Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10699/nw8fmxCJwAGeIX_jNeX0yotl_to.roa
File:                     nw8fmxCJwAGeIX_jNeX0yotl_to.roa (raw, json)
Hash identifier:          QoUL4CXJqDtJyvga8h5Ee7W8QORBWB9eQsBrXu4G3bo=
Subject key identifier:   9F:0F:1F:9B:10:89:C0:01:9E:21:7F:E3:35:E5:F4:CA:8B:65:FE:DA
Certificate issuer:       /CN=CFEA2C2AAD63BCCA4D4AC96A852140D4261597B8
Certificate serial:       38
Authority key identifier: CF:EA:2C:2A:AD:63:BC:CA:4D:4A:C9:6A:85:21:40:D4:26:15:97:B8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z-osKq1jvMpNSslqhSFA1CYVl7g.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/nw8fmxCJwAGeIX_jNeX0yotl_to.roa
Signing time:             Sun 01 May 2022 01:30:11 +0000
ROA not before:           Sun 01 May 2022 01:30:11 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     7671
IP address blocks:        124.245.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFEA2C2AAD63BCCA4D4AC96A852140D4261597B8
        Validity
            Not Before: May  1 01:30:11 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=9F0F1F9B1089C0019E217FE335E5F4CA8B65FEDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c0:3f:dc:6f:e8:ec:58:2d:f5:8a:f7:4f:bf:
                    1f:bf:1a:86:b3:f3:8f:50:20:6d:08:8e:60:cf:5c:
                    1a:fb:10:d3:1b:f1:e3:2b:90:58:0b:bb:31:b2:7d:
                    94:30:99:45:b8:ca:5a:b9:0e:4a:0b:38:37:55:d6:
                    e5:64:7a:76:af:99:42:03:e3:8a:d7:d5:9d:7a:e5:
                    a9:86:6b:eb:24:9b:93:ff:7e:fe:46:98:6d:a6:af:
                    ae:bb:03:63:4b:00:b3:c4:12:45:ff:31:b2:ec:36:
                    b1:2e:16:1a:98:03:f1:a2:da:41:13:67:b6:bd:2e:
                    8e:f9:e4:1a:32:a9:3a:73:a5:55:b8:94:1b:4b:24:
                    f9:f3:90:57:54:2a:f8:28:2b:b8:7b:ad:95:fc:a2:
                    6c:a5:2b:c3:e9:e8:f4:80:8e:4d:68:85:c2:53:14:
                    9d:9f:8e:ff:71:69:70:1c:73:ac:b6:7c:3c:43:2e:
                    1f:d0:75:fc:08:ef:96:19:eb:38:ff:78:93:3c:91:
                    29:64:a2:cb:e2:c3:f5:8d:25:29:47:d3:d8:a9:28:
                    9b:86:7f:fa:a9:05:7d:a2:ec:ec:1d:dd:9f:56:7c:
                    54:b6:33:1a:7a:55:e3:bb:7c:85:d4:ff:03:ba:af:
                    e9:99:09:00:e6:59:e5:c7:4d:1e:e9:1a:6a:a4:a4:
                    2a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:0F:1F:9B:10:89:C0:01:9E:21:7F:E3:35:E5:F4:CA:8B:65:FE:DA
            X509v3 Authority Key Identifier:
                keyid:CF:EA:2C:2A:AD:63:BC:CA:4D:4A:C9:6A:85:21:40:D4:26:15:97:B8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/z-osKq1jvMpNSslqhSFA1CYVl7g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z-osKq1jvMpNSslqhSFA1CYVl7g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/nw8fmxCJwAGeIX_jNeX0yotl_to.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.245.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4b:00:9d:e8:d8:f8:54:a4:df:45:24:a0:9c:cc:c5:47:df:64:
         29:f2:dc:76:46:b0:6a:3f:b0:53:8a:50:3d:48:72:40:14:1c:
         75:e8:a4:14:27:4c:76:0e:19:01:e3:21:e2:55:50:96:14:b2:
         66:d2:c9:aa:69:67:37:6c:6c:d8:f3:fc:ca:de:46:ca:e9:c2:
         98:c1:6f:a8:80:16:05:d0:f1:4d:34:e1:d1:f7:78:74:4a:34:
         b4:5f:bb:dc:a4:fe:42:60:71:b6:6d:e7:08:36:87:e2:23:4b:
         86:18:c4:11:4e:a5:74:b5:55:33:ba:97:2c:eb:39:0b:86:49:
         3e:e6:bd:be:7b:45:88:d5:cb:ae:6d:8b:ca:78:35:11:43:91:
         1a:ba:fd:f2:6d:2e:ad:20:ef:28:3b:45:db:07:e0:a7:c9:d7:
         7b:44:ac:3f:72:66:8f:b6:64:45:2b:6a:cc:a5:0c:ec:40:94:
         32:ac:d1:61:d8:06:39:1d:23:e4:b6:c0:a8:0e:ab:ad:15:28:
         02:93:e9:cc:7b:cb:7b:91:41:6b:db:66:31:db:b7:43:78:5e:
         15:03:23:65:03:1e:a3:8d:30:ca:4a:93:4b:76:1e:be:6a:c5:
         b4:cc:f8:61:13:ff:75:b8:e5:6f:50:5d:00:11:54:d4:76:69:
         b0:98:ac:35
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIBODANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDRkVB
MkMyQUFENjNCQ0NBNEQ0QUM5NkE4NTIxNDBENDI2MTU5N0I4MB4XDTIyMDUwMTAx
MzAxMVoXDTIzMDQyNzA5NTIzNFowMzExMC8GA1UEAxMoOUYwRjFGOUIxMDg5QzAw
MTlFMjE3RkUzMzVFNUY0Q0E4QjY1RkVEQTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANHAP9xv6OxYLfWK90+/H78ahrPzj1AgbQiOYM9cGvsQ0xvx4yuQ
WAu7MbJ9lDCZRbjKWrkOSgs4N1XW5WR6dq+ZQgPjitfVnXrlqYZr6ySbk/9+/kaY
baavrrsDY0sAs8QSRf8xsuw2sS4WGpgD8aLaQRNntr0ujvnkGjKpOnOlVbiUG0sk
+fOQV1Qq+CgruHutlfyibKUrw+no9ICOTWiFwlMUnZ+O/3FpcBxzrLZ8PEMuH9B1
/AjvlhnrOP94kzyRKWSiy+LD9Y0lKUfT2Kkom4Z/+qkFfaLs7B3dn1Z8VLYzGnpV
47t8hdT/A7qv6ZkJAOZZ5cdNHukaaqSkKi8CAwEAAaOCAicwggIjMB0GA1UdDgQW
BBSfDx+bEInAAZ4hf+M15fTKi2X+2jAfBgNVHSMEGDAWgBTP6iwqrWO8yk1KyWqF
IUDUJhWXuDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTA2OTkvei1vc0txMWp2TXBOU3NscWhTRkExQ1lWbDdnLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvei1vc0txMWp2TXBOU3NscWhTRkEx
Q1lWbDdnLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzEwNjk5L253OGZteENKd0FHZUlYX2pOZVgweW90bF90by5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsE
AgABMAUDAwB89TANBgkqhkiG9w0BAQsFAAOCAQEASwCd6Nj4VKTfRSSgnMzFR99k
KfLcdkawaj+wU4pQPUhyQBQcdeikFCdMdg4ZAeMh4lVQlhSyZtLJqmlnN2xs2PP8
yt5GyunCmMFvqIAWBdDxTTTh0fd4dEo0tF+73KT+QmBxtm3nCDaH4iNLhhjEEU6l
dLVVM7qXLOs5C4ZJPua9vntFiNXLrm2Lyng1EUORGrr98m0urSDvKDtF2wfgp8nX
e0SsP3Jmj7ZkRStqzKUM7ECUMqzRYdgGOR0j5LbAqA6rrRUoApPpzHvLe5FBa9tm
Mdu3Q3heFQMjZQMeo40wykqTS3YevmrFtMz4YRP/dbjlb1BdABFU1HZpsJisNQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org