Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2251/fw1wi6RYlv-iSqAbyWN0V_I04Xc.roa
File:                     fw1wi6RYlv-iSqAbyWN0V_I04Xc.roa (raw, json)
Hash identifier:          A5A1KLINOj/tbYDHg/sxt73+C2FJs32Wl/6mff8Eajs=
Subject key identifier:   7F:0D:70:8B:A4:58:96:FF:A2:4A:A0:1B:C9:63:74:57:F2:34:E1:77
Certificate issuer:       /CN=85FE0FA704460AA4FAEF8FA8CA609F00C4CDE008
Certificate serial:       03
Authority key identifier: 85:FE:0F:A7:04:46:0A:A4:FA:EF:8F:A8:CA:60:9F:00:C4:CD:E0:08
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hf4PpwRGCqT674-oymCfAMTN4Ag.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/fw1wi6RYlv-iSqAbyWN0V_I04Xc.roa
Signing time:             Tue 01 Nov 2022 04:36:14 +0000
ROA not before:           Tue 01 Nov 2022 04:36:14 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2518
IP address blocks:        133.200.0.0/13 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85FE0FA704460AA4FAEF8FA8CA609F00C4CDE008
        Validity
            Not Before: Nov  1 04:36:14 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=7F0D708BA45896FFA24AA01BC9637457F234E177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6b:67:ec:98:ed:f8:a2:17:e3:b8:28:eb:c4:
                    c4:ba:6c:f9:ef:94:b9:f9:cb:b5:ee:b2:9d:82:85:
                    4e:bf:41:3d:21:57:6e:7b:8f:34:bf:5f:25:55:45:
                    c1:59:58:1c:1d:05:9e:9a:80:63:82:8e:e3:aa:5b:
                    2f:64:0d:fc:9d:43:8f:a8:d9:12:2e:82:5b:af:d1:
                    f0:03:71:07:e8:4c:51:82:27:32:fb:35:88:9f:7b:
                    88:63:38:d2:bc:80:dc:29:7c:99:6b:e8:7c:08:1f:
                    95:ce:01:8b:f6:40:a2:c9:83:52:fc:59:27:28:b5:
                    2a:d6:ab:3f:a2:14:4a:9a:3a:0a:fd:05:62:d0:97:
                    56:92:52:65:ea:3c:55:e3:52:2c:3b:9e:73:71:c4:
                    b5:ce:66:84:1a:ae:4e:82:f1:c4:e5:1f:c8:21:4f:
                    b5:84:ee:79:6e:fd:31:90:55:46:a7:1d:ae:50:bc:
                    ba:4a:2e:77:41:1e:b2:09:7b:12:aa:d4:c9:91:46:
                    fd:ce:ac:76:d5:dd:37:c5:d4:4c:0f:de:42:0b:c8:
                    6c:dd:2a:9f:19:1c:79:dc:a7:4a:7a:c9:26:1c:2f:
                    0b:5d:4a:0f:a2:8e:e2:2e:81:20:d2:c1:73:b3:25:
                    de:61:cb:3d:6f:12:5f:5f:ab:70:2d:94:19:e3:48:
                    5c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:0D:70:8B:A4:58:96:FF:A2:4A:A0:1B:C9:63:74:57:F2:34:E1:77
            X509v3 Authority Key Identifier:
                keyid:85:FE:0F:A7:04:46:0A:A4:FA:EF:8F:A8:CA:60:9F:00:C4:CD:E0:08

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/hf4PpwRGCqT674-oymCfAMTN4Ag.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hf4PpwRGCqT674-oymCfAMTN4Ag.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/fw1wi6RYlv-iSqAbyWN0V_I04Xc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.200.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         a6:a8:01:0f:78:00:54:79:30:ae:cc:b7:cc:ff:37:f0:c0:c1:
         bb:e6:41:af:69:23:c7:20:85:16:93:c6:30:73:36:6c:21:4e:
         74:be:97:c0:a0:f4:bd:c5:a3:a8:0e:71:d0:5e:8c:3a:28:0d:
         82:2a:a4:5d:76:8f:c6:e9:a1:c1:3b:76:2c:52:f6:12:c2:0b:
         f7:82:48:f8:5b:7b:82:be:c0:2a:eb:64:1c:c3:6e:04:c3:0a:
         4c:56:1e:d3:f4:d1:90:c8:65:a2:75:b9:87:5b:0c:ac:ff:bc:
         f9:a5:a5:d4:9c:f1:e0:8c:58:04:d0:38:07:43:b3:2c:16:49:
         9c:6a:5f:c9:b4:a8:fd:7a:e7:00:c0:cb:6f:db:3a:43:c8:e9:
         18:dd:a9:db:01:a8:e8:bc:4a:9e:3a:92:2a:6e:e8:87:0b:75:
         26:71:5c:27:c0:d3:e7:be:66:02:84:cd:d2:29:1e:04:0c:17:
         02:52:9d:54:b1:2c:4b:e3:eb:bd:6b:dc:a9:66:6b:cb:a5:b7:
         2d:00:9e:32:ce:cd:f0:a5:f2:c5:28:2e:1e:20:83:20:46:18:
         b6:db:4e:f4:b7:74:e8:22:f3:2c:37:dc:1c:e8:c6:17:60:a6:
         b9:74:bf:6a:98:60:52:d2:81:d9:5c:08:b5:f8:a0:4f:49:92:
         d3:59:dd:e7
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4NUZF
MEZBNzA0NDYwQUE0RkFFRjhGQThDQTYwOUYwMEM0Q0RFMDA4MB4XDTIyMTEwMTA0
MzYxNFoXDTIzMTAxNTAxMzAwMlowMzExMC8GA1UEAxMoN0YwRDcwOEJBNDU4OTZG
RkEyNEFBMDFCQzk2Mzc0NTdGMjM0RTE3NzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJhrZ+yY7fiiF+O4KOvExLps+e+UufnLte6ynYKFTr9BPSFXbnuP
NL9fJVVFwVlYHB0FnpqAY4KO46pbL2QN/J1Dj6jZEi6CW6/R8ANxB+hMUYInMvs1
iJ97iGM40ryA3Cl8mWvofAgflc4Bi/ZAosmDUvxZJyi1KtarP6IUSpo6Cv0FYtCX
VpJSZeo8VeNSLDuec3HEtc5mhBquToLxxOUfyCFPtYTueW79MZBVRqcdrlC8ukou
d0Eesgl7EqrUyZFG/c6sdtXdN8XUTA/eQgvIbN0qnxkcedynSnrJJhwvC11KD6KO
4i6BINLBc7Ml3mHLPW8SX1+rcC2UGeNIXEMCAwEAAaOCAiUwggIhMB0GA1UdDgQW
BBR/DXCLpFiW/6JKoBvJY3RX8jThdzAfBgNVHSMEGDAWgBSF/g+nBEYKpPrvj6jK
YJ8AxM3gCDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjI1MS9oZjRQcHdSR0NxVDY3NC1veW1DZkFNVE40QWcuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9oZjRQcHdSR0NxVDY3NC1veW1DZkFN
VE40QWcuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI
KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMjI1MS9mdzF3aTZSWWx2LWlTcUFieVdOMFZfSTA0WGMucm9h
MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv
cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIA
ATAFAwMDhcgwDQYJKoZIhvcNAQELBQADggEBAKaoAQ94AFR5MK7Mt8z/N/DAwbvm
Qa9pI8cghRaTxjBzNmwhTnS+l8Cg9L3Fo6gOcdBejDooDYIqpF12j8bpocE7dixS
9hLCC/eCSPhbe4K+wCrrZBzDbgTDCkxWHtP00ZDIZaJ1uYdbDKz/vPmlpdSc8eCM
WATQOAdDsywWSZxqX8m0qP165wDAy2/bOkPI6RjdqdsBqOi8Sp46kipu6IcLdSZx
XCfA0+e+ZgKEzdIpHgQMFwJSnVSxLEvj671r3Klma8ulty0AnjLOzfCl8sUoLh4g
gyBGGLbbTvS3dOgi8yw33Bzoxhdgprl0v2qYYFLSgdlcCLX4oE9JktNZ3ec=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org