98:8a:b0:be:01:6d:ba:8d:2c:
                    83:29:fc:ec:d3:ae:87:0c:9b:c1:09:4e:18:6f:44:
                    57:da:c5:51:7e:20:bb:a8:26:9f:ba:c6:c4:ca:d8:
                    a1:20:ff:6f:65:b3:c9:1f:ed:f3:bc:ff:7a:29:90:
                    c5:8e:68:35:30:e9:37:7e:28:4c:19:d7:b5:5e:07:
                    4f:40:47:43:e5:a3:7c:8d:b2:50:20:69:cd:b6:5e:
                    36:1b:b2:da:ab:39:11:bc:eb:cf:9a:77:0e:28:f5:
                    b2:ae:61:81:f6:41:f3:0b:90:37:91:7f:7c:d4:12:
                    9f:d8:d5:75:89:86:74:64:cf:18:a7:39:97:d8:9d:
                    2d:75:70:12:90:89:76:ff:07:47:f5:7a:0d:dd:ca:
                    82:9f:3a:69:ca:f1:d6:13:a6:90:7f:a6:d8:55:f1:
                    f5:81:5d:a0:9d:1e:2d:7a:5c:c0:a5:bf:41:52:49:
                    dc:32:b7:6e:a6:fc:25:7d:5f:54:b9:e8:f2:57:ff:
                    a4:12:dd:4a:d7:fd:ee:10:74:25:d4:20:5e:49:4f:
                    92:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:2F:83:C6:3B:3B:C6:3B:30:F3:35:AA:37:18:22:CF:7A:E6:2E:C1
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/Si-Dxjs7xjsw8zWqNxgiz3rmLsE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.130.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         b8:f1:42:d4:b1:fa:02:0e:f9:86:bc:f8:68:d5:1f:38:42:31:
         83:21:f5:e3:1a:80:0b:55:fd:f1:fc:9f:c3:10:30:d7:78:8b:
         32:7d:83:13:75:53:15:6c:05:33:99:9f:2c:38:e6:16:bd:d5:
         5a:69:c6:95:44:53:c1:e0:e6:10:42:dd:c7:c6:58:fd:0b:e1:
         40:4f:54:7d:80:f4:3b:ef:ed:6b:6c:39:df:6d:67:4c:de:18:
         c9:6f:bd:a6:d0:b1:34:0a:8e:af:88:9e:28:04:fd:65:ee:75:
         97:3f:69:10:c2:6f:e1:03:e6:4a:7a:2e:d7:59:be:e5:1c:44:
         c0:c4:11:e6:48:e8:cc:db:98:30:bb:d6:ef:44:d5:f3:36:18:
         f1:1d:a7:95:32:c0:4e:3a:c1:b9:f9:27:6e:e8:3a:fd:84:2f:
         fc:9e:54:60:d8:8f:2c:d8:1f:a2:dd:7f:be:84:41:44:cc:01:
         9f:5c:69:f9:ab:13:68:f0:45:66:b0:27:88:83:85:ea:1a:41:
         03:bf:41:dc:da:b8:9b:3e:a0:20:56:98:0b:96:e2:60:0d:df:
         e2:a7:ea:da:a3:9f:64:c0:36:0c:6c:b0:32:f7:05:e2:99:c4:
         6d:d0:1c:b3:24:24:da:33:48:a3:54:c9:44:f1:d9:5b:45:e4:
         39:5b:09:95
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yMzA1MDEw
MTI4MTNaFw0yNDA0MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDRBMkY4M0M2M0IzQkM2
M0IzMEYzMzVBQTM3MTgyMkNGN0FFNjJFQzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDfBGtwTehunzTtT93gMZNLfIb381q15vWafc/26/h9tu7KZgQl
Y8AZRzVytqKyht0euZiKsL4BbbqNLIMp/OzTrocMm8EJThhvRFfaxVF+ILuoJp+6
xsTK2KEg/29ls8kf7fO8/3opkMWOaDUw6Td+KEwZ17VeB09AR0Plo3yNslAgac22
XjYbstqrORG868+adw4o9bKuYYH2QfMLkDeRf3zUEp/Y1XWJhnRkzxinOZfYnS11
cBKQiXb/B0f1eg3dyoKfOmnK8dYTppB/pthV8fWBXaCdHi16XMClv0FSSdwyt26m
/CV9X1S56PJX/6QS3UrX/e4QdCXUIF5JT5KnAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUSi+Dxjs7xjsw8zWqNxgiz3rmLsEwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTMxL1NpLUR4anM3eGpzdzh6V3FOeGdpejNybUxzRS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAfTgoAwDQYJKoZIhvcNAQELBQADggEBALjxQtSx+gIO+Ya8+GjVHzhCMYMh
9eMagAtV/fH8n8MQMNd4izJ9gxN1UxVsBTOZnyw45ha91VppxpVEU8Hg5hBC3cfG
WP0L4UBPVH2A9Dvv7WtsOd9tZ0zeGMlvvabQsTQKjq+InigE/WXudZc/aRDCb+ED
5kp6LtdZvuUcRMDEEeZI6MzbmDC71u9E1fM2GPEdp5UywE46wbn5J27oOv2EL/ye
VGDYjyzYH6Ldf76EQUTMAZ9cafmrE2jwRWawJ4iDheoaQQO/QdzauJs+oCBWmAuW
4mAN3+Kn6tqjn2TANgxssDL3BeKZxG3QHLMkJNozSKNUyUTx2VtF5DlbCZU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org