Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12/vfOU_0QpcTSiAU3gwzDykyIjf1c.roa
File:                     vfOU_0QpcTSiAU3gwzDykyIjf1c.roa (raw, json)
Hash identifier:          MoslkP5/glyMG//CUDiOKglkOIqQKc4qUvXAJ+ypGzU=
Subject key identifier:   BD:F3:94:FF:44:29:71:34:A2:01:4D:E0:C3:30:F2:93:22:23:7F:57
Certificate issuer:       /CN=1589EECCC6718C652638CF4E92C60003C56FB697
Certificate serial:       30
Authority key identifier: 15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/vfOU_0QpcTSiAU3gwzDykyIjf1c.roa
Signing time:             Thu 01 Jun 2023 01:29:19 +0000
ROA not before:           Thu 01 Jun 2023 01:29:19 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     7660
IP address blocks:        203.181.194.0/23 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1589EECCC6718C652638CF4E92C60003C56FB697
        Validity
            Not Before: Jun  1 01:29:19 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=BDF394FF44297134A2014DE0C330F29322237F57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9a:5b:be:a2:5a:99:8b:7e:28:c0:7a:a9:a9:
                    52:7e:64:a9:22:5d:0d:f6:4e:8c:f5:60:80:aa:a0:
                    dd:65:fb:a0:98:d0:ff:1f:aa:41:55:4a:a4:c9:df:
                    94:3e:0c:c2:5e:63:88:4b:5d:be:10:ac:a0:86:3d:
                    a0:f7:d7:2e:b6:b0:4b:3a:da:0f:c5:90:ea:fc:8b:
                    72:a8:d0:18:fc:35:b0:f1:d6:30:11:e3:bc:93:45:
                    e0:b5:95:5d:bd:81:78:f1:18:e4:a4:ab:39:e2:2d:
                    96:97:6c:8a:84:2d:91:dd:46:15:e7:25:53:10:51:
                    12:e3:0f:45:b6:6d:e8:96:d8:2c:18:65:fc:32:e6:
                    5e:b8:33:48:01:63:c1:e2:bb:f3:a3:4f:55:55:58:
                    78:55:6c:3e:16:b1:6c:a8:dd:60:8a:a6:f1:b4:e0:
                    c7:3d:24:8f:e7:de:3e:ea:d3:13:af:28:76:11:6c:
                    61:b6:2d:c2:2c:9f:6b:fb:bb:dd:28:c0:0f:e6:72:
                    4f:7f:42:ff:3b:23:22:a4:e3:24:87:32:24:fd:cf:
                    12:d7:7f:be:f3:4e:0f:ac:c5:bc:a5:7b:45:89:3d:
                    c7:61:26:57:d8:35:12:24:57:a7:46:9a:1a:f8:01:
                    5f:9e:f0:fb:7f:a2:13:db:3b:0c:6f:2a:dd:ab:b9:
                    c6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F3:94:FF:44:29:71:34:A2:01:4D:E0:C3:30:F2:93:22:23:7F:57
            X509v3 Authority Key Identifier:
                keyid:15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/vfOU_0QpcTSiAU3gwzDykyIjf1c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.181.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:7f:c6:21:cd:cb:fb:25:4b:65:89:d5:32:ef:59:1f:37:a3:
         05:45:94:2c:c0:13:5e:ea:97:87:09:fd:1a:bf:3a:b5:85:02:
         9c:dc:74:4e:1b:6f:1d:c8:de:4d:de:4b:2d:bd:9e:36:82:a1:
         d3:c8:e5:a5:c1:5b:24:56:23:72:c5:b5:e5:e1:b4:a4:72:54:
         9c:42:8d:f2:68:d7:77:70:03:37:28:f7:3f:df:a4:5c:4d:2f:
         87:59:28:3d:fe:d8:4b:70:dc:c1:ad:39:3a:24:43:ba:60:54:
         54:88:87:e2:72:8c:d3:36:47:d3:47:cb:0a:04:93:9d:67:ed:
         05:6d:d9:a2:1f:62:40:94:69:74:1c:89:7e:1b:3c:ad:cf:74:
         8a:5e:5a:1b:cc:f5:09:3f:61:91:12:e6:da:91:d6:e7:fb:f9:
         cd:24:2a:bf:db:e1:ca:1f:da:a9:d0:8f:ae:1f:fb:59:e5:55:
         00:8e:56:e1:66:82:92:0d:98:2f:73:98:0d:b0:a3:f6:b8:e2:
         d6:29:8d:28:b8:f0:0f:fb:a4:59:9f:17:aa:a5:76:8e:af:d7:
         51:07:46:a6:3b:be:f6:f0:23:b2:c1:fd:c1:fb:39:8f:eb:a2:
         72:0d:29:3a:cb:2c:4c:2b:d8:95:47:b6:99:24:68:36:8a:79:
         a4:c7:5b:90
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIBMDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNTg5
RUVDQ0M2NzE4QzY1MjYzOENGNEU5MkM2MDAwM0M1NkZCNjk3MB4XDTIzMDYwMTAx
MjkxOVoXDTI0MDUxNDAxMzAwMlowMzExMC8GA1UEAxMoQkRGMzk0RkY0NDI5NzEz
NEEyMDE0REUwQzMzMEYyOTMyMjIzN0Y1NzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMWaW76iWpmLfijAeqmpUn5kqSJdDfZOjPVggKqg3WX7oJjQ/x+q
QVVKpMnflD4Mwl5jiEtdvhCsoIY9oPfXLrawSzraD8WQ6vyLcqjQGPw1sPHWMBHj
vJNF4LWVXb2BePEY5KSrOeItlpdsioQtkd1GFeclUxBREuMPRbZt6JbYLBhl/DLm
XrgzSAFjweK786NPVVVYeFVsPhaxbKjdYIqm8bTgxz0kj+fePurTE68odhFsYbYt
wiyfa/u73SjAD+ZyT39C/zsjIqTjJIcyJP3PEtd/vvNOD6zFvKV7RYk9x2EmV9g1
EiRXp0aaGvgBX57w+3+iE9s7DG8q3au5xkUCAwEAAaOCAiIwggIeMB0GA1UdDgQW
BBS985T/RClxNKIBTeDDMPKTIiN/VzAfBgNVHSMEGDAWgBQVie7MxnGMZSY4z06S
xgADxW+2lzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTIvRlludXpNWnhqR1VtT005T2tzWUFBOFZ2dHBjLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRlludXpNWnhqR1VtT005T2tzWUFBOFZ2
dHBjLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzEyL3ZmT1VfMFFwY1RTaUFVM2d3ekR5a3lJamYxYy5yb2EwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAHLtcIwDQYJKoZIhvcNAQELBQADggEBABJ/xiHNy/slS2WJ1TLvWR83owVFlCzA
E17ql4cJ/Rq/OrWFApzcdE4bbx3I3k3eSy29njaCodPI5aXBWyRWI3LFteXhtKRy
VJxCjfJo13dwAzco9z/fpFxNL4dZKD3+2Etw3MGtOTokQ7pgVFSIh+JyjNM2R9NH
ywoEk51n7QVt2aIfYkCUaXQciX4bPK3PdIpeWhvM9Qk/YZES5tqR1uf7+c0kKr/b
4cof2qnQj64f+1nlVQCOVuFmgpINmC9zmA2wo/a44tYpjSi48A/7pFmfF6qldo6v
11EHRqY7vvbwI7LB/cH7OY/ronINKTrLLEwr2JVHtpkkaDaKeaTHW5A=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org