Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/299/NxjS-z4Ur0CauvC0WnHAbCD9pH0.roa
File:                     NxjS-z4Ur0CauvC0WnHAbCD9pH0.roa (raw, json)
Hash identifier:          l+L5BaH8WO7MLnPmCAdkrobVT67zi7Rcs11Nw0U6SiE=
Subject key identifier:   37:18:D2:FB:3E:14:AF:40:9A:BA:F0:B4:5A:71:C0:6C:20:FD:A4:7D
Certificate issuer:       /CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
Certificate serial:       34
Authority key identifier: D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/NxjS-z4Ur0CauvC0WnHAbCD9pH0.roa
Signing time:             Thu 01 Jun 2023 01:29:59 +0000
ROA not before:           Thu 01 Jun 2023 01:29:59 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     63789
IP address blocks:        202.9.208.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
        Validity
            Not Before: Jun  1 01:29:59 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=3718D2FB3E14AF409ABAF0B45A71C06C20FDA47D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:40:8e:03:46:02:0f:8e:5b:99:3f:09:53:5e:
                    63:19:56:a4:8e:06:8f:11:a4:ab:aa:75:2a:a8:f1:
                    e2:fb:07:36:67:5c:88:31:93:30:3c:34:bd:be:db:
                    cc:f0:8d:01:4c:28:49:40:bc:28:da:f6:fd:9e:94:
                    3a:07:8b:33:a4:07:10:8e:e2:c0:cf:f9:63:62:3d:
                    7c:c9:2c:54:de:6d:37:7d:14:a6:d8:15:41:b4:2f:
                    12:6c:b9:cb:5a:08:e6:95:ff:04:0b:c0:a0:05:9e:
                    c0:97:0f:5e:16:80:c0:4f:fe:d0:dd:fd:10:46:ac:
                    91:2f:d8:5a:b7:bc:7a:ae:c4:cc:a0:5f:dd:7c:92:
                    eb:f4:25:4d:b1:2c:01:76:db:13:60:02:31:2c:83:
                    23:fc:4d:c5:b5:b4:7c:a5:72:cc:27:44:0c:9a:19:
                    f4:d6:4c:ad:ab:16:63:84:8f:48:93:cd:64:64:c9:
                    97:8f:6a:e0:fe:c4:10:75:ae:b8:63:87:11:4a:06:
                    53:6b:55:66:ab:52:1d:d4:bb:85:ac:a6:75:29:22:
                    47:a2:7d:41:9e:2a:c1:53:86:34:2d:19:51:33:e9:
                    dd:ab:dd:53:ed:18:d7:10:ef:2e:7f:84:c3:a1:18:
                    3d:85:37:5d:b8:a8:d2:cf:22:a6:42:d1:ed:0e:8f:
                    bf:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:18:D2:FB:3E:14:AF:40:9A:BA:F0:B4:5A:71:C0:6C:20:FD:A4:7D
            X509v3 Authority Key Identifier:
                keyid:D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/NxjS-z4Ur0CauvC0WnHAbCD9pH0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.9.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:1e:7f:fe:45:55:46:03:75:3d:ed:b1:ea:04:bf:f9:06:ed:
         40:25:47:ae:70:8a:99:d4:11:b9:2e:6b:c5:70:ff:74:ce:20:
         75:13:c4:34:93:72:45:81:fc:98:63:fb:86:cf:04:71:f9:25:
         c1:7c:e1:8c:66:44:cd:80:2c:01:03:9f:d0:3d:5c:c2:e5:b9:
         ab:a8:50:af:83:3f:2b:f6:05:ba:0c:72:26:dd:10:b9:80:c0:
         63:2e:90:11:c6:b4:b0:a7:28:d8:ff:f4:13:4c:81:5d:7b:f1:
         76:92:99:e9:3c:e9:82:91:1c:d7:1c:30:bb:87:e8:d6:6d:61:
         3e:e3:66:d3:9c:ec:8a:c4:bd:c8:c8:ac:2e:84:94:1b:67:f6:
         8c:89:9a:1b:b9:fb:38:72:4d:80:da:85:ca:19:00:69:8d:5d:
         9b:22:57:20:1d:7b:18:0f:d9:0f:10:36:4c:54:51:b2:b6:a3:
         18:58:02:8a:ed:b1:6a:4b:8c:1c:6b:10:95:c5:1d:3c:74:0b:
         c6:85:00:5b:20:5a:0a:7e:f6:b1:70:bf:fb:bb:50:d9:75:48:
         58:40:32:37:59:e2:80:e0:0e:bb:db:c1:5d:b7:1e:32:11:45:
         d6:71:f8:42:a5:fb:c1:37:3a:2c:70:aa:c5:4a:df:d7:ac:02:
         72:82:68:3c
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBNDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEOEYx
NTE0NTA4QUZDMzhFNTE3NDNCNkNCNThCQTY1NjFFREQzQkI5MB4XDTIzMDYwMTAx
Mjk1OVoXDTI0MDUxNDAxMzAwMlowMzExMC8GA1UEAxMoMzcxOEQyRkIzRTE0QUY0
MDlBQkFGMEI0NUE3MUMwNkMyMEZEQTQ3RDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKlAjgNGAg+OW5k/CVNeYxlWpI4GjxGkq6p1Kqjx4vsHNmdciDGT
MDw0vb7bzPCNAUwoSUC8KNr2/Z6UOgeLM6QHEI7iwM/5Y2I9fMksVN5tN30UptgV
QbQvEmy5y1oI5pX/BAvAoAWewJcPXhaAwE/+0N39EEaskS/YWre8eq7EzKBf3XyS
6/QlTbEsAXbbE2ACMSyDI/xNxbW0fKVyzCdEDJoZ9NZMrasWY4SPSJPNZGTJl49q
4P7EEHWuuGOHEUoGU2tVZqtSHdS7haymdSkiR6J9QZ4qwVOGNC0ZUTPp3avdU+0Y
1xDvLn+Ew6EYPYU3Xbio0s8ipkLR7Q6Pv7ECAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQ3GNL7PhSvQJq68LRaccBsIP2kfTAfBgNVHSMEGDAWgBTY8VFFCK/DjlF0O2y1
i6ZWHt07uTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjk5LzJQRlJSUWl2dzQ1UmREdHN0WXVtVmg3ZE83ay5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzJQRlJSUWl2dzQ1UmREdHN0WXVtVmg3
ZE83ay5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yOTkvTnhqUy16NFVyMENhdXZDMFduSEFiQ0Q5cEgwLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAcoJ0DANBgkqhkiG9w0BAQsFAAOCAQEAjh5//kVVRgN1Pe2x6gS/+QbtQCVH
rnCKmdQRuS5rxXD/dM4gdRPENJNyRYH8mGP7hs8EcfklwXzhjGZEzYAsAQOf0D1c
wuW5q6hQr4M/K/YFugxyJt0QuYDAYy6QEca0sKco2P/0E0yBXXvxdpKZ6TzpgpEc
1xwwu4fo1m1hPuNm05zsisS9yMisLoSUG2f2jImaG7n7OHJNgNqFyhkAaY1dmyJX
IB17GA/ZDxA2TFRRsrajGFgCiu2xakuMHGsQlcUdPHQLxoUAWyBaCn72sXC/+7tQ
2XVIWEAyN1nigOAOu9vBXbceMhFF1nH4QqX7wTc6LHCqxUrf16wCcoJoPA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org