Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/299/tzaVOBET9o6pbwROuOgFTN_pcIQ.roa
File:                     tzaVOBET9o6pbwROuOgFTN_pcIQ.roa (raw, json)
Hash identifier:          /QVC8xerLhYyma4hirE7xcwQsIYAydSeWHzVhEHFJyc=
Subject key identifier:   B7:36:95:38:11:13:F6:8E:A9:6F:04:4E:B8:E8:05:4C:DF:E9:70:84
Certificate issuer:       /CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
Certificate serial:       32
Authority key identifier: D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/tzaVOBET9o6pbwROuOgFTN_pcIQ.roa
Signing time:             Mon 01 May 2023 01:29:31 +0000
ROA not before:           Mon 01 May 2023 01:29:31 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     63789
IP address blocks:        202.9.209.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
        Validity
            Not Before: May  1 01:29:31 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=B73695381113F68EA96F044EB8E8054CDFE97084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e4:7d:93:12:cb:01:58:fd:c7:77:27:0b:08:
                    99:51:74:ad:fe:82:30:6d:55:1d:07:0e:ac:06:58:
                    b7:57:fe:d0:97:53:5e:ec:10:08:0b:e1:36:31:dd:
                    7f:e4:b9:63:95:45:9a:2a:fa:df:0d:ad:16:07:ae:
                    01:36:7c:99:8a:cc:38:84:95:4d:dc:a1:af:4f:8c:
                    1f:f5:52:c2:9d:0e:7a:6c:3d:56:1e:81:86:69:95:
                    75:f6:d4:61:05:c1:2c:ad:aa:2f:69:ab:ce:20:22:
                    4e:7b:e8:5c:54:31:54:c2:93:21:fd:1b:41:90:f3:
                    f9:aa:64:f4:47:31:72:f0:30:1a:66:b5:f7:66:27:
                    cd:48:8d:d6:cd:7d:89:f6:28:9c:33:af:16:7a:f4:
                    ad:3e:f8:6c:b9:dc:c0:17:57:b0:11:50:ce:04:80:
                    47:c0:b3:14:d3:3a:61:65:b7:5d:84:88:17:63:1c:
                    9e:2a:d3:a2:d2:0f:c4:c7:6a:8b:8f:82:15:84:e0:
                    52:5b:11:d2:09:a9:f2:8c:7d:34:3d:22:f0:06:5a:
                    42:6c:f6:c2:e5:c8:62:e6:26:6b:89:2f:6b:a2:78:
                    52:90:60:c9:b7:09:37:06:80:d1:b4:77:39:25:3a:
                    1b:a6:db:93:3f:aa:ef:af:4c:d3:23:74:74:76:cb:
                    28:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:36:95:38:11:13:F6:8E:A9:6F:04:4E:B8:E8:05:4C:DF:E9:70:84
            X509v3 Authority Key Identifier:
                keyid:D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/tzaVOBET9o6pbwROuOgFTN_pcIQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.9.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:43:27:ac:39:5d:8b:a3:82:b3:2e:14:58:85:e6:cc:70:8f:
         6d:38:03:86:15:61:38:cc:c2:89:42:f6:2f:6b:83:44:69:16:
         b5:56:ab:32:d1:8a:60:f9:51:3f:f4:c4:36:2f:d6:46:a8:6d:
         97:a3:35:12:e6:81:fb:a0:00:14:75:ca:17:9b:09:2f:9f:3c:
         e5:01:25:a3:b1:81:1f:7d:41:03:e6:6a:34:6a:00:91:d1:de:
         60:73:be:b9:fb:68:63:c8:e5:e3:30:17:81:b3:d4:5e:96:de:
         76:54:c6:cc:0e:80:bb:c4:fa:d9:da:67:34:f7:50:5f:3c:b3:
         aa:25:86:45:aa:54:d4:5d:3a:2d:4d:09:22:55:4a:5f:04:bb:
         9d:74:87:f0:18:71:16:9d:3c:1a:c4:92:36:b3:3e:73:bd:ab:
         81:66:50:7c:d9:52:e9:93:bb:95:2f:b4:92:d8:1a:b1:6e:97:
         64:7f:15:7a:32:c3:ea:38:fc:a9:a2:aa:6b:5b:b9:7e:5c:0b:
         99:48:e2:2e:be:40:6d:2b:0f:e5:36:2f:ee:85:34:06:30:0e:
         73:e9:2a:c0:e7:03:7c:5c:ce:8d:64:c3:08:7e:3c:c4:f1:f2:
         6f:f9:89:ef:71:4f:e5:4b:f2:ce:7e:88:63:94:84:d0:97:07:
         74:53:b5:9f
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBMjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEOEYx
NTE0NTA4QUZDMzhFNTE3NDNCNkNCNThCQTY1NjFFREQzQkI5MB4XDTIzMDUwMTAx
MjkzMVoXDTI0MDQxNDAxMzAwMlowMzExMC8GA1UEAxMoQjczNjk1MzgxMTEzRjY4
RUE5NkYwNDRFQjhFODA1NENERkU5NzA4NDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL/kfZMSywFY/cd3JwsImVF0rf6CMG1VHQcOrAZYt1f+0JdTXuwQ
CAvhNjHdf+S5Y5VFmir63w2tFgeuATZ8mYrMOISVTdyhr0+MH/VSwp0Oemw9Vh6B
hmmVdfbUYQXBLK2qL2mrziAiTnvoXFQxVMKTIf0bQZDz+apk9EcxcvAwGma192Yn
zUiN1s19ifYonDOvFnr0rT74bLncwBdXsBFQzgSAR8CzFNM6YWW3XYSIF2McnirT
otIPxMdqi4+CFYTgUlsR0gmp8ox9ND0i8AZaQmz2wuXIYuYma4kva6J4UpBgybcJ
NwaA0bR3OSU6G6bbkz+q769M0yN0dHbLKFkCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBS3NpU4ERP2jqlvBE646AVM3+lwhDAfBgNVHSMEGDAWgBTY8VFFCK/DjlF0O2y1
i6ZWHt07uTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjk5LzJQRlJSUWl2dzQ1UmREdHN0WXVtVmg3ZE83ay5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzJQRlJSUWl2dzQ1UmREdHN0WXVtVmg3
ZE83ay5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yOTkvdHphVk9CRVQ5bzZwYndST3VPZ0ZUTl9wY0lRLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAMoJ0TANBgkqhkiG9w0BAQsFAAOCAQEAQkMnrDldi6OCsy4UWIXmzHCPbTgD
hhVhOMzCiUL2L2uDRGkWtVarMtGKYPlRP/TENi/WRqhtl6M1EuaB+6AAFHXKF5sJ
L5885QElo7GBH31BA+ZqNGoAkdHeYHO+uftoY8jl4zAXgbPUXpbedlTGzA6Au8T6
2dpnNPdQXzyzqiWGRapU1F06LU0JIlVKXwS7nXSH8BhxFp08GsSSNrM+c72rgWZQ
fNlS6ZO7lS+0ktgasW6XZH8VejLD6jj8qaKqa1u5flwLmUjiLr5AbSsP5TYv7oU0
BjAOc+kqwOcDfFzOjWTDCH48xPHyb/mJ73FP5Uvyzn6IY5SE0JcHdFO1nw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org