Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/TDvKIi90HBKIIuHJgZ9dABLGp0A.roa
File:                     TDvKIi90HBKIIuHJgZ9dABLGp0A.roa (raw, json)
Hash identifier:          oqgrLI58xCM3guCujfsjR7m4a6OXWyU01GPQsmfFx6s=
Subject key identifier:   4C:3B:CA:22:2F:74:1C:12:88:22:E1:C9:81:9F:5D:00:12:C6:A7:40
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       ED
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/TDvKIi90HBKIIuHJgZ9dABLGp0A.roa
Signing time:             Sun 01 May 2022 01:31:03 +0000
ROA not before:           Sun 01 May 2022 01:31:03 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     4713
IP address blocks:        218.44.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 237 (0xed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  1 01:31:03 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=4C3BCA222F741C128822E1C9819F5D0012C6A740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e5:93:99:a8:71:1e:bc:14:61:14:b9:4c:81:
                    9a:a6:a8:60:77:63:dd:04:2b:db:ae:1f:d4:10:1e:
                    3c:87:34:89:b2:61:7e:84:c0:23:29:d1:25:a3:d6:
                    4a:b0:88:10:df:b0:fe:93:67:b5:92:ed:0f:93:ea:
                    1d:09:fc:ff:b8:cc:cc:9b:ff:1e:6f:93:d9:a0:7c:
                    e4:ee:6a:34:84:25:0f:11:e6:7e:cd:3f:08:82:88:
                    74:39:5c:20:fa:7a:20:7b:a7:e7:db:c8:7d:30:8b:
                    10:01:ff:4a:99:4c:fe:ce:8d:bf:68:7d:89:ec:d0:
                    e8:7e:d2:9f:90:fa:11:3d:de:79:c1:3d:c4:2e:dc:
                    d9:60:6b:c1:7c:2e:a9:f4:4b:ac:09:1e:f7:8a:8f:
                    84:1d:0e:30:4a:45:17:f0:83:1f:3d:06:cc:28:6f:
                    15:06:ea:64:5b:97:c7:85:2c:a7:48:92:c5:54:a1:
                    16:f9:c3:08:32:e1:3b:f8:a0:7e:c4:22:d8:82:4c:
                    d6:72:fc:b4:4c:b9:4c:8b:cb:0a:2c:d3:b6:36:6a:
                    c0:29:df:94:ef:a2:b4:0f:2e:65:63:8a:a4:8c:71:
                    17:d6:3b:88:41:ff:c6:fe:7c:e5:dc:27:d6:01:53:
                    c5:e1:4d:b3:c5:6e:5a:be:60:a9:57:80:bf:08:dd:
                    c7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:3B:CA:22:2F:74:1C:12:88:22:E1:C9:81:9F:5D:00:12:C6:A7:40
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/TDvKIi90HBKIIuHJgZ9dABLGp0A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.44.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         61:3a:17:a9:20:cb:09:71:f1:28:c3:4a:53:cc:10:31:07:86:
         26:be:e2:b5:ed:8a:63:7f:2d:d2:2d:44:70:92:38:9e:7f:c9:
         e9:6e:95:ce:e3:e7:a1:d6:78:34:3c:9b:f0:02:c9:01:cb:23:
         66:3d:6a:48:80:58:49:38:a7:12:a0:a6:da:00:c4:04:9c:b6:
         2c:88:3d:da:b8:1f:50:50:25:e2:21:89:11:56:c3:70:9e:05:
         45:8f:69:74:6b:5e:5f:c7:28:18:9e:dc:34:a9:53:14:d1:e9:
         f9:a5:85:c5:ad:09:1f:ce:47:35:37:7e:af:b7:0c:09:4b:fc:
         85:97:74:56:eb:90:07:75:dd:d9:dc:3d:7b:cc:54:2b:ba:d9:
         28:08:05:67:0b:3e:5c:c6:33:00:3b:af:73:fb:3a:16:a4:d8:
         96:67:39:81:68:55:3b:4f:58:99:d7:1d:4e:2a:d1:26:6d:78:
         9d:d9:10:8a:d3:68:7e:c6:18:d2:ca:4b:20:26:87:69:f8:a8:
         b9:63:e1:d1:7c:a3:a2:9d:8b:35:a0:2e:7d:5e:d1:d5:c8:ba:
         9d:a1:5a:40:51:ef:e3:65:1b:b8:e1:3e:5a:88:a5:8a:ad:2b:
         2d:55:e5:b1:9a:53:17:7b:6f:3a:c0:2b:34:cb:18:b5:06:0f:
         45:7c:5f:c9
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yMjA1MDEw
MTMxMDNaFw0yMzA0MjcwOTUyMzRaMDMxMTAvBgNVBAMTKDRDM0JDQTIyMkY3NDFD
MTI4ODIyRTFDOTgxOUY1RDAwMTJDNkE3NDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDH5ZOZqHEevBRhFLlMgZqmqGB3Y90EK9uuH9QQHjyHNImyYX6E
wCMp0SWj1kqwiBDfsP6TZ7WS7Q+T6h0J/P+4zMyb/x5vk9mgfOTuajSEJQ8R5n7N
PwiCiHQ5XCD6eiB7p+fbyH0wixAB/0qZTP7Ojb9ofYns0Oh+0p+Q+hE93nnBPcQu
3Nlga8F8Lqn0S6wJHveKj4QdDjBKRRfwgx89BswobxUG6mRbl8eFLKdIksVUoRb5
wwgy4Tv4oH7EItiCTNZy/LRMuUyLywos07Y2asAp35TvorQPLmVjiqSMcRfWO4hB
/8b+fOXcJ9YBU8XhTbPFblq+YKlXgL8I3ce3AgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUTDvKIi90HBKIIuHJgZ9dABLGp0AwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTMxL1REdktJaTkwSEJLSUl1SEpnWjlkQUJMR3AwQS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwDaLDANBgkqhkiG9w0BAQsFAAOCAQEAYToXqSDLCXHxKMNKU8wQMQeGJr7i
te2KY38t0i1EcJI4nn/J6W6VzuPnodZ4NDyb8ALJAcsjZj1qSIBYSTinEqCm2gDE
BJy2LIg92rgfUFAl4iGJEVbDcJ4FRY9pdGteX8coGJ7cNKlTFNHp+aWFxa0JH85H
NTd+r7cMCUv8hZd0VuuQB3Xd2dw9e8xUK7rZKAgFZws+XMYzADuvc/s6FqTYlmc5
gWhVO09YmdcdTirRJm14ndkQitNofsYY0spLICaHafiouWPh0Xyjop2LNaAufV7R
1ci6naFaQFHv42UbuOE+Woiliq0rLVXlsZpTF3tvOsArNMsYtQYPRXxfyQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org