Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20174/xfcy2hSz3UvhWBoTpDE2WoWIPsU.roa
File:                     xfcy2hSz3UvhWBoTpDE2WoWIPsU.roa (raw, json)
Hash identifier:          3OTQkoEwUYtKZUmORwu2tcWIPMIgkc/bpqIq5FIMIfU=
Subject key identifier:   C5:F7:32:DA:14:B3:DD:4B:E1:58:1A:13:A4:31:36:5A:85:88:3E:C5
Certificate issuer:       /CN=B6F3909EDB829A43BA546F18CAA4F29010209B4B
Certificate serial:       03
Authority key identifier: B6:F3:90:9E:DB:82:9A:43:BA:54:6F:18:CA:A4:F2:90:10:20:9B:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/tvOQntuCmkO6VG8YyqTykBAgm0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20174/xfcy2hSz3UvhWBoTpDE2WoWIPsU.roa
Signing time:             Mon 15 Aug 2022 04:28:32 +0000
ROA not before:           Mon 15 Aug 2022 04:28:32 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     146974
IP address blocks:        103.175.110.0/23 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F3909EDB829A43BA546F18CAA4F29010209B4B
        Validity
            Not Before: Aug 15 04:28:32 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=C5F732DA14B3DD4BE1581A13A431365A85883EC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b4:40:2a:92:a3:76:f8:89:18:ba:00:b6:80:
                    ea:d6:e6:76:5f:76:1b:12:c7:52:cf:ff:6c:20:cf:
                    d3:27:a4:17:5d:c6:fc:c2:0f:7b:1e:10:51:bc:e4:
                    86:65:2a:2b:68:2f:fd:96:97:6f:86:28:ff:7f:14:
                    8f:66:e5:bc:c8:5b:fa:cb:fd:cb:5b:87:18:c1:50:
                    6e:29:39:e9:18:15:fa:ff:f1:43:bc:5c:4d:39:c7:
                    df:29:01:a7:83:5d:da:f4:42:6b:d3:7d:dd:40:c3:
                    ae:65:48:1f:98:3c:42:f1:6e:1e:1e:66:2c:b5:0f:
                    2e:c0:37:81:3f:19:aa:50:a0:56:35:fe:30:db:58:
                    b3:16:52:75:9e:c7:1b:66:11:b5:b3:0b:3c:c1:4a:
                    d7:68:41:51:6a:dc:42:16:b5:0e:86:f9:93:c0:02:
                    5e:6a:ac:6f:14:8f:9f:3c:08:2b:29:6e:06:16:59:
                    da:68:36:01:b4:4a:40:24:e9:49:4e:d7:86:57:d0:
                    30:17:62:89:24:bd:a3:60:94:64:31:2d:9f:9e:bf:
                    f6:07:5b:51:55:06:ba:f2:c1:e9:c7:52:7d:da:76:
                    32:c8:be:b0:63:d3:dd:27:2f:92:73:98:3f:92:a2:
                    37:33:91:4c:54:dc:43:c2:5a:a3:36:8d:86:bd:4c:
                    ee:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:F7:32:DA:14:B3:DD:4B:E1:58:1A:13:A4:31:36:5A:85:88:3E:C5
            X509v3 Authority Key Identifier:
                keyid:B6:F3:90:9E:DB:82:9A:43:BA:54:6F:18:CA:A4:F2:90:10:20:9B:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20174/tvOQntuCmkO6VG8YyqTykBAgm0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/tvOQntuCmkO6VG8YyqTykBAgm0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20174/xfcy2hSz3UvhWBoTpDE2WoWIPsU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:75:4f:01:9b:51:13:d2:f9:3b:6d:8a:01:4f:dd:a9:ca:70:
         a5:dc:36:5f:61:7a:0d:05:eb:e4:2d:e2:5e:80:cc:ea:67:1c:
         e5:06:6f:85:7a:00:36:26:d9:75:cc:50:5d:af:d2:1e:f0:4c:
         38:f9:a1:1e:50:17:68:11:16:73:66:ea:02:48:97:2c:94:35:
         3d:f9:ba:d5:ad:d4:44:68:be:a6:af:c8:61:92:2f:cd:e4:ad:
         49:4a:27:67:38:7a:ee:34:93:a1:b6:f5:ad:50:a5:95:b8:0c:
         19:05:26:10:2f:81:47:dd:44:cc:d2:c9:b7:6a:41:0a:39:91:
         e5:19:d2:bd:6a:af:fd:7b:28:33:7f:7b:22:86:ad:59:a4:79:
         a2:43:31:ae:6a:ec:4d:fc:73:ce:4d:65:c5:63:69:28:74:e7:
         09:c0:b3:4d:f9:76:f5:ff:2f:f7:ec:5f:43:09:7a:f5:2e:81:
         bb:4a:14:c9:e0:10:24:9a:48:a4:5c:11:aa:24:7d:fb:b9:0c:
         9e:7e:c5:5c:b1:f9:8e:26:82:e5:9e:d4:20:1a:c5:dd:39:b4:
         1b:2e:fd:b3:d7:25:3a:20:c0:e5:55:e8:c9:1b:fb:56:72:19:
         75:5e:19:cf:8d:70:c4:c4:a6:91:f4:71:d3:8a:d3:d0:2c:5a:
         9b:56:19:6b
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCNkYz
OTA5RURCODI5QTQzQkE1NDZGMThDQUE0RjI5MDEwMjA5QjRCMB4XDTIyMDgxNTA0
MjgzMloXDTIzMDgxNTAxMzAwM1owMzExMC8GA1UEAxMoQzVGNzMyREExNEIzREQ0
QkUxNTgxQTEzQTQzMTM2NUE4NTg4M0VDNTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKm0QCqSo3b4iRi6ALaA6tbmdl92GxLHUs//bCDP0yekF13G/MIP
ex4QUbzkhmUqK2gv/ZaXb4Yo/38Uj2blvMhb+sv9y1uHGMFQbik56RgV+v/xQ7xc
TTnH3ykBp4Nd2vRCa9N93UDDrmVIH5g8QvFuHh5mLLUPLsA3gT8ZqlCgVjX+MNtY
sxZSdZ7HG2YRtbMLPMFK12hBUWrcQha1Dob5k8ACXmqsbxSPnzwIKyluBhZZ2mg2
AbRKQCTpSU7XhlfQMBdiiSS9o2CUZDEtn56/9gdbUVUGuvLB6cdSfdp2Msi+sGPT
3ScvknOYP5KiNzORTFTcQ8JaozaNhr1M7okCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBTF9zLaFLPdS+FYGhOkMTZahYg+xTAfBgNVHSMEGDAWgBS285Ce24KaQ7pUbxjK
pPKQECCbSzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAxNzQvdHZPUW50dUNta082Vkc4WXlxVHlrQkFnbTBzLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdHZPUW50dUNta082Vkc4WXlxVHlr
QkFnbTBzLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMTc0L3hmY3kyaFN6M1V2aFdCb1RwREUyV29XSVBzVS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAFnr24wDQYJKoZIhvcNAQELBQADggEBAEh1TwGbURPS+TttigFP3anK
cKXcNl9heg0F6+Qt4l6AzOpnHOUGb4V6ADYm2XXMUF2v0h7wTDj5oR5QF2gRFnNm
6gJIlyyUNT35utWt1ERovqavyGGSL83krUlKJ2c4eu40k6G29a1QpZW4DBkFJhAv
gUfdRMzSybdqQQo5keUZ0r1qr/17KDN/eyKGrVmkeaJDMa5q7E38c85NZcVjaSh0
5wnAs035dvX/L/fsX0MJevUugbtKFMngECSaSKRcEaokffu5DJ5+xVyx+Y4mguWe
1CAaxd05tBsu/bPXJTogwOVV6Mkb+1ZyGXVeGc+NcMTEppH0cdOK09AsWptWGWs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:39 2024 by rpki-client on console-ams.rpki-client.org