Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20034/lmaJOMm3G2fvXqslw37wgGubH38.roa
File:                     lmaJOMm3G2fvXqslw37wgGubH38.roa (raw, json)
Hash identifier:          idTd6W77kSM57rSlR4mScCn+wVLPfVH/SHLdlA26EA8=
Subject key identifier:   96:66:89:38:C9:B7:1B:67:EF:5E:AB:25:C3:7E:F0:80:6B:9B:1F:7F
Certificate issuer:       /CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3
Certificate serial:       08
Authority key identifier: 8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/lmaJOMm3G2fvXqslw37wgGubH38.roa
Signing time:             Thu 26 Jan 2023 04:16:03 +0000
ROA not before:           Thu 26 Jan 2023 04:16:03 +0000
ROA not after:            Fri 26 Jan 2024 04:04:30 +0000
asID:                     131923
IP address blocks:        133.88.92.0/23 maxlen: 25

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3
        Validity
            Not Before: Jan 26 04:16:03 2023 GMT
            Not After : Jan 26 04:04:30 2024 GMT
        Subject: CN=96668938C9B71B67EF5EAB25C37EF0806B9B1F7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ef:04:8c:65:89:c0:aa:33:91:db:02:e4:01:
                    41:4c:df:5d:3c:1a:ff:df:a7:3c:bb:fd:e1:59:26:
                    d9:2f:1b:80:5c:34:cb:e6:21:4a:e1:bf:ee:94:1a:
                    5d:e5:79:45:f0:e3:fd:cb:52:cf:30:d9:7d:b3:4b:
                    ea:fc:cb:10:ad:41:e1:05:53:8e:f6:3f:4a:04:b5:
                    28:30:ef:96:f4:46:41:b4:98:ea:0e:52:50:39:dd:
                    9c:8e:52:13:9f:6b:20:4f:d1:39:ac:f3:7f:84:99:
                    7a:8c:34:94:9b:79:48:e5:74:81:c2:8f:94:51:a4:
                    7c:e7:27:0a:83:35:ff:94:47:d0:3f:28:b8:29:9d:
                    c0:5c:ea:4a:2a:ad:4b:4d:91:93:9e:a5:a4:2e:76:
                    60:18:1b:df:2d:e0:26:5d:2d:80:de:f0:8f:eb:ea:
                    46:1f:0d:c2:e1:d7:f5:7e:21:86:a2:85:64:47:fa:
                    d2:7d:85:ae:ff:be:0a:33:49:8a:86:f7:0b:ca:45:
                    2e:50:8f:60:ca:85:a9:67:f2:71:28:04:74:7d:d3:
                    85:a9:50:99:6a:75:52:00:6e:0d:35:98:14:b8:e0:
                    12:bb:94:23:af:65:23:10:35:76:cc:52:a5:a4:0a:
                    76:d0:2c:85:24:bf:57:b3:03:bb:34:83:8a:82:7f:
                    4c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:66:89:38:C9:B7:1B:67:EF:5E:AB:25:C3:7E:F0:80:6B:9B:1F:7F
            X509v3 Authority Key Identifier:
                keyid:8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/lmaJOMm3G2fvXqslw37wgGubH38.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.88.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:bf:ab:3a:f0:1a:a2:30:7c:bb:d1:cf:9d:ca:84:ab:3f:79:
         cd:92:12:61:75:d1:db:84:6c:6d:59:17:c7:49:be:73:78:29:
         45:d9:53:fd:ca:21:d9:1b:30:7c:7b:f6:20:40:2c:a0:93:77:
         e0:8a:71:2e:cf:e4:3e:f3:5f:69:c0:c3:73:cf:eb:38:bb:ab:
         4b:5c:1d:09:57:52:ba:b3:7e:f6:fa:a1:99:f9:01:d6:4c:43:
         aa:95:19:d9:ba:ae:f4:52:9e:7b:72:58:8a:b1:43:25:df:92:
         44:e9:0f:42:cb:c7:cf:b8:ed:0e:17:eb:f8:34:aa:fc:35:0b:
         53:1e:66:4c:0c:33:f3:3e:3e:4b:37:c2:c5:63:6e:11:2d:c3:
         fe:e6:ed:db:b4:26:d1:e4:c0:52:9d:73:bb:b3:9a:f8:d5:f1:
         f9:6a:13:a9:ea:9c:cb:13:25:c7:9d:a2:43:d2:31:df:73:18:
         68:08:0a:d9:95:7c:4d:ff:d4:48:e8:52:92:80:25:a8:2c:40:
         a7:25:00:14:35:c6:cd:0d:6c:03:37:28:19:b7:92:30:bd:11:
         8e:b9:aa:20:cd:e2:38:8c:5e:c6:86:31:ff:4d:0a:10:04:69:
         6d:ce:15:72:8b:71:ac:05:c4:6d:a5:df:7a:ec:d3:17:aa:21:
         6a:73:7b:0d
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBCDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDYy
QTg2RUFCMzlGQzQwRTMxOUJFNzM0NkYyMkNDOEY1QjE5MUEzMB4XDTIzMDEyNjA0
MTYwM1oXDTI0MDEyNjA0MDQzMFowMzExMC8GA1UEAxMoOTY2Njg5MzhDOUI3MUI2
N0VGNUVBQjI1QzM3RUYwODA2QjlCMUY3RjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMzvBIxlicCqM5HbAuQBQUzfXTwa/9+nPLv94Vkm2S8bgFw0y+Yh
SuG/7pQaXeV5RfDj/ctSzzDZfbNL6vzLEK1B4QVTjvY/SgS1KDDvlvRGQbSY6g5S
UDndnI5SE59rIE/ROazzf4SZeow0lJt5SOV0gcKPlFGkfOcnCoM1/5RH0D8ouCmd
wFzqSiqtS02Rk56lpC52YBgb3y3gJl0tgN7wj+vqRh8NwuHX9X4hhqKFZEf60n2F
rv++CjNJiob3C8pFLlCPYMqFqWfycSgEdH3ThalQmWp1UgBuDTWYFLjgEruUI69l
IxA1dsxSpaQKdtAshSS/V7MDuzSDioJ/TBUCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBSWZok4ybcbZ+9eqyXDfvCAa5sffzAfBgNVHSMEGDAWgBSNYqhuqzn8QOMZvnNG
8izI9bGRozAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwMzQvaldLb2JxczVfRURqR2I1elJ2SXN5UFd4a2FNLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvaldLb2JxczVfRURqR2I1elJ2SXN5
UFd4a2FNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDM0L2xtYUpPTW0zRzJmdlhxc2x3Mzd3Z0d1YkgzOC5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAGFWFwwDQYJKoZIhvcNAQELBQADggEBAD6/qzrwGqIwfLvRz53KhKs/
ec2SEmF10duEbG1ZF8dJvnN4KUXZU/3KIdkbMHx79iBALKCTd+CKcS7P5D7zX2nA
w3PP6zi7q0tcHQlXUrqzfvb6oZn5AdZMQ6qVGdm6rvRSnntyWIqxQyXfkkTpD0LL
x8+47Q4X6/g0qvw1C1MeZkwMM/M+Pks3wsVjbhEtw/7m7du0JtHkwFKdc7uzmvjV
8flqE6nqnMsTJcedokPSMd9zGGgICtmVfE3/1EjoUpKAJagsQKclABQ1xs0NbAM3
KBm3kjC9EY65qiDN4jiMXsaGMf9NChAEaW3OFXKLcawFxG2l33rs0xeqIWpzew0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:39 2024 by rpki-client on console-ams.rpki-client.org