Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/x88_5vpEeVOmW2NoRY9LvWZiT1A.roa
File:                     x88_5vpEeVOmW2NoRY9LvWZiT1A.roa (raw, json)
Hash identifier:          TVlp13zk1fFLPfqEPRYr7zV3b83qVLW1Jv2QTZeWY0E=
Subject key identifier:   C7:CF:3F:E6:FA:44:79:53:A6:5B:63:68:45:8F:4B:BD:66:62:4F:50
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0117
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/x88_5vpEeVOmW2NoRY9LvWZiT1A.roa
Signing time:             Fri 10 Jun 2022 03:44:34 +0000
ROA not before:           Fri 10 Jun 2022 03:44:34 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     4713
IP address blocks:        153.192.0.0/11 maxlen: 11

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 279 (0x117)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Jun 10 03:44:34 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=C7CF3FE6FA447953A65B6368458F4BBD66624F50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d7:e0:6b:24:9b:38:90:e5:d8:69:b2:fb:c7:
                    05:fd:38:be:27:db:29:ca:81:4a:52:d2:74:b7:c5:
                    f0:1a:97:c5:90:02:e3:d1:5c:d4:e4:94:0a:e7:fd:
                    d8:a5:96:28:3e:a0:b6:05:9e:f0:0a:08:12:bb:61:
                    7a:c9:69:63:02:06:8d:21:a5:23:3e:cc:cd:4d:36:
                    3a:31:c0:e9:88:58:55:98:59:76:0d:01:99:ff:4f:
                    7f:bf:70:9d:72:1d:4a:c1:8e:fd:b3:42:4f:2c:a8:
                    5a:b7:13:ea:44:97:4b:a0:21:6f:7f:cf:9d:85:66:
                    32:d4:f6:e0:31:6b:f7:8c:12:66:9f:23:91:0a:6d:
                    a1:ae:d2:fa:a9:40:c7:18:66:ea:38:9a:02:6f:dd:
                    a0:65:75:ad:9b:fa:b6:be:f9:77:77:03:93:7a:7a:
                    c4:74:3e:6f:31:9b:9b:ce:9b:d3:c0:88:7d:8c:9e:
                    63:67:bd:52:d5:72:4a:c7:9e:7c:f2:41:a4:39:29:
                    50:ba:8c:72:fe:36:53:51:1e:d3:d7:95:33:fa:08:
                    e0:12:35:70:d0:6c:da:79:fe:83:cd:b9:e8:ef:5e:
                    47:e9:28:98:a4:83:95:d8:f1:29:ce:2b:d9:d2:5d:
                    81:d3:71:b7:d9:eb:8b:56:1a:80:b5:7b:a8:62:cf:
                    40:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:CF:3F:E6:FA:44:79:53:A6:5B:63:68:45:8F:4B:BD:66:62:4F:50
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/x88_5vpEeVOmW2NoRY9LvWZiT1A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.192.0.0/11

    Signature Algorithm: sha256WithRSAEncryption
         d8:9d:03:85:48:47:5e:e9:76:ea:67:6e:f8:2d:a3:40:7e:58:
         34:c8:ba:ae:67:2b:47:59:9b:33:45:ab:22:f4:39:1c:46:46:
         10:a8:8b:1f:62:21:5d:25:8e:7f:9a:e2:87:51:d0:2d:f1:bb:
         eb:6c:c6:4a:80:7c:a3:5f:0d:c4:74:7c:6b:ec:3c:2a:e0:90:
         c5:d2:2e:9c:4f:91:e8:4c:1f:bc:cb:49:ee:c4:ee:6a:c4:aa:
         73:64:77:a8:c6:71:c7:3c:38:e1:9f:86:7d:bf:3a:b0:27:5a:
         49:9b:bd:95:68:82:52:f7:a3:a9:13:37:ee:7c:43:ba:4d:f1:
         ac:65:00:87:bd:42:e5:77:b5:bc:62:3a:2d:84:f6:73:67:c5:
         dd:82:f8:2c:6b:d6:e1:cf:52:79:02:fa:41:72:9e:ba:f5:4c:
         15:13:97:e3:07:92:68:9d:c8:19:33:5c:bb:92:2d:90:8f:8d:
         68:09:63:b0:c3:ab:49:95:18:f9:7c:8e:ae:67:85:d5:5c:2b:
         b1:6b:6d:89:67:5d:46:b7:7c:08:5e:58:ae:f4:3b:3c:46:1c:
         14:79:20:0d:7d:0e:f9:65:44:2a:85:43:84:d0:ff:8f:60:e8:
         8b:40:3e:8b:5d:d2:3a:d5:3b:00:54:f2:fc:d3:cc:c1:ec:e2:
         e5:cd:68:5f
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICARcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yMjA2MTAw
MzQ0MzRaFw0yMzA1MTUwMTMwMDRaMDMxMTAvBgNVBAMTKEM3Q0YzRkU2RkE0NDc5
NTNBNjVCNjM2ODQ1OEY0QkJENjY2MjRGNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC41+BrJJs4kOXYabL7xwX9OL4n2ynKgUpS0nS3xfAal8WQAuPR
XNTklArn/dillig+oLYFnvAKCBK7YXrJaWMCBo0hpSM+zM1NNjoxwOmIWFWYWXYN
AZn/T3+/cJ1yHUrBjv2zQk8sqFq3E+pEl0ugIW9/z52FZjLU9uAxa/eMEmafI5EK
baGu0vqpQMcYZuo4mgJv3aBlda2b+ra++Xd3A5N6esR0Pm8xm5vOm9PAiH2MnmNn
vVLVckrHnnzyQaQ5KVC6jHL+NlNRHtPXlTP6COASNXDQbNp5/oPNuejvXkfpKJik
g5XY8SnOK9nSXYHTcbfZ64tWGoC1e6hiz0CtAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUx88/5vpEeVOmW2NoRY9LvWZiT1AwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTMxL3g4OF81dnBFZVZPbVcyTm9SWTlMdldaaVQxQS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwWZwDANBgkqhkiG9w0BAQsFAAOCAQEA2J0DhUhHXul26mdu+C2jQH5YNMi6
rmcrR1mbM0WrIvQ5HEZGEKiLH2IhXSWOf5rih1HQLfG762zGSoB8o18NxHR8a+w8
KuCQxdIunE+R6EwfvMtJ7sTuasSqc2R3qMZxxzw44Z+Gfb86sCdaSZu9lWiCUvej
qRM37nxDuk3xrGUAh71C5Xe1vGI6LYT2c2fF3YL4LGvW4c9SeQL6QXKeuvVMFROX
4weSaJ3IGTNcu5ItkI+NaAljsMOrSZUY+XyOrmeF1VwrsWttiWddRrd8CF5YrvQ7
PEYcFHkgDX0O+WVEKoVDhND/j2Doi0A+i13SOtU7AFTy/NPMwezi5c1oXw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org