Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1949/knRMBY3_uhMmVHhMgNg8mSq1t7U.roa
File:                     knRMBY3_uhMmVHhMgNg8mSq1t7U.roa (raw, json)
Hash identifier:          chdIJsB63TNFqMn4voy1iAWTUaQEwznEAWEZXaeZ6rk=
Subject key identifier:   92:74:4C:05:8D:FF:BA:13:26:54:78:4C:80:D8:3C:99:2A:B5:B7:B5
Certificate issuer:       /CN=DF98C5899E61FB775E1B767EB169536D57A07BAC
Certificate serial:       26
Authority key identifier: DF:98:C5:89:9E:61:FB:77:5E:1B:76:7E:B1:69:53:6D:57:A0:7B:AC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/35jFiZ5h-3deG3Z-sWlTbVege6w.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/knRMBY3_uhMmVHhMgNg8mSq1t7U.roa
Signing time:             Sun 01 May 2022 01:31:14 +0000
ROA not before:           Sun 01 May 2022 01:31:14 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     2504
IP address blocks:        192.50.26.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF98C5899E61FB775E1B767EB169536D57A07BAC
        Validity
            Not Before: May  1 01:31:14 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=92744C058DFFBA132654784C80D83C992AB5B7B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:62:0c:57:05:81:8b:4d:1d:42:2b:67:e4:84:
                    bf:ab:26:71:36:bf:4e:b2:5e:85:51:c9:c6:0c:cf:
                    0f:ed:fb:f4:71:ac:fd:ca:51:b2:c4:aa:ce:31:6a:
                    de:76:a8:94:df:e9:24:7a:61:02:90:e8:68:6b:be:
                    52:d7:7e:88:ec:bc:ff:70:1e:0c:57:c5:f6:93:ea:
                    3a:8f:ef:5c:ce:b4:58:93:fd:46:55:79:29:f4:f6:
                    0d:ad:f5:e4:49:4e:3d:2c:e5:6b:c9:3b:3f:b1:ff:
                    01:f4:e7:d2:6a:9e:67:05:38:74:56:25:72:ba:9d:
                    12:d2:31:18:6f:c6:1d:72:58:31:93:af:49:e9:c9:
                    72:62:5b:1c:3e:53:c0:32:bf:32:89:49:11:c0:73:
                    04:81:6c:01:21:ef:a0:2d:9a:51:65:f1:12:09:ab:
                    6d:57:27:0c:1b:23:87:e7:eb:5f:80:e7:fc:b9:48:
                    c1:a1:ae:dd:fb:34:e6:f5:03:18:e0:89:a0:a8:85:
                    0f:8c:51:c8:60:2d:1d:72:8b:61:27:47:e8:b9:9d:
                    ac:8d:23:3f:05:ca:5f:c0:56:c7:b3:c7:da:30:3c:
                    fa:30:25:28:81:37:21:49:69:6f:83:2f:a2:f4:91:
                    b8:59:4d:9f:58:ef:1f:7e:20:6f:ee:12:f1:0e:15:
                    a2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:74:4C:05:8D:FF:BA:13:26:54:78:4C:80:D8:3C:99:2A:B5:B7:B5
            X509v3 Authority Key Identifier:
                keyid:DF:98:C5:89:9E:61:FB:77:5E:1B:76:7E:B1:69:53:6D:57:A0:7B:AC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/35jFiZ5h-3deG3Z-sWlTbVege6w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/35jFiZ5h-3deG3Z-sWlTbVege6w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/knRMBY3_uhMmVHhMgNg8mSq1t7U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.50.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:df:9e:90:08:3f:58:72:3d:2f:1f:c5:22:5d:c6:40:67:56:
         c7:66:a4:44:5c:e2:55:14:51:f6:f7:b3:2c:6d:7f:71:b6:2a:
         df:da:f1:0e:59:e7:1d:97:e7:22:65:53:07:00:ca:ea:16:de:
         c5:45:89:c7:f7:a0:f7:e8:2c:ff:a3:23:06:52:40:1c:bf:97:
         7e:6c:e6:e4:d7:7d:a7:d5:d1:38:09:9c:19:88:de:69:bc:f4:
         ec:3b:1d:e4:b5:98:0f:e1:ca:0e:65:af:19:d5:06:14:3d:da:
         3d:fe:29:37:91:fb:d0:8d:22:a5:44:9e:95:8b:a3:9b:d2:6e:
         6f:ca:3e:c0:9f:41:78:cb:42:58:5a:84:fc:c9:62:db:ca:d2:
         4a:2b:bc:1b:09:69:4d:79:19:5a:70:1e:b7:23:f1:d4:e7:1b:
         2c:cc:7b:65:1f:a6:39:2d:7a:69:56:5d:9a:96:cf:dc:78:6d:
         3a:6b:56:94:62:e4:9b:cc:11:0a:d1:9c:af:e2:5d:3e:19:07:
         96:25:8f:22:5d:38:f1:28:0b:d9:c2:1c:84:25:2f:e5:00:1c:
         d0:4b:89:75:92:89:66:a5:79:06:a1:97:fc:33:b0:37:58:5b:
         41:2e:62:4f:31:c3:56:63:c4:0c:53:20:ac:ac:f5:e5:0d:ea:
         9c:da:c5:bf
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIBJjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhERjk4
QzU4OTlFNjFGQjc3NUUxQjc2N0VCMTY5NTM2RDU3QTA3QkFDMB4XDTIyMDUwMTAx
MzExNFoXDTIzMDQyNzA5NTIzNFowMzExMC8GA1UEAxMoOTI3NDRDMDU4REZGQkEx
MzI2NTQ3ODRDODBEODNDOTkyQUI1QjdCNTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMpiDFcFgYtNHUIrZ+SEv6smcTa/TrJehVHJxgzPD+379HGs/cpR
ssSqzjFq3naolN/pJHphApDoaGu+Utd+iOy8/3AeDFfF9pPqOo/vXM60WJP9RlV5
KfT2Da315ElOPSzla8k7P7H/AfTn0mqeZwU4dFYlcrqdEtIxGG/GHXJYMZOvSenJ
cmJbHD5TwDK/MolJEcBzBIFsASHvoC2aUWXxEgmrbVcnDBsjh+frX4Dn/LlIwaGu
3fs05vUDGOCJoKiFD4xRyGAtHXKLYSdH6LmdrI0jPwXKX8BWx7PH2jA8+jAlKIE3
IUlpb4MvovSRuFlNn1jvH34gb+4S8Q4VojMCAwEAAaOCAiYwggIiMB0GA1UdDgQW
BBSSdEwFjf+6EyZUeEyA2DyZKrW3tTAfBgNVHSMEGDAWgBTfmMWJnmH7d14bdn6x
aVNtV6B7rDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTk0OS8zNWpGaVo1aC0zZGVHM1otc1dsVGJWZWdlNncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8zNWpGaVo1aC0zZGVHM1otc1dsVGJW
ZWdlNncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI
KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTk0OS9rblJNQlkzX3VoTW1WSGhNZ05nOG1TcTF0N1Uucm9h
MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv
cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQAwDIaMA0GCSqGSIb3DQEBCwUAA4IBAQAH356QCD9Ycj0vH8UiXcZAZ1bH
ZqREXOJVFFH297MsbX9xtirf2vEOWecdl+ciZVMHAMrqFt7FRYnH96D36Cz/oyMG
UkAcv5d+bObk132n1dE4CZwZiN5pvPTsOx3ktZgP4coOZa8Z1QYUPdo9/ik3kfvQ
jSKlRJ6Vi6Ob0m5vyj7An0F4y0JYWoT8yWLbytJKK7wbCWlNeRlacB63I/HU5xss
zHtlH6Y5LXppVl2als/ceG06a1aUYuSbzBEK0Zyv4l0+GQeWJY8iXTjxKAvZwhyE
JS/lABzQS4l1kolmpXkGoZf8M7A3WFtBLmJPMcNWY8QMUyCsrPXlDeqc2sW/
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:02 2023 by rpki-client on console-fra.rpki-client.org