Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/0Cj9PYb6H1LQ9P9XHzWtoZeqedA.roa
File:                     0Cj9PYb6H1LQ9P9XHzWtoZeqedA.roa (raw, json)
Hash identifier:          2/xjnLEUf4E0JFHL6fWxa/gHIuP3VmxAhUBFSi2VnG4=
Subject key identifier:   D0:28:FD:3D:86:FA:1F:52:D0:F4:FF:57:1F:35:AD:A1:97:AA:79:D0
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       81
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/0Cj9PYb6H1LQ9P9XHzWtoZeqedA.roa
Signing time:             Sat 08 May 2021 04:05:44 +0000
ROA not before:           Sat 08 May 2021 04:05:44 +0000
ROA not after:            Fri 15 Apr 2022 01:30:01 +0000
asID:                     4713
IP address blocks:        221.113.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  8 04:05:44 2021 GMT
            Not After : Apr 15 01:30:01 2022 GMT
        Subject: CN=D028FD3D86FA1F52D0F4FF571F35ADA197AA79D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:56:cb:c9:bb:05:6c:94:82:ea:dc:43:ba:78:
                    21:95:e3:f4:fc:f7:96:e6:a9:75:4b:2d:60:c3:21:
                    eb:ef:35:b2:21:09:5e:eb:c4:6c:02:29:8f:80:8a:
                    fc:c8:03:1c:13:e2:cb:38:6f:e1:84:65:dd:25:85:
                    9c:9d:5a:4a:6e:61:71:db:ce:ab:bd:60:df:cb:ef:
                    77:32:9f:f1:b5:7a:6a:47:4d:fc:f5:45:50:81:a2:
                    d9:64:21:0c:af:24:19:91:d6:c6:a1:9c:e1:37:21:
                    7f:be:cd:e6:c9:38:fb:a7:97:05:95:4b:bf:03:68:
                    a1:2a:9f:5f:0e:43:85:61:d2:c0:5e:08:fa:32:e5:
                    18:01:61:6b:59:ca:22:74:7f:d3:b0:86:76:ad:be:
                    a1:0d:c7:b1:23:d9:b7:15:1a:04:33:d7:63:a9:23:
                    bb:83:ca:45:f2:c3:33:27:dd:1f:89:61:d5:a3:98:
                    05:95:48:5b:7f:94:34:3e:ec:e1:45:02:ee:97:3d:
                    09:d5:ae:4f:af:ab:e2:48:eb:fb:51:a2:47:17:24:
                    8c:52:41:2a:99:db:dd:91:53:62:63:0f:e2:a1:db:
                    34:a6:a7:d5:be:16:c6:b6:ad:1b:e3:40:69:ad:ac:
                    32:da:46:5d:2f:1f:0e:07:b8:6a:f3:ff:83:6a:b2:
                    db:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:28:FD:3D:86:FA:1F:52:D0:F4:FF:57:1F:35:AD:A1:97:AA:79:D0
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/0Cj9PYb6H1LQ9P9XHzWtoZeqedA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  221.113.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         ba:a0:30:a6:05:d3:cc:17:ff:ec:ab:1f:bd:fe:a3:3d:43:0b:
         76:ba:9f:36:7c:10:2f:83:97:1d:62:c0:84:1d:91:83:85:57:
         c3:39:e7:5f:1d:e9:33:99:1f:cf:30:b4:0f:c5:a0:7e:51:10:
         28:5f:94:2e:1b:59:57:95:e1:62:f0:1b:f0:7e:38:56:f6:a7:
         d6:18:30:67:38:f3:78:b8:e0:69:47:a3:13:a0:51:ee:da:3a:
         ea:3a:1f:3c:53:dd:8e:ea:e5:88:a6:99:e4:c2:5e:f4:6e:f9:
         05:87:9a:a0:53:af:ed:3e:00:78:f6:d7:bd:e5:aa:b4:a6:44:
         ae:0a:72:94:1d:35:0f:08:b5:08:a1:81:6a:7d:cd:9b:39:8b:
         71:28:08:bf:0a:ee:3e:0b:d9:9b:02:79:7b:e9:03:08:83:0c:
         77:e4:da:9a:d6:14:26:6a:9f:ff:70:68:70:e2:f6:f3:3c:53:
         67:7f:f3:4c:c2:ce:70:7f:14:27:5b:e6:9a:7e:68:06:5c:39:
         70:97:fd:ba:07:f1:ee:1f:a5:26:bd:9a:79:7a:10:72:25:48:
         b3:ed:e8:3e:98:51:29:39:cd:a2:6c:ef:03:b1:6f:dc:e9:ec:
         46:c5:04:08:a9:1a:f0:ce:7a:07:cb:6d:fe:2b:56:2f:7b:fb:
         57:d6:ae:4b
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yMTA1MDgw
NDA1NDRaFw0yMjA0MTUwMTMwMDFaMDMxMTAvBgNVBAMTKEQwMjhGRDNEODZGQTFG
NTJEMEY0RkY1NzFGMzVBREExOTdBQTc5RDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8VsvJuwVslILq3EO6eCGV4/T895bmqXVLLWDDIevvNbIhCV7r
xGwCKY+AivzIAxwT4ss4b+GEZd0lhZydWkpuYXHbzqu9YN/L73cyn/G1empHTfz1
RVCBotlkIQyvJBmR1sahnOE3IX++zebJOPunlwWVS78DaKEqn18OQ4Vh0sBeCPoy
5RgBYWtZyiJ0f9OwhnatvqENx7Ej2bcVGgQz12OpI7uDykXywzMn3R+JYdWjmAWV
SFt/lDQ+7OFFAu6XPQnVrk+vq+JI6/tRokcXJIxSQSqZ292RU2JjD+Kh2zSmp9W+
Fsa2rRvjQGmtrDLaRl0vHw4HuGrz/4NqstvPAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU0Cj9PYb6H1LQ9P9XHzWtoZeqedAwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTMxLzBDajlQWWI2SDFMUTlQOVhIeld0b1plcWVkQS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAfdcYAwDQYJKoZIhvcNAQELBQADggEB
ALqgMKYF08wX/+yrH73+oz1DC3a6nzZ8EC+Dlx1iwIQdkYOFV8M5518d6TOZH88w
tA/FoH5REChflC4bWVeV4WLwG/B+OFb2p9YYMGc483i44GlHoxOgUe7aOuo6HzxT
3Y7q5YimmeTCXvRu+QWHmqBTr+0+AHj2173lqrSmRK4KcpQdNQ8ItQihgWp9zZs5
i3EoCL8K7j4L2ZsCeXvpAwiDDHfk2prWFCZqn/9waHDi9vM8U2d/80zCznB/FCdb
5pp+aAZcOXCX/boH8e4fpSa9mnl6EHIlSLPt6D6YUSk5zaJs7wOxb9zp7EbFBAip
GvDOegfLbf4rVi97+1fWrks=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:01 2023 by rpki-client on console-fra.rpki-client.org