Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/6e55s_jfO-ltqxWA9vhyEAppW1Q.roa
File:                     6e55s_jfO-ltqxWA9vhyEAppW1Q.roa (raw, json)
Hash identifier:          /Kxwa70h2wsOT2+LLLa1IqHvjZnWTR5hZStj431UtlY=
Subject key identifier:   E9:EE:79:B3:F8:DF:3B:E9:6D:AB:15:80:F6:F8:72:10:0A:69:5B:54
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       013E
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/6e55s_jfO-ltqxWA9vhyEAppW1Q.roa
Signing time:             Fri 05 Aug 2022 05:10:50 +0000
ROA not before:           Fri 05 Aug 2022 05:10:50 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     4713
IP address blocks:        220.220.0.0/15 maxlen: 15

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 318 (0x13e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Aug  5 05:10:50 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=E9EE79B3F8DF3BE96DAB1580F6F872100A695B54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f5:77:33:1b:38:c3:e2:71:6c:27:37:fe:58:
                    e9:bd:d1:f6:17:19:1c:2e:9b:52:67:c1:0f:3d:b7:
                    b1:e8:e8:10:e9:8d:92:bd:9a:e6:2c:bc:2d:44:be:
                    fd:48:4e:99:33:99:3a:26:a3:02:d5:c9:f8:dd:a1:
                    cd:fc:93:b6:51:cf:9a:b1:eb:c7:26:e5:16:31:3c:
                    2b:ee:20:ee:ed:f7:dd:0e:72:58:61:85:fc:0d:88:
                    b3:e1:2f:17:14:88:91:34:ce:40:00:bc:0e:80:64:
                    82:38:ff:1c:b7:3e:25:5d:40:dc:62:6a:3d:66:8b:
                    82:9b:08:cc:49:52:28:60:79:d5:19:ca:b6:5f:7f:
                    ee:50:3b:54:11:b9:46:4e:2f:54:22:3e:01:f1:58:
                    bd:68:37:4b:f1:97:36:84:f9:5d:be:31:79:d0:0a:
                    58:93:be:81:49:50:70:4f:af:e5:3b:50:41:28:6f:
                    36:8e:dd:ff:dc:58:19:7c:c0:2c:41:5d:e5:b2:4d:
                    35:04:32:0d:98:15:b1:72:ae:5e:4d:6b:89:c5:cb:
                    5c:0f:53:07:6a:e1:1f:80:b7:93:b5:ff:35:47:b2:
                    0b:04:37:42:6e:77:33:de:1c:1a:4b:aa:ae:f8:d7:
                    08:b8:a2:69:7d:52:cc:40:f3:cd:b0:d3:90:40:6a:
                    45:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:EE:79:B3:F8:DF:3B:E9:6D:AB:15:80:F6:F8:72:10:0A:69:5B:54
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/6e55s_jfO-ltqxWA9vhyEAppW1Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.220.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         52:18:f3:3d:b4:ad:a6:6b:3b:0b:54:a1:1f:91:c7:3a:89:69:
         26:0a:f4:ad:5f:bd:16:6a:6f:a7:6d:eb:65:71:20:6a:50:82:
         5c:8a:3b:6b:6a:6f:68:d1:b9:e2:94:d0:56:e6:39:1a:80:f1:
         08:08:d3:f3:c9:b1:d7:6a:56:91:27:fd:f1:10:95:2b:97:fc:
         09:f3:b5:d4:1b:2c:34:c6:8e:95:c6:ca:63:c7:b1:ea:c8:6a:
         73:00:5c:f9:ed:29:a1:c2:98:63:21:7f:62:d3:e9:db:41:f8:
         d7:98:7e:0a:45:9d:b5:ee:c2:87:bb:7a:49:99:6f:f9:d1:23:
         3c:ce:d7:e4:d1:46:2b:61:89:39:96:ee:92:5c:4a:db:ba:d3:
         cc:17:2c:6e:25:c7:c1:99:54:c6:aa:0b:2d:4c:72:14:98:1a:
         1d:69:f5:29:0d:4a:9f:48:9a:29:57:bd:88:b4:1a:88:2d:c5:
         82:96:6c:2e:f1:28:e5:6d:1e:1e:67:aa:bc:d1:b1:75:77:e7:
         8b:d3:b8:c5:bc:2e:e5:7a:b1:ef:e3:86:77:10:de:a8:39:b8:
         12:6f:c7:35:b0:4c:70:a3:2f:27:6b:a5:29:56:fc:2c:b1:5b:
         67:5f:16:ec:ae:55:c2:6d:be:e9:72:bb:a5:d9:d8:65:40:d1:
         f2:0d:ea:46
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yMjA4MDUw
NTEwNTBaFw0yMzA3MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEU5RUU3OUIzRjhERjNC
RTk2REFCMTU4MEY2Rjg3MjEwMEE2OTVCNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDC9XczGzjD4nFsJzf+WOm90fYXGRwum1JnwQ89t7Ho6BDpjZK9
muYsvC1Evv1ITpkzmTomowLVyfjdoc38k7ZRz5qx68cm5RYxPCvuIO7t990Oclhh
hfwNiLPhLxcUiJE0zkAAvA6AZII4/xy3PiVdQNxiaj1mi4KbCMxJUihgedUZyrZf
f+5QO1QRuUZOL1QiPgHxWL1oN0vxlzaE+V2+MXnQCliTvoFJUHBPr+U7UEEobzaO
3f/cWBl8wCxBXeWyTTUEMg2YFbFyrl5Na4nFy1wPUwdq4R+At5O1/zVHsgsEN0Ju
dzPeHBpLqq741wi4oml9UsxA882w05BAakWVAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQU6e55s/jfO+ltqxWA9vhyEAppW1QwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTMxLzZlNTVzX2pmTy1sdHF4V0E5dmh5RUFwcFcxUS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwHc3DANBgkqhkiG9w0BAQsFAAOCAQEAUhjzPbStpms7C1ShH5HHOolpJgr0
rV+9Fmpvp23rZXEgalCCXIo7a2pvaNG54pTQVuY5GoDxCAjT88mx12pWkSf98RCV
K5f8CfO11BssNMaOlcbKY8ex6shqcwBc+e0pocKYYyF/YtPp20H415h+CkWdte7C
h7t6SZlv+dEjPM7X5NFGK2GJOZbuklxK27rTzBcsbiXHwZlUxqoLLUxyFJgaHWn1
KQ1Kn0iaKVe9iLQaiC3FgpZsLvEo5W0eHmeqvNGxdXfni9O4xbwu5Xqx7+OGdxDe
qDm4Em/HNbBMcKMvJ2ulKVb8LLFbZ18W7K5Vwm2+6XK7pdnYZUDR8g3qRg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org