Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/w-ygTGNFUQFNWi46pExYb8Nawo0.roa
File:                     w-ygTGNFUQFNWi46pExYb8Nawo0.roa (raw, json)
Hash identifier:          8pHSVWu85/I2GUEqiC2d0/r/IYEcByWqE58AuSXK8vI=
Subject key identifier:   C3:EC:A0:4C:63:45:51:01:4D:5A:2E:3A:A4:4C:58:6F:C3:5A:C2:8D
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       012B
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/w-ygTGNFUQFNWi46pExYb8Nawo0.roa
Signing time:             Fri 05 Aug 2022 04:42:44 +0000
ROA not before:           Fri 05 Aug 2022 04:42:44 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     4713
IP address blocks:        210.226.0.0/15 maxlen: 15

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 299 (0x12b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Aug  5 04:42:44 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=C3ECA04C634551014D5A2E3AA44C586FC35AC28D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:66:8e:f5:f1:08:0c:08:0f:98:0c:b4:83:d4:
                    65:b8:7a:62:4a:78:5a:8e:17:4c:aa:a9:13:b7:2e:
                    e5:1f:08:c0:e6:87:6c:6f:84:3a:f0:f4:7c:87:35:
                    1e:5b:61:cc:f6:a7:c8:00:c5:ea:02:66:2d:73:ad:
                    43:ed:27:49:4f:67:e8:36:5c:f0:e2:97:4d:56:5f:
                    67:c1:ff:6a:1c:e1:3d:1d:c6:24:9a:f3:ef:dc:43:
                    68:ba:15:8f:6b:77:b3:ea:02:f2:30:45:ea:65:5c:
                    58:ef:e3:85:d0:2a:c6:54:c2:7d:13:32:86:78:3d:
                    01:e1:14:08:d9:db:9f:a9:ad:cf:6d:1a:68:ec:db:
                    cf:78:73:f0:88:f8:01:cc:06:6f:a9:a8:cd:b8:a3:
                    07:c2:75:00:63:e2:4e:05:e0:e2:b9:b9:9f:cc:ac:
                    8c:b7:a2:e4:43:d7:cd:ce:80:0d:c9:49:f5:8e:95:
                    4c:39:74:3e:87:25:bc:d2:43:e9:72:44:34:5b:7a:
                    4a:fa:ec:c7:ec:c3:58:c1:16:f3:a9:2f:27:6a:e7:
                    ce:b2:e2:56:06:74:2c:5c:94:e7:8f:23:4a:61:d5:
                    3d:db:72:5b:e0:19:d2:2b:9f:01:22:93:a3:44:62:
                    f4:eb:e2:0e:19:dc:36:36:5d:45:5f:bb:ba:c2:0e:
                    4d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:EC:A0:4C:63:45:51:01:4D:5A:2E:3A:A4:4C:58:6F:C3:5A:C2:8D
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/w-ygTGNFUQFNWi46pExYb8Nawo0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.226.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         10:74:64:34:0b:2a:8b:c3:d6:bf:18:e4:3e:0e:44:23:b7:71:
         c5:e1:69:22:a2:7c:d4:89:81:5d:f5:cd:c9:1e:54:df:97:44:
         b7:21:0e:57:08:1e:f2:af:92:a0:16:3c:c0:61:d6:39:47:35:
         b2:dd:aa:a8:83:1b:a3:4d:94:54:bd:74:ee:86:65:b8:bc:5b:
         4e:0d:1f:22:1f:bd:50:17:23:dc:34:f9:6c:78:d5:ce:61:b3:
         f2:d4:ed:3e:15:7c:64:c0:41:61:d7:54:55:f0:39:e4:b6:1a:
         60:d5:7d:eb:50:37:4e:32:e5:99:ec:eb:e0:c6:8c:d0:94:3c:
         39:28:3a:65:5b:fe:46:b6:2c:5f:f8:27:07:40:23:99:98:bd:
         85:c9:52:3c:b0:4e:56:cd:49:76:c7:34:b1:3c:ed:86:ec:53:
         1d:79:37:15:2f:73:91:41:e8:0d:66:fc:18:a0:28:ec:01:05:
         24:73:bc:87:f6:bf:6b:c4:c6:07:e4:d1:15:c7:2a:1b:19:92:
         42:8b:6d:e9:a8:bc:10:ea:d0:65:36:a6:60:79:da:34:2d:a6:
         a3:08:1e:c0:b6:da:61:22:43:c5:26:98:23:f6:48:9c:a3:4e:
         30:ff:93:e5:a6:7a:e4:74:38:07:19:f1:0b:4f:c3:ef:14:6e:
         1b:dd:dc:f6
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICASswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yMjA4MDUw
NDQyNDRaFw0yMzA3MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEMzRUNBMDRDNjM0NTUx
MDE0RDVBMkUzQUE0NEM1ODZGQzM1QUMyOEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDaZo718QgMCA+YDLSD1GW4emJKeFqOF0yqqRO3LuUfCMDmh2xv
hDrw9HyHNR5bYcz2p8gAxeoCZi1zrUPtJ0lPZ+g2XPDil01WX2fB/2oc4T0dxiSa
8+/cQ2i6FY9rd7PqAvIwReplXFjv44XQKsZUwn0TMoZ4PQHhFAjZ25+prc9tGmjs
2894c/CI+AHMBm+pqM24owfCdQBj4k4F4OK5uZ/MrIy3ouRD183OgA3JSfWOlUw5
dD6HJbzSQ+lyRDRbekr67Mfsw1jBFvOpLydq586y4lYGdCxclOePI0ph1T3bclvg
GdIrnwEik6NEYvTr4g4Z3DY2XUVfu7rCDk2JAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUw+ygTGNFUQFNWi46pExYb8Nawo0wHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTMxL3cteWdUR05GVVFGTldpNDZwRXhZYjhOYXdvMC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwHS4jANBgkqhkiG9w0BAQsFAAOCAQEAEHRkNAsqi8PWvxjkPg5EI7dxxeFp
IqJ81ImBXfXNyR5U35dEtyEOVwge8q+SoBY8wGHWOUc1st2qqIMbo02UVL107oZl
uLxbTg0fIh+9UBcj3DT5bHjVzmGz8tTtPhV8ZMBBYddUVfA55LYaYNV961A3TjLl
mezr4MaM0JQ8OSg6ZVv+RrYsX/gnB0AjmZi9hclSPLBOVs1Jdsc0sTzthuxTHXk3
FS9zkUHoDWb8GKAo7AEFJHO8h/a/a8TGB+TRFccqGxmSQott6ai8EOrQZTamYHna
NC2mowgewLbaYSJDxSaYI/ZInKNOMP+T5aZ65HQ4BxnxC0/D7xRuG93c9g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org