Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/K5zqzGcv9Vz2-lDAnEhSGmnEAeA.roa
File:                     K5zqzGcv9Vz2-lDAnEhSGmnEAeA.roa (raw, json)
Hash identifier:          tLRTIjiGTUuHKTzN85ObjHo4S30Jt0GPO5rjlSTPn0g=
Subject key identifier:   2B:9C:EA:CC:67:2F:F5:5C:F6:FA:50:C0:9C:48:52:1A:69:C4:01:E0
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       13
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/K5zqzGcv9Vz2-lDAnEhSGmnEAeA.roa
Signing time:             Tue 07 Jun 2022 00:32:53 +0000
ROA not before:           Tue 07 Jun 2022 00:32:53 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2554
IP address blocks:        61.206.32.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Jun  7 00:32:53 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=2B9CEACC672FF55CF6FA50C09C48521A69C401E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:62:72:94:19:ac:fa:66:ed:3d:9e:78:fd:ec:
                    79:5c:25:b9:5b:26:d6:3b:14:6d:ac:6f:7e:2e:9f:
                    79:45:ce:2c:35:c3:22:cd:23:d9:03:58:0d:b5:5a:
                    d4:ad:e2:9e:89:0d:d1:1e:73:b0:20:a1:35:90:92:
                    43:44:76:a8:a1:b7:47:4d:cd:9c:5a:33:9d:09:bc:
                    a7:89:f8:28:1b:9a:a2:a4:c4:20:dd:ca:f5:58:9f:
                    25:9d:ca:84:06:09:f4:c0:d2:fb:70:79:ca:df:3e:
                    16:5c:85:52:cd:2b:89:ab:2b:2a:15:db:38:98:55:
                    2a:7f:7f:e7:3d:eb:d9:3e:b1:f9:7a:81:53:cb:06:
                    15:2a:c5:c5:2f:ba:b9:42:27:6d:71:ea:a2:11:88:
                    c1:3f:1d:9a:0e:6c:32:ce:9b:97:7b:f2:f3:d4:5a:
                    b1:83:ec:a9:a3:d3:f9:0e:da:01:25:0d:32:b9:ad:
                    1b:c4:36:d4:e1:40:ff:82:87:b8:15:5d:21:5d:1d:
                    60:61:d3:c8:69:76:46:9a:74:c5:ee:26:3f:02:be:
                    c0:94:f9:0f:dc:2a:20:7a:d6:7b:ce:de:d7:8e:a0:
                    e5:45:ef:78:d9:2c:87:75:db:95:65:46:aa:a5:fe:
                    dd:e5:6c:95:b2:d0:a4:97:28:7e:88:79:d5:52:f4:
                    94:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:9C:EA:CC:67:2F:F5:5C:F6:FA:50:C0:9C:48:52:1A:69:C4:01:E0
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/K5zqzGcv9Vz2-lDAnEhSGmnEAeA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.206.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         33:2d:13:fd:6a:04:3d:8b:04:42:39:87:37:c7:1b:96:2a:46:
         7f:61:04:65:4e:37:c3:d4:32:b6:0d:4c:19:de:da:68:2d:ce:
         13:8b:45:14:01:9f:5b:78:70:cb:e0:c8:ab:a2:a5:1d:ad:58:
         85:de:64:1a:69:51:5c:c4:eb:cc:30:9b:f7:7a:9b:21:f3:7c:
         ef:84:51:70:f9:7c:ca:df:4a:fd:2a:83:6a:ab:02:51:ad:4d:
         70:77:f8:78:57:2f:f6:ea:e1:2f:2b:6e:85:4b:0b:02:c0:68:
         5b:55:65:5d:6f:11:c9:ea:53:67:64:9e:ea:05:5a:1a:40:cc:
         1e:3a:08:cf:25:67:51:e4:fb:12:af:6c:cc:b3:51:24:7a:e5:
         b4:d1:82:30:e4:64:f5:dc:11:4c:13:07:33:e6:e5:a3:09:9c:
         a9:cf:b8:62:80:41:04:59:90:39:44:ff:76:85:0f:db:7a:99:
         03:46:1a:37:2a:a1:ca:62:77:49:42:67:3c:bb:01:3a:28:34:
         c5:f6:41:90:1e:6d:23:a8:3a:bf:a1:0a:09:f7:3f:63:cd:af:
         63:4d:d5:9b:04:ee:5f:53:c4:f2:01:d6:a9:19:03:2b:72:d0:
         b0:f9:e0:7a:27:a9:63:39:7b:6c:e7:0f:40:38:41:52:87:5e:
         f2:b6:80:d4
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBEzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1OTBB
ODIyODhEMkUyM0RCRkE4NzYzOEYzRUI4Qjk5NUUxODk3RTk1MB4XDTIyMDYwNzAw
MzI1M1oXDTIzMDUxNTAxMzAwNFowMzExMC8GA1UEAxMoMkI5Q0VBQ0M2NzJGRjU1
Q0Y2RkE1MEMwOUM0ODUyMUE2OUM0MDFFMDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALhicpQZrPpm7T2eeP3seVwluVsm1jsUbaxvfi6feUXOLDXDIs0j
2QNYDbVa1K3inokN0R5zsCChNZCSQ0R2qKG3R03NnFoznQm8p4n4KBuaoqTEIN3K
9VifJZ3KhAYJ9MDS+3B5yt8+FlyFUs0riasrKhXbOJhVKn9/5z3r2T6x+XqBU8sG
FSrFxS+6uUInbXHqohGIwT8dmg5sMs6bl3vy89RasYPsqaPT+Q7aASUNMrmtG8Q2
1OFA/4KHuBVdIV0dYGHTyGl2Rpp0xe4mPwK+wJT5D9wqIHrWe87e146g5UXveNks
h3XblWVGqqX+3eVslbLQpJcofoh51VL0lJECAwEAAaOCAigwggIkMB0GA1UdDgQW
BBQrnOrMZy/1XPb6UMCcSFIaacQB4DAfBgNVHSMEGDAWgBRZCoIojS4j2/qHY48+
uLmV4Yl+lTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwODMvV1FxQ0tJMHVJOXY2aDJPUFByaTVsZUdKZnBVLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvV1FxQ0tJMHVJOXY2aDJPUFByaTVs
ZUdKZnBVLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDgzL0s1enF6R2N2OVZ6Mi1sREFuRWhTR21uRUFlQS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAQ9ziAwDQYJKoZIhvcNAQELBQADggEBADMtE/1qBD2LBEI5hzfHG5Yq
Rn9hBGVON8PUMrYNTBne2mgtzhOLRRQBn1t4cMvgyKuipR2tWIXeZBppUVzE68ww
m/d6myHzfO+EUXD5fMrfSv0qg2qrAlGtTXB3+HhXL/bq4S8rboVLCwLAaFtVZV1v
EcnqU2dknuoFWhpAzB46CM8lZ1Hk+xKvbMyzUSR65bTRgjDkZPXcEUwTBzPm5aMJ
nKnPuGKAQQRZkDlE/3aFD9t6mQNGGjcqocpid0lCZzy7ATooNMX2QZAebSOoOr+h
Cgn3P2PNr2NN1ZsE7l9TxPIB1qkZAyty0LD54HonqWM5e2znD0A4QVKHXvK2gNQ=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:09 2023 by rpki-client on console-ams.rpki-client.org