Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/9dbM9GJhHwTKWs-QdeK8xs7Se80.roa
File:                     9dbM9GJhHwTKWs-QdeK8xs7Se80.roa (raw, json)
Hash identifier:          b7s0Tk7sUOoIV41UcJBJzrXeV0bQe498QFtmqCI4fZ0=
Subject key identifier:   F5:D6:CC:F4:62:61:1F:04:CA:5A:CF:90:75:E2:BC:C6:CE:D2:7B:CD
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0132
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/9dbM9GJhHwTKWs-QdeK8xs7Se80.roa
Signing time:             Fri 05 Aug 2022 04:54:43 +0000
ROA not before:           Fri 05 Aug 2022 04:54:43 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     4713
IP address blocks:        211.129.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 306 (0x132)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Aug  5 04:54:43 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=F5D6CCF462611F04CA5ACF9075E2BCC6CED27BCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5d:1b:18:10:9b:ef:e4:00:a8:62:68:73:3b:
                    be:79:ee:e6:82:ea:43:b9:54:97:96:af:c0:0f:89:
                    3a:cb:5a:89:06:4f:a9:80:92:79:48:4c:f7:7f:b1:
                    1d:f5:e1:fb:c7:95:b6:49:84:4c:6b:00:35:5b:61:
                    8a:ee:d0:22:95:3c:14:6d:06:16:7c:1f:66:17:e7:
                    0c:21:e8:8e:a9:54:3f:2b:99:8e:3a:bb:46:8b:92:
                    63:1f:3a:8f:47:4f:9d:80:25:ea:b9:6c:a9:cb:b9:
                    b8:84:6a:bb:cd:a3:d6:88:53:89:e6:3c:8f:0c:db:
                    8c:3b:46:be:b9:df:bc:bf:ea:47:21:f2:9a:43:64:
                    43:53:3b:2c:e3:c8:bf:85:48:10:cf:b8:b4:2d:93:
                    89:74:c6:62:41:27:9e:56:fc:c8:9b:8a:e4:77:3a:
                    21:a1:35:e0:1b:d6:da:e5:51:b0:d2:65:2f:b5:1e:
                    66:bc:02:d8:3d:56:b6:8e:02:ad:d5:41:19:06:1f:
                    d2:fc:9b:59:b5:fe:d4:a2:fd:c8:2c:04:07:23:03:
                    50:b4:81:53:d4:aa:be:3f:f1:88:a9:b7:17:6d:53:
                    f7:cd:ba:d2:98:9c:e0:a0:1e:03:5c:9e:16:c2:b4:
                    41:0c:cd:c9:e3:42:a8:86:82:b8:84:21:58:62:6a:
                    0e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:D6:CC:F4:62:61:1F:04:CA:5A:CF:90:75:E2:BC:C6:CE:D2:7B:CD
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/9dbM9GJhHwTKWs-QdeK8xs7Se80.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.129.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c9:07:ea:b3:bb:29:45:d4:9d:46:a9:af:c2:dd:b5:e0:4b:3d:
         1c:6d:e7:9f:9b:56:61:a9:4a:d8:c1:0b:42:aa:be:17:9a:b2:
         a8:f4:cd:a3:95:0a:8c:5c:9d:65:85:80:f5:9a:f3:e9:55:66:
         b7:6b:b8:1e:b6:91:3e:0c:a3:95:b8:62:d9:1f:f5:c2:93:55:
         a8:e9:ff:f4:69:c4:f1:78:bd:f9:2c:7f:40:92:2a:1e:d0:ee:
         da:1c:7f:23:2f:1d:5a:99:11:c7:c2:f4:b0:e2:c2:81:11:32:
         6a:a5:4b:63:d9:47:cc:cb:45:4d:8a:b1:1f:ea:b6:13:2c:c4:
         26:2b:47:8c:92:e5:c3:e8:9d:9e:9e:95:c1:c9:13:ee:5a:10:
         d8:7d:6b:39:70:ea:f6:be:7c:1c:2c:b3:39:27:f9:d3:67:7a:
         6c:a6:fe:36:e7:2b:50:a9:18:f5:59:f8:8c:3a:80:f8:f8:be:
         7f:a5:a2:73:d9:40:ec:2a:46:7c:e4:30:e0:25:b8:1f:4d:2b:
         34:1e:ce:9d:9f:08:7b:68:a0:1e:6a:51:3c:8a:51:10:22:b9:
         47:76:44:1e:0d:20:4e:8c:a0:86:7e:48:e0:3a:ef:6e:40:e5:
         f9:02:99:63:7a:09:c9:ac:29:3e:b6:4c:d0:43:4d:98:13:5e:
         7a:a7:5c:11
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICATIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yMjA4MDUw
NDU0NDNaFw0yMzA3MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEY1RDZDQ0Y0NjI2MTFG
MDRDQTVBQ0Y5MDc1RTJCQ0M2Q0VEMjdCQ0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4XRsYEJvv5ACoYmhzO7557uaC6kO5VJeWr8APiTrLWokGT6mA
knlITPd/sR314fvHlbZJhExrADVbYYru0CKVPBRtBhZ8H2YX5wwh6I6pVD8rmY46
u0aLkmMfOo9HT52AJeq5bKnLubiEarvNo9aIU4nmPI8M24w7Rr6537y/6kch8ppD
ZENTOyzjyL+FSBDPuLQtk4l0xmJBJ55W/MibiuR3OiGhNeAb1trlUbDSZS+1Hma8
Atg9VraOAq3VQRkGH9L8m1m1/tSi/cgsBAcjA1C0gVPUqr4/8YiptxdtU/fNutKY
nOCgHgNcnhbCtEEMzcnjQqiGgriEIVhiag4JAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQU9dbM9GJhHwTKWs+QdeK8xs7Se80wHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTMxLzlkYk05R0poSHdUS1dzLVFkZUs4eHM3U2U4MC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwDTgTANBgkqhkiG9w0BAQsFAAOCAQEAyQfqs7spRdSdRqmvwt214Es9HG3n
n5tWYalK2MELQqq+F5qyqPTNo5UKjFydZYWA9Zrz6VVmt2u4HraRPgyjlbhi2R/1
wpNVqOn/9GnE8Xi9+Sx/QJIqHtDu2hx/Iy8dWpkRx8L0sOLCgREyaqVLY9lHzMtF
TYqxH+q2EyzEJitHjJLlw+idnp6VwckT7loQ2H1rOXDq9r58HCyzOSf502d6bKb+
NucrUKkY9Vn4jDqA+Pi+f6Wic9lA7CpGfOQw4CW4H00rNB7OnZ8Ie2igHmpRPIpR
ECK5R3ZEHg0gToyghn5I4DrvbkDl+QKZY3oJyawpPrZM0ENNmBNeeqdcEQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org