Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/iK3pzEhFuVUjzBo8trzWiQHfxr0.roa
File:                     iK3pzEhFuVUjzBo8trzWiQHfxr0.roa (raw, json)
Hash identifier:          +lctSZ16LZSdg/Q5leP128k9a2xsh2p2Edq2XMdijn0=
Subject key identifier:   88:AD:E9:CC:48:45:B9:55:23:CC:1A:3C:B6:BC:D6:89:01:DF:C6:BD
Certificate issuer:       /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial:       9C
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/iK3pzEhFuVUjzBo8trzWiQHfxr0.roa
Signing time:             Thu 13 Apr 2023 09:53:18 +0000
ROA not before:           Thu 13 Apr 2023 09:53:18 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     18126
IP address blocks:        218.216.176.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156 (0x9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
        Validity
            Not Before: Apr 13 09:53:18 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=88ADE9CC4845B95523CC1A3CB6BCD68901DFC6BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:59:de:f5:ff:3b:15:2c:62:d2:31:65:c4:95:
                    2b:6c:50:ce:78:fe:2f:13:03:6d:2f:78:25:63:2b:
                    04:4e:2e:27:45:1d:ac:68:cb:09:52:02:b9:7d:42:
                    af:68:34:fc:71:71:97:83:7b:c2:cc:d8:03:af:ef:
                    3e:82:c1:4b:00:55:b7:1a:31:af:c8:cc:54:b8:2a:
                    d8:fb:b0:3a:49:eb:90:ea:b2:2d:2d:c5:3c:26:da:
                    5c:d1:c9:b1:5a:5e:8a:fe:da:6c:7b:4c:57:e3:29:
                    ad:53:c7:79:f3:93:2a:ce:62:f7:82:94:ed:da:ec:
                    11:8b:ca:9e:1a:83:c0:5b:04:0e:7f:64:5e:a0:ee:
                    6f:96:51:63:df:b1:07:ec:3d:6c:14:af:71:6f:63:
                    74:51:44:46:5d:03:b9:28:3a:63:36:70:14:b8:31:
                    9d:c8:19:11:4e:82:95:4c:85:3e:38:32:3d:60:8a:
                    f4:60:bd:fc:b0:0d:15:24:bf:38:a8:af:dd:eb:54:
                    c2:3b:73:06:e3:d0:d2:dd:98:bf:9c:02:91:22:35:
                    90:d5:87:c2:3f:4b:29:ed:6b:86:04:cf:0f:6e:43:
                    81:18:0c:56:f2:0c:41:52:44:8e:07:79:75:1e:0c:
                    fa:22:94:44:6b:c6:fc:bb:b3:1e:ec:fd:cf:e8:04:
                    83:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:AD:E9:CC:48:45:B9:55:23:CC:1A:3C:B6:BC:D6:89:01:DF:C6:BD
            X509v3 Authority Key Identifier:
                keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/iK3pzEhFuVUjzBo8trzWiQHfxr0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.216.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6e:b9:2f:23:94:6f:e5:be:f7:d1:16:79:c9:06:2f:19:38:05:
         a4:94:2f:0e:b4:ee:07:1d:6b:0b:a0:b2:ef:a9:86:9f:69:1a:
         ad:cf:2f:ea:62:69:8c:c5:fd:37:22:1b:ff:4b:a0:a0:6d:de:
         4f:81:b2:c6:57:d4:85:77:af:54:e7:0c:ae:ad:b3:65:89:5c:
         ca:45:13:28:07:36:05:3b:df:29:d2:f9:a0:84:ac:bf:c1:65:
         c4:75:80:5b:85:cc:3f:70:6e:db:8e:22:38:eb:ff:09:2c:0b:
         28:a8:ce:d9:c3:fb:f2:01:1e:b7:5f:b5:ab:ac:63:58:ba:4c:
         2f:8c:aa:7f:89:86:8c:1d:96:bd:62:ca:88:9a:37:44:2c:4b:
         d7:ca:47:8f:3f:08:10:b8:aa:e2:77:9f:b1:6f:c6:f3:0d:d3:
         5f:d0:ca:84:53:df:b4:be:65:5d:fc:02:a3:0a:92:ca:ec:1b:
         1d:f0:53:09:1e:5b:f5:85:23:5b:eb:38:81:8b:33:b5:30:f1:
         61:11:e7:f3:12:03:8f:0f:db:c7:dc:42:f1:ee:ef:2d:e9:4e:
         65:d6:c1:93:d4:d9:2c:6f:b9:3f:77:a3:ad:62:44:4c:ee:f1:
         ea:56:13:4f:20:26:f6:63:36:c0:e5:6b:0a:0e:ee:96:6b:b8:
         b2:c2:ed:b9
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQ0Qz
MTI0MjdGODAwQjgyOTZEQTExNTQwQzhCODZFNUNFMTJGQzZDNTAeFw0yMzA0MTMw
OTUzMThaFw0yNDAzMTQwMTMwMDJaMDMxMTAvBgNVBAMTKDg4QURFOUNDNDg0NUI5
NTUyM0NDMUEzQ0I2QkNENjg5MDFERkM2QkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2Wd71/zsVLGLSMWXElStsUM54/i8TA20veCVjKwROLidFHaxo
ywlSArl9Qq9oNPxxcZeDe8LM2AOv7z6CwUsAVbcaMa/IzFS4Ktj7sDpJ65Dqsi0t
xTwm2lzRybFaXor+2mx7TFfjKa1Tx3nzkyrOYveClO3a7BGLyp4ag8BbBA5/ZF6g
7m+WUWPfsQfsPWwUr3FvY3RRREZdA7koOmM2cBS4MZ3IGRFOgpVMhT44Mj1givRg
vfywDRUkvzior93rVMI7cwbj0NLdmL+cApEiNZDVh8I/Synta4YEzw9uQ4EYDFby
DEFSRI4HeXUeDPoilERrxvy7sx7s/c/oBIPJAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUiK3pzEhFuVUjzBo8trzWiQHfxr0wHwYDVR0jBBgwFoAUzTEkJ/gAuCltoRVA
yLhuXOEvxsUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE3My96VEVrSl9nQXVDbHRvUlZBeUxodVhPRXZ4c1UuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC96VEVrSl9nQXVDbHRvUlZBeUxodVhP
RXZ4c1UuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTczL2lLM3B6RWhGdVZVanpCbzh0cnpXaVFIZnhyMC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBATa2LAwDQYJKoZIhvcNAQELBQADggEBAG65LyOUb+W+99EWeckGLxk4BaSU
Lw607gcdawugsu+php9pGq3PL+piaYzF/TciG/9LoKBt3k+BssZX1IV3r1TnDK6t
s2WJXMpFEygHNgU73ynS+aCErL/BZcR1gFuFzD9wbtuOIjjr/wksCyioztnD+/IB
HrdftausY1i6TC+Mqn+Jhowdlr1iyoiaN0QsS9fKR48/CBC4quJ3n7FvxvMN01/Q
yoRT37S+ZV38AqMKksrsGx3wUwkeW/WFI1vrOIGLM7Uw8WER5/MSA48P28fcQvHu
7y3pTmXWwZPU2SxvuT93o61iREzu8epWE08gJvZjNsDlawoO7pZruLLC7bk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org