Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/IndqUubjffVkIVfRLnJP9V39FtA.roa
File:                     IndqUubjffVkIVfRLnJP9V39FtA.roa (raw, json)
Hash identifier:          HE/LO5b2Pnk2dVq8bkCRqyKDmPMmHGjabYmSgrWSm78=
Subject key identifier:   22:77:6A:52:E6:E3:7D:F5:64:21:57:D1:2E:72:4F:F5:5D:FD:16:D0
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       DD
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/IndqUubjffVkIVfRLnJP9V39FtA.roa
Signing time:             Fri 01 Apr 2022 01:28:21 +0000
ROA not before:           Fri 01 Apr 2022 01:28:21 +0000
ROA not after:            Fri 31 Mar 2023 13:10:57 +0000
asID:                     4713
IP address blocks:        61.208.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 221 (0xdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Apr  1 01:28:21 2022 GMT
            Not After : Mar 31 13:10:57 2023 GMT
        Subject: CN=22776A52E6E37DF5642157D12E724FF55DFD16D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:68:a8:c4:75:57:3e:cc:89:cc:4e:87:e4:06:
                    36:5c:3d:ab:96:d3:45:9d:46:b5:26:29:92:83:78:
                    8f:3b:14:52:08:cb:e1:77:e1:89:20:c8:af:1b:fd:
                    16:22:4c:36:d7:b7:8b:a4:88:da:6b:3a:df:b4:a0:
                    cd:5f:1a:89:60:69:7f:7c:4c:cb:ef:d9:7d:4b:de:
                    4d:90:8a:ea:85:29:76:bf:e4:33:12:4f:6a:1f:87:
                    8f:59:19:59:c7:55:2e:9a:c4:7f:e3:fb:3f:17:ec:
                    c4:66:04:43:ca:9e:3a:02:26:26:cf:0f:be:54:e5:
                    23:ba:2a:37:cd:75:5d:82:ad:28:d0:a6:c0:49:1b:
                    2f:0c:8f:b7:78:3f:b0:cf:fb:c4:67:6a:59:50:9c:
                    40:06:8f:d6:2d:af:d8:01:5d:00:5d:47:e1:0f:77:
                    69:0d:56:3e:72:0a:7d:ad:7b:6b:41:aa:e1:f0:21:
                    bd:17:c6:d7:f9:5a:f3:02:ea:8e:af:50:32:89:07:
                    87:44:3e:f0:18:f6:08:e3:4b:78:3e:55:ea:bf:3b:
                    2d:db:6c:e4:83:99:d6:ef:72:b0:7a:10:d7:2c:58:
                    65:f3:22:a5:11:ed:1f:79:9a:7e:40:c8:90:95:0e:
                    4a:ba:c2:06:ed:30:92:65:9c:24:a1:08:d2:46:17:
                    26:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:77:6A:52:E6:E3:7D:F5:64:21:57:D1:2E:72:4F:F5:5D:FD:16:D0
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/IndqUubjffVkIVfRLnJP9V39FtA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.208.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         29:a9:c8:d4:fc:8c:53:0a:fc:1a:4d:be:3f:7b:57:81:ad:e8:
         b7:f0:14:35:a8:4a:12:dd:90:52:f2:cb:77:05:b2:e2:f3:80:
         83:3c:7f:d6:52:34:03:64:f6:ce:db:d3:59:aa:84:9f:3b:3c:
         3a:e3:37:5d:10:2d:19:19:59:d9:fc:eb:4a:a9:63:70:00:ec:
         ae:1e:2d:72:fa:fb:ce:32:8b:bf:6c:94:0f:60:c7:3d:2b:7f:
         9f:ca:d2:2b:eb:cb:76:69:79:5e:14:11:14:f4:23:a3:91:81:
         17:41:a5:50:cf:fe:56:20:13:37:5f:0e:5a:7f:b8:d5:40:5f:
         ce:bd:be:57:f6:a2:04:e0:4e:3f:13:88:c2:ee:1f:66:09:a5:
         c4:24:73:c7:48:49:56:ba:a6:a4:25:20:de:4e:a1:73:a3:87:
         a3:9f:8e:d2:46:0b:ae:a7:ec:a3:01:c7:2b:5b:54:fe:a1:f7:
         00:d4:6c:28:15:07:9f:67:74:78:ae:7e:a7:19:8d:bb:e3:ca:
         3d:2d:0c:da:c4:bb:0a:59:3f:15:91:9a:94:dd:3f:15:35:03:
         6c:87:58:2c:f2:93:9b:b2:a6:63:3f:4b:87:b2:16:f3:3d:60:
         1d:1c:fe:09:26:72:e3:f7:29:78:84:dd:cf:2d:6e:e4:aa:b2:
         a9:1b:6e:50
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yMjA0MDEw
MTI4MjFaFw0yMzAzMzExMzEwNTdaMDMxMTAvBgNVBAMTKDIyNzc2QTUyRTZFMzdE
RjU2NDIxNTdEMTJFNzI0RkY1NURGRDE2RDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/aKjEdVc+zInMTofkBjZcPauW00WdRrUmKZKDeI87FFIIy+F3
4YkgyK8b/RYiTDbXt4ukiNprOt+0oM1fGolgaX98TMvv2X1L3k2QiuqFKXa/5DMS
T2ofh49ZGVnHVS6axH/j+z8X7MRmBEPKnjoCJibPD75U5SO6KjfNdV2CrSjQpsBJ
Gy8Mj7d4P7DP+8RnallQnEAGj9Ytr9gBXQBdR+EPd2kNVj5yCn2te2tBquHwIb0X
xtf5WvMC6o6vUDKJB4dEPvAY9gjjS3g+Veq/Oy3bbOSDmdbvcrB6ENcsWGXzIqUR
7R95mn5AyJCVDkq6wgbtMJJlnCShCNJGFyZxAgMBAAGjggHYMIIB1DAdBgNVHQ4E
FgQUIndqUubjffVkIVfRLnJP9V39FtAwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTMxL0luZHFVdWJqZmZWa0lWZlJMbkpQOVYzOUZ0QS5yb2EwHgYI
KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwA90DANBgkqhkiG9w0BAQsFAAOCAQEA
KanI1PyMUwr8Gk2+P3tXga3ot/AUNahKEt2QUvLLdwWy4vOAgzx/1lI0A2T2ztvT
WaqEnzs8OuM3XRAtGRlZ2fzrSqljcADsrh4tcvr7zjKLv2yUD2DHPSt/n8rSK+vL
dml5XhQRFPQjo5GBF0GlUM/+ViATN18OWn+41UBfzr2+V/aiBOBOPxOIwu4fZgml
xCRzx0hJVrqmpCUg3k6hc6OHo5+O0kYLrqfsowHHK1tU/qH3ANRsKBUHn2d0eK5+
pxmNu+PKPS0M2sS7Clk/FZGalN0/FTUDbIdYLPKTm7KmYz9Lh7IW8z1gHRz+CSZy
4/cpeITdzy1u5KqyqRtuUA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org