Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/CQkqkB7ujR5baU6-xzmE2we2nhQ.roa
File:                     CQkqkB7ujR5baU6-xzmE2we2nhQ.roa (raw, json)
Hash identifier:          lviLfZU5+84rUs5raGJZX7pJg4AZY7ZCGYTCeoAlV8Q=
Subject key identifier:   09:09:2A:90:1E:EE:8D:1E:5B:69:4E:BE:C7:39:84:DB:07:B6:9E:14
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0135
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/CQkqkB7ujR5baU6-xzmE2we2nhQ.roa
Signing time:             Fri 05 Aug 2022 05:00:46 +0000
ROA not before:           Fri 05 Aug 2022 05:00:46 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     4713
IP address blocks:        218.224.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 309 (0x135)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Aug  5 05:00:46 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=09092A901EEE8D1E5B694EBEC73984DB07B69E14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:43:db:1b:f0:b0:bc:7b:06:41:5b:3e:61:d4:
                    57:1c:b2:14:5a:e3:8a:89:12:79:06:b7:c7:36:f9:
                    ea:97:82:bb:ab:7b:db:4a:60:e2:fd:14:94:14:cf:
                    49:5c:1b:85:41:36:45:92:37:1b:f7:0a:9f:83:6b:
                    20:17:d2:cc:8b:7a:40:6a:0a:46:d4:1e:49:e6:15:
                    e4:71:0f:c9:c0:fa:23:d7:4d:92:4d:1c:96:3d:4e:
                    d8:5c:f2:10:d5:1d:34:23:21:88:fe:29:c3:ef:6d:
                    a0:6c:8c:6e:18:19:bc:02:00:1f:df:18:b8:03:db:
                    e3:43:05:5a:a1:dd:11:35:17:d7:60:45:c7:7e:19:
                    30:51:1f:08:a1:d7:f8:27:b3:34:93:19:03:f2:51:
                    fe:af:04:d6:20:11:fe:79:91:d8:5d:c3:3a:4e:05:
                    5d:70:eb:56:09:de:29:94:3d:e1:c7:11:f9:62:95:
                    d7:9f:76:0b:4d:db:dd:32:9d:d6:88:39:5b:2a:71:
                    2f:1b:4c:e2:08:5c:34:5f:c1:4f:33:14:71:85:22:
                    e8:ba:08:53:08:eb:60:83:a3:4d:89:fd:50:0f:59:
                    63:ad:57:68:10:84:a0:1f:94:42:6f:8a:5b:00:97:
                    0b:81:15:18:02:39:a6:5f:c7:29:5f:0b:d1:54:e5:
                    34:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:09:2A:90:1E:EE:8D:1E:5B:69:4E:BE:C7:39:84:DB:07:B6:9E:14
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/CQkqkB7ujR5baU6-xzmE2we2nhQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.224.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         88:b7:0a:1c:55:e2:9e:77:a0:bf:bd:ed:03:3a:f6:f4:0a:f3:
         0a:44:64:8d:12:1d:cb:02:b0:9c:f8:56:7e:ba:48:ad:4e:61:
         09:29:ef:dc:72:e0:83:49:73:d7:f1:3a:9e:e2:67:95:2c:01:
         4d:a1:13:82:34:b3:23:6e:55:6a:c0:4c:41:f1:66:cf:39:21:
         57:84:08:f3:a1:ee:6e:04:1d:45:ba:7f:73:d8:eb:40:85:5f:
         7f:26:0e:86:3a:5f:c5:56:59:aa:2d:ce:03:cf:fa:cf:99:01:
         b8:a2:89:aa:23:da:cc:3b:c3:aa:1e:3c:ab:17:af:8f:cd:9d:
         42:ea:b8:fb:88:8f:c0:93:8c:6c:95:03:e7:99:3e:1f:a4:4f:
         9f:6c:c4:e8:a5:ac:28:6d:6b:3d:12:d2:56:5f:1b:0a:a0:3d:
         b9:22:0e:89:7e:47:5b:b3:8c:e9:1e:43:60:d6:1a:b6:2d:98:
         ef:9d:54:6b:b8:8c:04:5d:8c:64:fc:2f:51:eb:dc:86:c2:7f:
         cc:d4:77:07:40:a6:ce:63:54:8f:cc:ec:93:f4:78:82:0f:90:
         ba:24:80:b1:bc:4e:89:ec:18:87:8f:34:45:cf:e1:8e:57:67:
         79:12:ea:a7:31:a7:59:e0:16:11:80:3c:10:ee:3c:fa:80:51:
         28:11:b6:2d
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICATUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yMjA4MDUw
NTAwNDZaFw0yMzA3MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDA5MDkyQTkwMUVFRThE
MUU1QjY5NEVCRUM3Mzk4NERCMDdCNjlFMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7Q9sb8LC8ewZBWz5h1FccshRa44qJEnkGt8c2+eqXgrure9tK
YOL9FJQUz0lcG4VBNkWSNxv3Cp+DayAX0syLekBqCkbUHknmFeRxD8nA+iPXTZJN
HJY9Tthc8hDVHTQjIYj+KcPvbaBsjG4YGbwCAB/fGLgD2+NDBVqh3RE1F9dgRcd+
GTBRHwih1/gnszSTGQPyUf6vBNYgEf55kdhdwzpOBV1w61YJ3imUPeHHEflildef
dgtN290yndaIOVsqcS8bTOIIXDRfwU8zFHGFIui6CFMI62CDo02J/VAPWWOtV2gQ
hKAflEJvilsAlwuBFRgCOaZfxylfC9FU5TRXAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUCQkqkB7ujR5baU6+xzmE2we2nhQwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTMxL0NRa3FrQjd1alI1YmFVNi14em1FMndlMm5oUS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwDa4DANBgkqhkiG9w0BAQsFAAOCAQEAiLcKHFXinnegv73tAzr29ArzCkRk
jRIdywKwnPhWfrpIrU5hCSnv3HLgg0lz1/E6nuJnlSwBTaETgjSzI25VasBMQfFm
zzkhV4QI86HubgQdRbp/c9jrQIVffyYOhjpfxVZZqi3OA8/6z5kBuKKJqiPazDvD
qh48qxevj82dQuq4+4iPwJOMbJUD55k+H6RPn2zE6KWsKG1rPRLSVl8bCqA9uSIO
iX5HW7OM6R5DYNYati2Y751Ua7iMBF2MZPwvUevchsJ/zNR3B0CmzmNUj8zsk/R4
gg+QuiSAsbxOiewYh480Rc/hjldneRLqpzGnWeAWEYA8EO48+oBRKBG2LQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org