Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/Ii6FY-PGvgoYgnPBXYNvNyP4rfk.roa
File:                     Ii6FY-PGvgoYgnPBXYNvNyP4rfk.roa (raw, json)
Hash identifier:          fsAwJ7C++nVmCHx0TyxA5TJ+gGLvGoWYWvn43ZBewnE=
Subject key identifier:   22:2E:85:63:E3:C6:BE:0A:18:82:73:C1:5D:83:6F:37:23:F8:AD:F9
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       012A
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/Ii6FY-PGvgoYgnPBXYNvNyP4rfk.roa
Signing time:             Fri 05 Aug 2022 04:42:43 +0000
ROA not before:           Fri 05 Aug 2022 04:42:43 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     4713
IP address blocks:        210.225.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 298 (0x12a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Aug  5 04:42:43 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=222E8563E3C6BE0A188273C15D836F3723F8ADF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4a:ba:0e:7a:c7:89:c3:1f:7f:4d:33:5a:c4:
                    ac:49:b2:5b:91:00:c7:14:8e:cb:c1:3c:e7:82:a5:
                    8c:bc:a1:6c:65:c4:cf:cc:b1:53:0d:8d:3a:ce:3c:
                    49:40:ca:9f:0a:1c:9e:34:89:e1:47:ec:43:88:f3:
                    34:8a:2a:e6:f5:c5:11:75:1f:bf:cf:12:a3:e0:25:
                    39:1a:6d:d3:9a:09:08:f5:f2:6f:f5:9b:94:a8:d5:
                    b2:18:bc:6a:15:22:ac:07:d6:9a:c4:1b:68:66:bd:
                    97:24:55:5a:b3:5c:2b:7d:90:0a:bb:94:ce:06:48:
                    35:dc:07:69:3d:bb:7d:a7:4b:37:1c:84:6b:82:11:
                    2c:c9:68:a8:18:f7:a3:2c:33:41:fc:9a:aa:7e:1e:
                    b3:f5:77:34:e2:04:d9:46:f6:b9:23:8f:42:7d:29:
                    39:f9:f0:9b:93:39:14:a3:0a:b5:10:c3:8e:7f:53:
                    6c:cd:1e:9a:c9:88:8a:b1:1d:16:da:d5:ab:e2:de:
                    b2:74:d3:db:c4:24:f7:3c:d4:f2:a4:c8:32:76:f7:
                    4e:aa:80:ef:e8:e5:a2:5b:e4:41:e0:9e:70:15:55:
                    7b:43:e8:df:3a:bc:08:69:e5:c9:19:0f:77:4c:2a:
                    f8:d8:9f:21:7a:b0:07:e0:50:3c:af:f2:0f:41:cb:
                    a5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:2E:85:63:E3:C6:BE:0A:18:82:73:C1:5D:83:6F:37:23:F8:AD:F9
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/Ii6FY-PGvgoYgnPBXYNvNyP4rfk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.225.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         cf:19:88:11:70:59:7c:c8:d4:13:91:a2:d9:e8:ec:ee:06:8b:
         cd:52:e7:1f:b6:f6:17:97:e7:de:78:9c:1b:24:e3:a8:d4:1b:
         72:49:3d:9d:45:c3:0e:5c:bd:32:da:54:45:c8:cf:e3:39:68:
         7f:7b:83:fa:57:b8:17:ad:db:b3:5c:06:42:ce:4e:d6:a3:81:
         e8:74:f7:8d:f9:34:76:51:ae:51:a4:c4:06:56:90:c3:d7:92:
         a2:7b:8c:2e:46:ee:f2:af:45:a7:65:1f:14:7a:4c:70:8d:dd:
         a7:87:92:1b:84:8d:55:40:5f:da:6d:97:04:ea:42:bf:38:9b:
         a2:66:2c:36:af:79:49:34:0c:04:fb:10:7a:3e:f3:37:fd:b7:
         a5:6a:4c:a8:14:57:8e:bb:93:c3:fd:ea:88:42:61:62:8d:60:
         c0:8d:15:97:5c:47:5d:38:58:14:9b:22:c4:1f:e2:7a:54:cb:
         50:de:1e:b2:c0:94:8f:66:7f:c6:16:b3:45:69:5e:3f:7a:fd:
         e6:57:1f:b2:e6:24:20:0a:5a:a6:60:8c:b8:5c:50:1d:f7:99:
         31:bc:a2:d9:c4:91:48:a9:2e:73:60:ff:78:84:38:d7:8f:b3:
         4f:7b:3f:96:72:7b:35:d4:54:59:e1:43:b3:53:20:13:f6:81:
         85:31:3f:94
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICASowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yMjA4MDUw
NDQyNDNaFw0yMzA3MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDIyMkU4NTYzRTNDNkJF
MEExODgyNzNDMTVEODM2RjM3MjNGOEFERjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1SroOeseJwx9/TTNaxKxJsluRAMcUjsvBPOeCpYy8oWxlxM/M
sVMNjTrOPElAyp8KHJ40ieFH7EOI8zSKKub1xRF1H7/PEqPgJTkabdOaCQj18m/1
m5So1bIYvGoVIqwH1prEG2hmvZckVVqzXCt9kAq7lM4GSDXcB2k9u32nSzcchGuC
ESzJaKgY96MsM0H8mqp+HrP1dzTiBNlG9rkjj0J9KTn58JuTORSjCrUQw45/U2zN
HprJiIqxHRba1avi3rJ009vEJPc81PKkyDJ2906qgO/o5aJb5EHgnnAVVXtD6N86
vAhp5ckZD3dMKvjYnyF6sAfgUDyv8g9By6WLAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUIi6FY+PGvgoYgnPBXYNvNyP4rfkwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTMxL0lpNkZZLVBHdmdvWWduUEJYWU52TnlQNHJmay5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwDS4TANBgkqhkiG9w0BAQsFAAOCAQEAzxmIEXBZfMjUE5Gi2ejs7gaLzVLn
H7b2F5fn3nicGyTjqNQbckk9nUXDDly9MtpURcjP4zlof3uD+le4F63bs1wGQs5O
1qOB6HT3jfk0dlGuUaTEBlaQw9eSonuMLkbu8q9Fp2UfFHpMcI3dp4eSG4SNVUBf
2m2XBOpCvzibomYsNq95STQMBPsQej7zN/23pWpMqBRXjruTw/3qiEJhYo1gwI0V
l1xHXThYFJsixB/ielTLUN4essCUj2Z/xhazRWleP3r95lcfsuYkIApapmCMuFxQ
HfeZMbyi2cSRSKkuc2D/eIQ414+zT3s/lnJ7NdRUWeFDs1MgE/aBhTE/lA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org