Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1949/GZyTbW9FpOUaxM7165zXZ7O-KAE.roa
File:                     GZyTbW9FpOUaxM7165zXZ7O-KAE.roa (raw, json)
Hash identifier:          5mo7/QFX3VzkGpC6p82rEExshtFdrWwdXgQ1FudA//8=
Subject key identifier:   19:9C:93:6D:6F:45:A4:E5:1A:C4:CE:F5:EB:9C:D7:67:B3:BE:28:01
Certificate issuer:       /CN=DF98C5899E61FB775E1B767EB169536D57A07BAC
Certificate serial:       33
Authority key identifier: DF:98:C5:89:9E:61:FB:77:5E:1B:76:7E:B1:69:53:6D:57:A0:7B:AC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/35jFiZ5h-3deG3Z-sWlTbVege6w.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/GZyTbW9FpOUaxM7165zXZ7O-KAE.roa
Signing time:             Thu 13 Apr 2023 09:54:13 +0000
ROA not before:           Thu 13 Apr 2023 09:54:13 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     2504
IP address blocks:        192.50.24.0/23 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF98C5899E61FB775E1B767EB169536D57A07BAC
        Validity
            Not Before: Apr 13 09:54:13 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=199C936D6F45A4E51AC4CEF5EB9CD767B3BE2801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9e:60:18:01:e2:39:35:83:99:44:93:24:3f:
                    ad:63:e6:e1:55:e8:a8:2d:56:98:d6:65:a7:ae:de:
                    89:9f:38:4e:4d:27:32:0e:b8:87:2c:eb:91:bd:b1:
                    4a:b6:f7:3e:94:f1:ef:c8:71:2d:64:5f:92:ae:0d:
                    87:58:60:04:87:02:5b:15:cb:bb:4d:71:ad:83:33:
                    51:09:3c:f8:58:07:b3:4b:bd:7a:a6:94:19:e9:18:
                    c2:17:69:78:ab:9a:aa:50:61:fc:67:6a:c0:fb:ef:
                    8a:c0:6c:48:43:95:1e:a7:38:2d:ad:f0:5a:f3:9b:
                    94:8d:90:2d:20:9a:36:3b:fd:9e:2d:4b:32:72:8e:
                    cb:de:35:5d:60:f6:48:9c:a9:2d:fd:77:25:8f:ea:
                    6a:05:cd:fc:83:99:43:39:8d:40:68:09:ff:1c:7a:
                    41:8c:a5:6c:98:47:a5:8b:e2:51:ab:9c:37:76:6c:
                    34:29:eb:15:f9:4a:b2:7c:83:a9:24:c2:12:0a:80:
                    53:b3:f4:50:eb:91:05:51:6f:75:42:59:c9:31:56:
                    41:2a:89:9a:bb:80:68:5f:0d:13:de:60:91:25:88:
                    b3:bb:9a:b6:5d:95:21:9c:1d:ab:4e:0d:80:17:83:
                    a2:b9:f5:6e:fb:6f:1e:02:57:74:ad:de:0f:55:2c:
                    df:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:9C:93:6D:6F:45:A4:E5:1A:C4:CE:F5:EB:9C:D7:67:B3:BE:28:01
            X509v3 Authority Key Identifier:
                keyid:DF:98:C5:89:9E:61:FB:77:5E:1B:76:7E:B1:69:53:6D:57:A0:7B:AC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/35jFiZ5h-3deG3Z-sWlTbVege6w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/35jFiZ5h-3deG3Z-sWlTbVege6w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/GZyTbW9FpOUaxM7165zXZ7O-KAE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.50.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:0d:4c:33:65:3d:13:b8:3b:09:50:04:d3:3a:55:89:5a:f6:
         56:94:39:08:d1:3f:0b:cd:54:50:8c:4b:76:52:6c:c8:ac:91:
         ea:3a:6f:fc:8d:51:67:a8:48:f3:6c:90:70:91:c9:65:70:be:
         0a:49:67:af:dc:d0:3d:35:66:72:b0:06:34:b6:3d:df:cc:99:
         f5:12:a0:bc:2b:69:35:a4:3b:c8:7a:34:fc:87:d7:51:3d:54:
         bc:ec:96:15:bd:97:55:10:fa:58:32:8b:29:29:ba:03:13:58:
         86:c0:0e:7c:39:f6:1f:e3:52:61:d1:8c:3b:73:1e:a3:3d:89:
         c1:85:d7:e5:08:1f:83:0c:83:fa:92:f4:96:4e:15:98:9a:f1:
         a4:b3:2d:2a:ab:7f:19:b8:20:0a:a9:74:67:05:c8:f5:a2:c4:
         07:6c:f1:32:18:87:cb:e1:d0:59:ec:c1:20:14:41:34:05:87:
         5a:8c:8f:5c:18:48:a8:45:e6:73:55:3f:bb:14:73:e4:c6:8c:
         54:ce:8d:84:0d:4f:19:3b:5c:43:56:14:97:df:a8:48:9b:7b:
         df:29:38:11:c7:60:2e:1c:87:f2:95:af:ba:0c:13:1e:34:a7:
         c5:09:65:b0:87:09:81:d3:be:51:e2:47:78:82:9f:2e:09:31:
         46:b2:e3:8d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIBMzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhERjk4
QzU4OTlFNjFGQjc3NUUxQjc2N0VCMTY5NTM2RDU3QTA3QkFDMB4XDTIzMDQxMzA5
NTQxM1oXDTI0MDMxNDAxMzAwMlowMzExMC8GA1UEAxMoMTk5QzkzNkQ2RjQ1QTRF
NTFBQzRDRUY1RUI5Q0Q3NjdCM0JFMjgwMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANeeYBgB4jk1g5lEkyQ/rWPm4VXoqC1WmNZlp67eiZ84Tk0nMg64
hyzrkb2xSrb3PpTx78hxLWRfkq4Nh1hgBIcCWxXLu01xrYMzUQk8+FgHs0u9eqaU
GekYwhdpeKuaqlBh/GdqwPvvisBsSEOVHqc4La3wWvOblI2QLSCaNjv9ni1LMnKO
y941XWD2SJypLf13JY/qagXN/IOZQzmNQGgJ/xx6QYylbJhHpYviUaucN3ZsNCnr
FflKsnyDqSTCEgqAU7P0UOuRBVFvdUJZyTFWQSqJmruAaF8NE95gkSWIs7uatl2V
IZwdq04NgBeDorn1bvtvHgJXdK3eD1Us31MCAwEAAaOCAiYwggIiMB0GA1UdDgQW
BBQZnJNtb0Wk5RrEzvXrnNdns74oATAfBgNVHSMEGDAWgBTfmMWJnmH7d14bdn6x
aVNtV6B7rDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTk0OS8zNWpGaVo1aC0zZGVHM1otc1dsVGJWZWdlNncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8zNWpGaVo1aC0zZGVHM1otc1dsVGJW
ZWdlNncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI
KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTk0OS9HWnlUYlc5RnBPVWF4TTcxNjV6WFo3Ty1LQUUucm9h
MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv
cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQBwDIYMA0GCSqGSIb3DQEBCwUAA4IBAQCwDUwzZT0TuDsJUATTOlWJWvZW
lDkI0T8LzVRQjEt2UmzIrJHqOm/8jVFnqEjzbJBwkcllcL4KSWev3NA9NWZysAY0
tj3fzJn1EqC8K2k1pDvIejT8h9dRPVS87JYVvZdVEPpYMospKboDE1iGwA58OfYf
41Jh0Yw7cx6jPYnBhdflCB+DDIP6kvSWThWYmvGksy0qq38ZuCAKqXRnBcj1osQH
bPEyGIfL4dBZ7MEgFEE0BYdajI9cGEioReZzVT+7FHPkxoxUzo2EDU8ZO1xDVhSX
36hIm3vfKTgRx2AuHIfyla+6DBMeNKfFCWWwhwmB075R4kd4gp8uCTFGsuON
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:39 2024 by rpki-client on console-ams.rpki-client.org