Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20034/liP45SgVgWTCKz7oBgUiP-IjlAE.roa
File:                     liP45SgVgWTCKz7oBgUiP-IjlAE.roa (raw, json)
Hash identifier:          ldysEgKOk0rkqkfnfksm2PwNiglr3JPBt+Qwwve7XLw=
Subject key identifier:   96:23:F8:E5:28:15:81:64:C2:2B:3E:E8:06:05:22:3F:E2:23:94:01
Certificate issuer:       /CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3
Certificate serial:       04
Authority key identifier: 8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/liP45SgVgWTCKz7oBgUiP-IjlAE.roa
Signing time:             Thu 26 Jan 2023 04:16:02 +0000
ROA not before:           Thu 26 Jan 2023 04:16:02 +0000
ROA not after:            Fri 26 Jan 2024 04:04:30 +0000
asID:                     131923
IP address blocks:        120.50.192.0/20 maxlen: 25

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3
        Validity
            Not Before: Jan 26 04:16:02 2023 GMT
            Not After : Jan 26 04:04:30 2024 GMT
        Subject: CN=9623F8E528158164C22B3EE80605223FE2239401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fb:c1:6f:a7:53:86:be:7c:18:3a:c6:21:0e:
                    62:c3:32:69:e5:08:de:20:34:17:f5:1b:50:59:e2:
                    18:37:cd:96:4a:c7:9e:4a:0f:69:2c:e5:6b:fc:c1:
                    35:9f:ba:15:a7:66:76:11:30:40:5f:7b:b9:bc:00:
                    4f:26:f6:45:2d:19:49:65:2d:ba:4c:3f:ce:8f:35:
                    3c:42:ca:92:2e:bf:d4:c6:0e:46:8e:60:df:59:fd:
                    a8:9f:b1:77:4f:3c:24:79:20:d8:a5:c7:63:8b:07:
                    d8:e1:30:ac:ff:55:94:69:16:cb:1e:37:cd:d9:6a:
                    03:62:2a:c8:e8:b2:07:d6:50:bf:a4:7d:0c:24:23:
                    c7:71:c7:ac:39:fb:fe:09:74:b2:9a:a6:1c:a9:51:
                    2d:c9:b1:6c:f6:e4:cd:bf:a2:c6:12:8a:25:f5:62:
                    ae:0e:93:2e:2b:5a:15:55:1d:7f:9c:57:a8:fb:ff:
                    60:40:2c:71:34:3c:d0:82:a0:a9:53:68:f0:47:30:
                    fb:23:83:42:02:49:06:0e:bd:12:9f:8a:e4:36:25:
                    c4:98:d9:90:f5:e8:1c:ab:e9:a3:2e:66:5f:16:26:
                    4d:a8:66:f4:70:dc:c7:a2:97:16:55:2b:0b:57:05:
                    be:a5:9c:de:d5:6f:e8:18:e3:34:b0:b9:b6:8a:b6:
                    44:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:23:F8:E5:28:15:81:64:C2:2B:3E:E8:06:05:22:3F:E2:23:94:01
            X509v3 Authority Key Identifier:
                keyid:8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/liP45SgVgWTCKz7oBgUiP-IjlAE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.50.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         60:71:26:10:ed:77:89:4f:29:9c:1f:36:4d:a7:15:aa:f7:9e:
         17:e5:ba:9f:65:63:c1:94:d7:69:f5:b2:87:f9:8d:4e:89:3b:
         b2:a2:69:b5:ce:48:4a:b8:f1:c1:1e:9e:3f:b7:e6:ea:0b:79:
         69:4d:bf:6a:99:ff:64:54:9b:0a:78:fd:d8:ee:11:6d:bc:22:
         13:a5:ba:54:e1:0e:2f:f3:8a:f8:14:6d:cc:72:2f:46:ad:2d:
         eb:70:fe:e4:6f:c2:03:3d:1f:36:50:4b:9b:0b:b2:19:88:f4:
         ee:85:5e:d2:04:2e:a5:5a:41:17:9f:a9:f7:4d:da:f1:6e:f8:
         ac:4b:2b:1f:98:4d:98:3c:4e:a2:da:4d:76:f6:66:2c:be:27:
         ff:34:d5:73:aa:72:15:bd:88:2d:9c:cc:c2:76:1d:cb:38:eb:
         8b:09:ed:b2:94:a1:4e:2c:70:66:25:a8:e2:c0:01:2f:83:26:
         77:93:34:84:ff:eb:1e:ee:36:4e:f5:d1:01:03:a2:98:c9:c1:
         b8:e1:c9:e1:9d:7a:a8:6c:66:bd:31:c4:d5:87:19:f9:f8:c4:
         f9:6f:e0:67:90:53:d9:75:5e:b7:56:df:2c:10:78:44:28:ab:
         15:80:f9:fc:04:5d:aa:36:d4:c9:2d:c7:57:58:65:90:61:f1:
         31:08:9b:13
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDYy
QTg2RUFCMzlGQzQwRTMxOUJFNzM0NkYyMkNDOEY1QjE5MUEzMB4XDTIzMDEyNjA0
MTYwMloXDTI0MDEyNjA0MDQzMFowMzExMC8GA1UEAxMoOTYyM0Y4RTUyODE1ODE2
NEMyMkIzRUU4MDYwNTIyM0ZFMjIzOTQwMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJz7wW+nU4a+fBg6xiEOYsMyaeUI3iA0F/UbUFniGDfNlkrHnkoP
aSzla/zBNZ+6FadmdhEwQF97ubwATyb2RS0ZSWUtukw/zo81PELKki6/1MYORo5g
31n9qJ+xd088JHkg2KXHY4sH2OEwrP9VlGkWyx43zdlqA2IqyOiyB9ZQv6R9DCQj
x3HHrDn7/gl0spqmHKlRLcmxbPbkzb+ixhKKJfVirg6TLitaFVUdf5xXqPv/YEAs
cTQ80IKgqVNo8Ecw+yODQgJJBg69Ep+K5DYlxJjZkPXoHKvpoy5mXxYmTahm9HDc
x6KXFlUrC1cFvqWc3tVv6BjjNLC5toq2RKkCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBSWI/jlKBWBZMIrPugGBSI/4iOUATAfBgNVHSMEGDAWgBSNYqhuqzn8QOMZvnNG
8izI9bGRozAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwMzQvaldLb2JxczVfRURqR2I1elJ2SXN5UFd4a2FNLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvaldLb2JxczVfRURqR2I1elJ2SXN5
UFd4a2FNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDM0L2xpUDQ1U2dWZ1dUQ0t6N29CZ1VpUC1JamxBRS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAR4MsAwDQYJKoZIhvcNAQELBQADggEBAGBxJhDtd4lPKZwfNk2nFar3
nhflup9lY8GU12n1sof5jU6JO7KiabXOSEq48cEenj+35uoLeWlNv2qZ/2RUmwp4
/djuEW28IhOlulThDi/zivgUbcxyL0atLetw/uRvwgM9HzZQS5sLshmI9O6FXtIE
LqVaQRefqfdN2vFu+KxLKx+YTZg8TqLaTXb2Ziy+J/801XOqchW9iC2czMJ2Hcs4
64sJ7bKUoU4scGYlqOLAAS+DJneTNIT/6x7uNk710QEDopjJwbjhyeGdeqhsZr0x
xNWHGfn4xPlv4GeQU9l1XrdW3ywQeEQoqxWA+fwEXao21Mktx1dYZZBh8TEImxM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:39 2024 by rpki-client on console-ams.rpki-client.org