Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/cRw9AGXbNBlqgk5nI4bE1uP1oKg.roa
File:                     cRw9AGXbNBlqgk5nI4bE1uP1oKg.roa (raw, json)
Hash identifier:          df2woOYk5SaPc2uzp1YccAGmWplf9FL6lcizxvREbXg=
Subject key identifier:   71:1C:3D:00:65:DB:34:19:6A:82:4E:67:23:86:C4:D6:E3:F5:A0:A8
Certificate issuer:       /CN=1850341C0E586CF47547FD06E54EDBE6902A0E24
Certificate serial:       20
Authority key identifier: 18:50:34:1C:0E:58:6C:F4:75:47:FD:06:E5:4E:DB:E6:90:2A:0E:24
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/cRw9AGXbNBlqgk5nI4bE1uP1oKg.roa
Signing time:             Sun 01 Jan 2023 01:30:11 +0000
ROA not before:           Sun 01 Jan 2023 01:30:11 +0000
ROA not after:            Fri 15 Dec 2023 01:30:02 +0000
asID:                     9351
IP address blocks:        193.117.64.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1850341C0E586CF47547FD06E54EDBE6902A0E24
        Validity
            Not Before: Jan  1 01:30:11 2023 GMT
            Not After : Dec 15 01:30:02 2023 GMT
        Subject: CN=711C3D0065DB34196A824E672386C4D6E3F5A0A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6a:9b:cd:9d:19:50:3d:2a:9b:63:1e:0f:dd:
                    7e:8d:bf:36:6c:33:f7:70:20:cf:eb:86:42:48:ff:
                    cb:63:37:9f:4a:c3:31:63:5f:d6:6b:13:59:f7:f8:
                    b0:c4:a4:50:b0:3b:7c:10:c9:93:68:d6:a1:89:5d:
                    ae:85:cd:90:b3:ce:67:ff:95:56:a6:2f:a0:aa:9f:
                    f2:ea:d0:dd:db:a4:cf:af:24:51:c0:a8:d9:76:6d:
                    d8:05:29:ac:28:48:c9:cf:3d:09:98:f0:02:8f:12:
                    cf:07:0e:35:f8:4a:ee:4f:56:24:dc:29:3d:ce:b5:
                    38:e6:de:0d:6b:05:f5:b0:d9:7b:2b:ed:8a:44:e4:
                    ac:5f:41:8f:d1:5a:b4:70:63:19:39:83:22:85:99:
                    b6:f2:19:3d:48:46:f6:29:cd:e8:d3:4b:ae:11:3a:
                    3a:e7:b3:60:5b:18:60:68:dd:21:ab:01:ff:e5:41:
                    18:2e:3c:89:04:65:3e:f6:0c:9a:fe:f4:89:71:63:
                    23:13:71:80:e1:93:05:d3:de:26:10:a4:58:c8:b2:
                    d3:d2:39:47:97:cb:a5:ef:e9:36:12:33:79:e6:06:
                    78:dd:0e:b7:d8:4b:84:27:e8:d8:59:fc:0f:42:ce:
                    cd:0c:9b:83:87:d0:2e:a8:e7:cd:e3:71:64:fa:f5:
                    a0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:1C:3D:00:65:DB:34:19:6A:82:4E:67:23:86:C4:D6:E3:F5:A0:A8
            X509v3 Authority Key Identifier:
                keyid:18:50:34:1C:0E:58:6C:F4:75:47:FD:06:E5:4E:DB:E6:90:2A:0E:24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/cRw9AGXbNBlqgk5nI4bE1uP1oKg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.117.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         25:9c:66:b0:22:01:01:43:1d:03:33:7a:86:68:56:38:c0:f2:
         33:15:54:8e:7d:b3:73:c1:7c:c5:7c:72:5b:c1:e1:ea:7d:aa:
         fb:ac:79:3a:c7:98:08:01:d9:90:5b:f6:27:1f:e9:1c:53:ba:
         d1:cd:dd:70:82:2a:f3:49:42:97:48:eb:5b:e9:38:8e:bb:07:
         e5:82:17:81:6b:c9:d7:ef:65:e2:87:24:3f:1a:4a:30:40:89:
         8e:23:18:3d:a5:f7:a4:bc:8d:16:11:98:a2:af:d5:ad:2d:be:
         b9:85:a3:ce:32:b7:60:04:45:67:65:aa:cb:4c:03:ee:53:0b:
         15:18:e6:65:08:a8:77:a9:08:39:68:e1:d5:46:e5:39:28:4c:
         3f:3e:fc:cf:7d:a3:81:3e:49:56:9b:b4:7e:46:e1:5c:a7:85:
         bc:4a:2a:49:5b:80:52:46:f2:09:a5:dd:df:5a:f8:a3:60:16:
         9c:fa:3f:1a:d2:c0:69:c2:3c:7d:04:41:ba:b0:35:1a:12:45:
         1c:da:43:3d:56:ff:47:85:db:10:29:bc:48:0f:66:7a:02:3d:
         69:4d:ec:8f:72:35:b4:e0:18:f5:97:77:60:62:f1:44:68:c9:
         cd:b6:3b:2d:77:cc:ca:20:fa:f3:75:82:af:82:61:e9:db:37:
         33:25:7d:10
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBIDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxODUw
MzQxQzBFNTg2Q0Y0NzU0N0ZEMDZFNTRFREJFNjkwMkEwRTI0MB4XDTIzMDEwMTAx
MzAxMVoXDTIzMTIxNTAxMzAwMlowMzExMC8GA1UEAxMoNzExQzNEMDA2NURCMzQx
OTZBODI0RTY3MjM4NkM0RDZFM0Y1QTBBODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANVqm82dGVA9KptjHg/dfo2/Nmwz93Agz+uGQkj/y2M3n0rDMWNf
1msTWff4sMSkULA7fBDJk2jWoYldroXNkLPOZ/+VVqYvoKqf8urQ3dukz68kUcCo
2XZt2AUprChIyc89CZjwAo8SzwcONfhK7k9WJNwpPc61OObeDWsF9bDZeyvtikTk
rF9Bj9FatHBjGTmDIoWZtvIZPUhG9inN6NNLrhE6OuezYFsYYGjdIasB/+VBGC48
iQRlPvYMmv70iXFjIxNxgOGTBdPeJhCkWMiy09I5R5fLpe/pNhIzeeYGeN0Ot9hL
hCfo2Fn8D0LOzQybg4fQLqjnzeNxZPr1oEUCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRxHD0AZds0GWqCTmcjhsTW4/WgqDAfBgNVHSMEGDAWgBQYUDQcDlhs9HVH/Qbl
TtvmkCoOJDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjM0L0dGQTBIQTVZYlBSMVJfMEc1VTdiNXBBcURpUS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0dGQTBIQTVZYlBSMVJfMEc1VTdiNXBB
cURpUS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yMzQvY1J3OUFHWGJOQmxxZ2s1bkk0YkUxdVAxb0tnLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBcF1QDANBgkqhkiG9w0BAQsFAAOCAQEAJZxmsCIBAUMdAzN6hmhWOMDyMxVU
jn2zc8F8xXxyW8Hh6n2q+6x5OseYCAHZkFv2Jx/pHFO60c3dcIIq80lCl0jrW+k4
jrsH5YIXgWvJ1+9l4ockPxpKMECJjiMYPaX3pLyNFhGYoq/VrS2+uYWjzjK3YARF
Z2Wqy0wD7lMLFRjmZQiod6kIOWjh1UblOShMPz78z32jgT5JVpu0fkbhXKeFvEoq
SVuAUkbyCaXd31r4o2AWnPo/GtLAacI8fQRBurA1GhJFHNpDPVb/R4XbECm8SA9m
egI9aU3sj3I1tOAY9Zd3YGLxRGjJzbY7LXfMyiD683WCr4Jh6ds3MyV9EA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org