Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/khOkyHmblkWL3yGAwcuxG_ORt-s.roa
File:                     khOkyHmblkWL3yGAwcuxG_ORt-s.roa (raw, json)
Hash identifier:          B2fslwZggC2KDy3eD3VGH6u7QGQqyvrW/jIijX46GpQ=
Subject key identifier:   92:13:A4:C8:79:9B:96:45:8B:DF:21:80:C1:CB:B1:1B:F3:91:B7:EB
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       E8
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/khOkyHmblkWL3yGAwcuxG_ORt-s.roa
Signing time:             Sun 01 May 2022 01:31:02 +0000
ROA not before:           Sun 01 May 2022 01:31:02 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     4713
IP address blocks:        218.47.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 232 (0xe8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  1 01:31:02 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=9213A4C8799B96458BDF2180C1CBB11BF391B7EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e7:fe:59:a9:26:80:20:e3:55:27:83:2c:39:
                    dd:bd:87:69:bc:1b:f1:0d:99:1b:63:f2:f3:ba:24:
                    dd:f4:1c:db:57:69:59:e4:24:3e:51:a1:a7:93:44:
                    9f:85:38:51:97:98:ef:22:17:ed:41:94:b1:27:e1:
                    ac:30:ca:cb:6a:5f:f8:c8:0d:95:93:02:ea:0c:c2:
                    89:80:2f:14:3e:1d:f0:e4:26:36:b4:82:ea:12:0a:
                    02:0c:d5:bc:7e:f7:09:2a:c9:d1:8d:91:81:c8:d2:
                    1e:7e:e9:c9:4a:3d:34:fc:f7:bf:eb:db:c7:f3:5d:
                    e8:58:b9:b9:d6:a3:74:34:d1:13:03:97:4f:91:bc:
                    30:87:a3:d0:a8:ed:f0:de:15:44:ec:d4:66:bc:e0:
                    b2:aa:18:47:6a:db:67:2c:64:52:08:79:32:65:6f:
                    36:b1:8a:12:2d:ed:56:e1:fe:df:00:c0:1f:64:f5:
                    11:0c:75:4d:3e:5c:b9:a9:a1:a6:66:81:58:93:dc:
                    d0:10:69:eb:8a:3b:b3:e9:00:6b:39:64:19:90:ce:
                    c6:45:73:19:ef:06:bb:2d:bf:e9:3a:7a:20:fb:cb:
                    ef:af:1a:71:78:b5:47:6e:3c:c4:d2:b6:0f:eb:89:
                    41:bf:ab:28:0b:aa:cf:f7:cf:78:db:02:12:88:ef:
                    7c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:13:A4:C8:79:9B:96:45:8B:DF:21:80:C1:CB:B1:1B:F3:91:B7:EB
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/khOkyHmblkWL3yGAwcuxG_ORt-s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.47.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         41:a1:90:fd:ef:99:60:84:b8:05:c3:2c:f9:90:61:6c:aa:b3:
         3a:43:ae:3b:87:cb:f9:61:1e:8d:b7:6b:73:e6:12:d3:c0:7d:
         30:a0:07:42:79:43:c4:13:ba:92:eb:0d:2a:a8:c4:55:b5:92:
         14:93:b9:e8:8c:c4:49:83:d9:9e:cf:86:fb:a3:65:06:76:b5:
         6b:b3:db:e5:0d:5a:55:fc:bb:fc:72:00:5e:7d:00:ec:ba:2e:
         f4:e8:f8:eb:4f:bf:64:d3:8a:4f:43:52:da:83:6b:d2:3e:f1:
         0d:4a:c3:0e:4f:11:18:1d:0e:0d:7c:00:bb:78:99:10:fa:9a:
         dd:3e:fb:7d:ad:5b:ae:e8:04:7d:bf:be:62:e3:34:7c:d9:70:
         bd:5a:45:4e:ec:45:4c:b7:ab:3c:4c:96:49:de:1c:43:a0:42:
         42:de:52:dc:09:ed:9c:ed:a5:bc:85:fc:f6:46:b9:36:df:d1:
         3d:71:48:3a:34:60:ee:93:5c:2e:9f:eb:29:4b:90:62:d7:82:
         b6:c1:60:39:3d:61:17:8f:77:03:84:44:ff:da:fd:1f:2b:45:
         86:4a:1d:bc:ab:e8:02:ec:44:f1:ce:d5:c1:d8:3b:14:b6:4a:
         80:72:8c:e1:57:c5:c3:d9:ed:a0:08:64:4d:d4:b0:df:d0:63:
         bf:4b:6b:88
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yMjA1MDEw
MTMxMDJaFw0yMzA0MjcwOTUyMzRaMDMxMTAvBgNVBAMTKDkyMTNBNEM4Nzk5Qjk2
NDU4QkRGMjE4MEMxQ0JCMTFCRjM5MUI3RUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDm5/5ZqSaAIONVJ4MsOd29h2m8G/ENmRtj8vO6JN30HNtXaVnk
JD5RoaeTRJ+FOFGXmO8iF+1BlLEn4awwystqX/jIDZWTAuoMwomALxQ+HfDkJja0
guoSCgIM1bx+9wkqydGNkYHI0h5+6clKPTT897/r28fzXehYubnWo3Q00RMDl0+R
vDCHo9Co7fDeFUTs1Ga84LKqGEdq22csZFIIeTJlbzaxihIt7Vbh/t8AwB9k9REM
dU0+XLmpoaZmgViT3NAQaeuKO7PpAGs5ZBmQzsZFcxnvBrstv+k6eiD7y++vGnF4
tUduPMTStg/riUG/qygLqs/3z3jbAhKI73zxAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUkhOkyHmblkWL3yGAwcuxG/ORt+swHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTMxL2toT2t5SG1ibGtXTDN5R0F3Y3V4R19PUnQtcy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwDaLzANBgkqhkiG9w0BAQsFAAOCAQEAQaGQ/e+ZYIS4BcMs+ZBhbKqzOkOu
O4fL+WEejbdrc+YS08B9MKAHQnlDxBO6kusNKqjEVbWSFJO56IzESYPZns+G+6Nl
Bna1a7Pb5Q1aVfy7/HIAXn0A7Lou9Oj460+/ZNOKT0NS2oNr0j7xDUrDDk8RGB0O
DXwAu3iZEPqa3T77fa1brugEfb++YuM0fNlwvVpFTuxFTLerPEyWSd4cQ6BCQt5S
3AntnO2lvIX89ka5Nt/RPXFIOjRg7pNcLp/rKUuQYteCtsFgOT1hF493A4RE/9r9
HytFhkodvKvoAuxE8c7Vwdg7FLZKgHKM4VfFw9ntoAhkTdSw39Bjv0triA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org