Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20062/v6vSVCCTIdJoHN7Vl88UVJs-8bY.roa
File:                     v6vSVCCTIdJoHN7Vl88UVJs-8bY.roa (raw, json)
Hash identifier:          aowed7zyB3jVe8ffPM+31GPB7G2novyb4tqb7cxlnPQ=
Subject key identifier:   BF:AB:D2:54:20:93:21:D2:68:1C:DE:D5:97:CF:14:54:9B:3E:F1:B6
Certificate issuer:       /CN=938067C25BCA7D1385BD36C482858F830B5A6E3A
Certificate serial:       11
Authority key identifier: 93:80:67:C2:5B:CA:7D:13:85:BD:36:C4:82:85:8F:83:0B:5A:6E:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k4BnwlvKfROFvTbEgoWPgwtabjo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/v6vSVCCTIdJoHN7Vl88UVJs-8bY.roa
Signing time:             Tue 01 Nov 2022 06:48:07 +0000
ROA not before:           Tue 01 Nov 2022 06:48:07 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     131929
IP address blocks:        133.247.224.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=938067C25BCA7D1385BD36C482858F830B5A6E3A
        Validity
            Not Before: Nov  1 06:48:07 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=BFABD254209321D2681CDED597CF14549B3EF1B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:54:c4:11:3f:15:b4:70:44:dd:82:14:99:f4:
                    18:cf:cb:7a:cf:ee:1b:87:c3:13:d6:d9:5e:0c:2f:
                    c7:d0:01:e4:57:ae:3b:75:5f:2f:b7:7e:04:86:b9:
                    e4:76:62:67:ec:2c:2b:53:eb:a0:e8:4c:19:2f:e4:
                    52:dc:5b:1d:80:1b:17:23:5d:07:f4:39:28:6f:89:
                    9a:e8:50:0f:da:10:b2:64:1a:6e:97:f3:42:78:35:
                    73:35:c7:f8:11:d6:1e:a7:12:e0:e7:cd:10:58:30:
                    f3:f5:35:7c:18:ea:cc:f0:70:3a:5c:90:af:85:28:
                    bb:30:43:06:76:fb:38:47:b2:db:92:27:4b:fb:ac:
                    e0:8e:fb:d4:16:cf:64:b5:94:aa:5e:24:d5:83:73:
                    07:79:47:07:50:d2:9e:10:92:f8:c6:d5:4b:d6:e3:
                    09:8b:c2:c4:a8:19:28:02:5f:95:70:6b:08:9b:4a:
                    e2:7e:05:24:58:e0:19:27:9e:2c:dd:c0:14:c8:24:
                    d0:36:fe:c8:0c:32:2e:2d:50:05:f3:09:eb:b1:41:
                    4f:95:1e:9a:63:ea:0e:4d:d3:16:be:ee:71:d0:0a:
                    67:f6:fc:5c:ad:fc:a6:7e:aa:5c:7d:d2:1e:da:18:
                    79:2c:e4:c4:6a:95:ca:f2:1b:ca:52:ec:1e:df:bc:
                    af:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:AB:D2:54:20:93:21:D2:68:1C:DE:D5:97:CF:14:54:9B:3E:F1:B6
            X509v3 Authority Key Identifier:
                keyid:93:80:67:C2:5B:CA:7D:13:85:BD:36:C4:82:85:8F:83:0B:5A:6E:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/k4BnwlvKfROFvTbEgoWPgwtabjo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k4BnwlvKfROFvTbEgoWPgwtabjo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/v6vSVCCTIdJoHN7Vl88UVJs-8bY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.247.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         74:75:98:3a:cb:64:55:57:a3:b5:da:20:2d:96:42:f5:67:78:
         29:d8:20:04:b8:7e:e6:fa:e4:70:eb:6b:1b:0c:6c:bb:18:ca:
         7d:46:62:43:fc:f8:d9:b2:d6:0b:c3:9b:c8:44:21:89:13:ac:
         4b:4c:d5:58:c1:ee:64:77:98:a0:cf:44:60:9b:07:67:70:60:
         41:d1:2a:08:3d:7f:d9:45:d2:cc:1d:4c:6e:9d:d1:42:72:57:
         7d:58:ce:3e:cd:53:5e:1a:eb:2d:bc:e5:78:4d:3d:31:17:0f:
         60:93:52:9d:e8:57:2d:bd:12:c6:27:36:24:d5:e3:18:a5:05:
         0c:d9:47:f7:73:5b:59:7d:7b:1e:e3:d3:9d:71:58:5e:e3:80:
         c3:20:d5:b7:ac:75:f4:f7:68:76:a2:e9:1a:25:f7:55:0f:36:
         81:6a:e3:16:d9:1d:ba:a9:fc:9f:ce:6f:3c:d4:80:3a:62:82:
         fc:0b:ba:18:3c:c0:82:45:a3:15:50:7f:31:7c:00:09:e8:bc:
         8a:51:7a:57:f3:a8:1c:10:fc:41:02:aa:13:63:4a:fd:5f:26:
         f8:b5:1b:aa:d1:50:7b:5d:17:fd:e3:80:17:5e:93:2c:e2:d1:
         b8:fa:0e:f0:38:f2:00:ec:6d:1b:af:c4:ab:9e:61:c5:9d:78:
         21:6c:92:83
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBETANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5Mzgw
NjdDMjVCQ0E3RDEzODVCRDM2QzQ4Mjg1OEY4MzBCNUE2RTNBMB4XDTIyMTEwMTA2
NDgwN1oXDTIzMTAxNTAxMzAwMlowMzExMC8GA1UEAxMoQkZBQkQyNTQyMDkzMjFE
MjY4MUNERUQ1OTdDRjE0NTQ5QjNFRjFCNjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK1UxBE/FbRwRN2CFJn0GM/Les/uG4fDE9bZXgwvx9AB5FeuO3Vf
L7d+BIa55HZiZ+wsK1ProOhMGS/kUtxbHYAbFyNdB/Q5KG+JmuhQD9oQsmQabpfz
Qng1czXH+BHWHqcS4OfNEFgw8/U1fBjqzPBwOlyQr4UouzBDBnb7OEey25InS/us
4I771BbPZLWUql4k1YNzB3lHB1DSnhCS+MbVS9bjCYvCxKgZKAJflXBrCJtK4n4F
JFjgGSeeLN3AFMgk0Db+yAwyLi1QBfMJ67FBT5UemmPqDk3TFr7ucdAKZ/b8XK38
pn6qXH3SHtoYeSzkxGqVyvIbylLsHt+8rwcCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBS/q9JUIJMh0mgc3tWXzxRUmz7xtjAfBgNVHSMEGDAWgBSTgGfCW8p9E4W9NsSC
hY+DC1puOjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwNjIvazRCbndsdktmUk9GdlRiRWdvV1Bnd3RhYmpvLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvazRCbndsdktmUk9GdlRiRWdvV1Bn
d3RhYmpvLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDYyL3Y2dlNWQ0NUSWRKb0hON1ZsODhVVkpzLThiWS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAOF9+AwDQYJKoZIhvcNAQELBQADggEBAHR1mDrLZFVXo7XaIC2WQvVn
eCnYIAS4fub65HDraxsMbLsYyn1GYkP8+Nmy1gvDm8hEIYkTrEtM1VjB7mR3mKDP
RGCbB2dwYEHRKgg9f9lF0swdTG6d0UJyV31Yzj7NU14a6y285XhNPTEXD2CTUp3o
Vy29EsYnNiTV4xilBQzZR/dzW1l9ex7j051xWF7jgMMg1besdfT3aHai6Rol91UP
NoFq4xbZHbqp/J/ObzzUgDpigvwLuhg8wIJFoxVQfzF8AAnovIpRelfzqBwQ/EEC
qhNjSv1fJvi1G6rRUHtdF/3jgBdekyzi0bj6DvA48gDsbRuvxKueYcWdeCFskoM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org