Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/3FBlizawtFPTS8n5ykGh4_YD-L8.roa
File:                     3FBlizawtFPTS8n5ykGh4_YD-L8.roa (raw, json)
Hash identifier:          QaKtJPLV4VSbb+GNrrt4Kcd+AA79mG1JS8jBhwuKdDs=
Subject key identifier:   DC:50:65:8B:36:B0:B4:53:D3:4B:C9:F9:CA:41:A1:E3:F6:03:F8:BF
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       015D
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/3FBlizawtFPTS8n5ykGh4_YD-L8.roa
Signing time:             Thu 01 Dec 2022 01:28:24 +0000
ROA not before:           Thu 01 Dec 2022 01:28:24 +0000
ROA not after:            Wed 15 Nov 2023 01:30:02 +0000
asID:                     7684
IP address blocks:        49.212.66.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 349 (0x15d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Dec  1 01:28:24 2022 GMT
            Not After : Nov 15 01:30:02 2023 GMT
        Subject: CN=DC50658B36B0B453D34BC9F9CA41A1E3F603F8BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ae:b0:ec:f7:33:8c:44:81:b9:7e:5b:0e:a0:
                    c2:e5:05:69:52:42:cd:62:f3:4f:c5:50:a1:c0:cc:
                    15:c8:f6:bd:7c:20:83:0f:33:9b:44:e8:63:bd:77:
                    3b:79:eb:60:d8:08:66:28:ba:0b:97:1d:1e:a7:0c:
                    97:a6:ba:fd:11:fe:8f:78:44:f6:40:15:d9:1d:e8:
                    9a:3d:d7:ec:d8:97:fb:09:23:4d:5c:27:83:83:2a:
                    38:2c:ba:8e:de:b6:97:52:ea:2f:1e:13:77:7a:1d:
                    5d:55:88:3f:51:c3:f5:fe:1f:6e:a7:2c:26:c1:1e:
                    bc:43:62:c3:c1:c7:bf:53:9d:8a:87:16:b9:52:7e:
                    61:22:cf:93:c4:4c:45:69:9e:6e:01:05:6f:05:94:
                    8f:28:4a:10:db:27:10:ee:16:86:45:68:a2:0d:2b:
                    7e:e2:34:43:de:cc:35:e7:21:aa:ad:2c:c0:0c:90:
                    44:59:d6:1c:a1:63:5c:c8:19:1d:92:48:ff:8d:40:
                    c9:c9:dc:74:80:6a:4f:1a:45:29:b3:95:0e:d6:56:
                    bf:c1:a5:1e:6f:28:48:3a:65:a0:71:a3:3c:12:3b:
                    29:2d:67:a5:31:ba:7d:f8:5a:fd:ef:ee:8a:2b:0a:
                    1b:69:71:15:3d:d1:1b:c5:69:e0:63:d1:23:08:d7:
                    08:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:50:65:8B:36:B0:B4:53:D3:4B:C9:F9:CA:41:A1:E3:F6:03:F8:BF
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/3FBlizawtFPTS8n5ykGh4_YD-L8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.212.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:7d:2f:66:a8:94:49:18:ed:f1:29:2c:90:09:37:5b:79:43:
         55:11:05:10:23:13:f9:d3:da:f0:c0:01:61:19:f4:11:48:c4:
         c7:b6:e4:76:3c:f2:9d:26:b8:63:16:b1:a5:79:43:53:95:54:
         01:c8:62:16:d0:81:84:30:15:9a:9d:7d:81:23:76:2f:15:fc:
         40:8f:32:90:c0:8e:f6:7a:d1:f8:5e:33:1e:d6:68:0b:46:28:
         2b:eb:52:4b:4f:8b:fb:01:27:96:45:77:58:47:5d:47:8c:96:
         ee:93:1c:41:68:d2:13:12:9c:3c:ae:0e:53:96:d9:6b:21:39:
         a8:f5:8e:2e:72:5e:71:72:63:f5:80:96:22:9c:e5:c2:3e:10:
         ca:f9:bd:d3:2a:92:04:7a:67:9e:d2:64:14:76:08:e1:09:c8:
         72:18:fb:1f:d8:05:a5:20:8f:11:0c:68:9b:3e:86:80:35:29:
         11:00:ff:41:d3:76:42:91:ea:65:38:cb:ac:45:c2:c6:9b:10:
         9a:11:0a:ee:eb:16:e4:5b:4f:51:5f:ba:6c:78:83:b3:21:9f:
         f0:18:45:3e:20:18:fe:1e:72:c6:ff:e4:bb:0e:fc:22:a5:5d:
         21:ec:ca:97:7e:fe:52:69:3f:ff:dc:72:fd:54:3f:03:62:6d:
         fd:31:7d:f8
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAV0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz
MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yMjEyMDEw
MTI4MjRaFw0yMzExMTUwMTMwMDJaMDMxMTAvBgNVBAMTKERDNTA2NThCMzZCMEI0
NTNEMzRCQzlGOUNBNDFBMUUzRjYwM0Y4QkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDrrDs9zOMRIG5flsOoMLlBWlSQs1i80/FUKHAzBXI9r18IIMP
M5tE6GO9dzt562DYCGYouguXHR6nDJemuv0R/o94RPZAFdkd6Jo91+zYl/sJI01c
J4ODKjgsuo7etpdS6i8eE3d6HV1ViD9Rw/X+H26nLCbBHrxDYsPBx79TnYqHFrlS
fmEiz5PETEVpnm4BBW8FlI8oShDbJxDuFoZFaKINK37iNEPezDXnIaqtLMAMkERZ
1hyhY1zIGR2SSP+NQMnJ3HSAak8aRSmzlQ7WVr/BpR5vKEg6ZaBxozwSOyktZ6Ux
un34Wv3v7oorChtpcRU90RvFaeBj0SMI1wgPAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQU3FBlizawtFPTS8n5ykGh4/YD+L8wHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK
PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG
RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMDI0Ny8zRkJsaXphd3RGUFRTOG41eWtHaDRfWUQtTDgu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAMdRCMA0GCSqGSIb3DQEBCwUAA4IBAQC+fS9mqJRJGO3xKSyQCTdb
eUNVEQUQIxP509rwwAFhGfQRSMTHtuR2PPKdJrhjFrGleUNTlVQByGIW0IGEMBWa
nX2BI3YvFfxAjzKQwI72etH4XjMe1mgLRigr61JLT4v7ASeWRXdYR11HjJbukxxB
aNITEpw8rg5TltlrITmo9Y4ucl5xcmP1gJYinOXCPhDK+b3TKpIEemee0mQUdgjh
CchyGPsf2AWlII8RDGibPoaANSkRAP9B03ZCkeplOMusRcLGmxCaEQru6xbkW09R
X7pseIOzIZ/wGEU+IBj+HnLG/+S7DvwipV0h7MqXfv5SaT//3HL9VD8DYm39MX34
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:31 2024 by rpki-client on console-ams.rpki-client.org