Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/7LFkOR2hpYDsCJ04656vHoWRSG0.roa
File:                     7LFkOR2hpYDsCJ04656vHoWRSG0.roa (raw, json)
Hash identifier:          V4eGswWYW1DhyN/GUZVwanHKaLobO6jyiR7EioofOc8=
Subject key identifier:   EC:B1:64:39:1D:A1:A5:80:EC:08:9D:38:EB:9E:AF:1E:85:91:48:6D
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       02A8
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7LFkOR2hpYDsCJ04656vHoWRSG0.roa
Signing time:             Tue 30 May 2023 17:17:27 +0000
ROA not before:           Tue 30 May 2023 17:17:27 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        220.210.64.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 680 (0x2a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 17:17:27 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=ECB164391DA1A580EC089D38EB9EAF1E8591486D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2a:6e:17:16:bc:87:25:6b:ee:dc:00:59:7f:
                    c6:05:b6:e6:a3:42:a6:80:91:1c:fe:21:fc:5a:27:
                    07:88:92:66:c3:c7:29:56:5e:d2:25:2d:db:77:a2:
                    d3:6c:a7:71:15:85:6a:a4:ab:eb:19:cb:31:bf:8c:
                    cc:1c:6b:8d:86:80:5f:56:71:da:8f:ff:fa:e1:51:
                    c3:0f:e1:96:10:00:94:10:bc:84:fa:01:87:86:52:
                    26:74:cf:78:00:6e:1e:01:b4:d1:2e:fd:41:7f:08:
                    c9:8b:90:e3:4c:cc:9c:88:81:ab:67:a3:f9:eb:eb:
                    e8:63:24:12:89:ba:ff:f6:b2:93:c8:09:25:90:7a:
                    b4:40:27:a0:cb:c3:d6:f5:e4:61:18:85:8e:08:dd:
                    e2:f3:6a:7e:ee:09:b9:51:ac:37:b5:db:f2:37:e7:
                    bf:74:ff:50:0f:1f:cf:c8:79:32:1c:c2:cb:5c:97:
                    61:c1:31:97:43:be:f3:dd:80:e3:c2:39:f0:fd:66:
                    d8:ca:82:34:f6:d8:12:fa:f1:a4:a8:cc:53:8d:af:
                    f4:19:92:19:1d:6a:04:83:3c:9c:c5:6d:7d:68:e3:
                    b7:11:3f:1e:c6:e3:8e:4f:1a:58:f7:d5:c0:a6:81:
                    64:70:43:5c:ef:34:94:f2:a8:6f:f7:b0:b8:9c:31:
                    c8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B1:64:39:1D:A1:A5:80:EC:08:9D:38:EB:9E:AF:1E:85:91:48:6D
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7LFkOR2hpYDsCJ04656vHoWRSG0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.210.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:7e:49:3d:dc:d4:16:bf:85:55:27:2b:aa:0e:2f:15:65:3f:
         7d:ad:93:32:19:12:34:e3:8c:5d:93:dc:b3:97:f2:1b:e2:72:
         68:f4:31:b3:02:2b:f2:e5:2c:92:62:81:00:a4:75:89:5e:a5:
         9f:64:2a:4c:95:31:25:7f:ad:96:5e:38:8c:97:f1:fb:d2:31:
         ff:49:9a:d9:e6:cf:34:d1:b0:ed:15:9b:d1:18:3f:7f:38:a7:
         15:91:8d:2e:88:c9:2d:26:dc:18:2a:4c:70:f7:d6:dd:7b:62:
         29:ac:2e:dc:57:20:32:eb:8c:f2:b3:c8:fb:47:a7:36:67:0d:
         7a:f1:15:ff:b2:2d:85:f7:b8:91:3c:e5:1e:9c:5a:d4:48:a6:
         d5:98:ca:63:e7:5b:e5:6b:f6:77:fb:2f:e9:3c:99:92:e4:02:
         b3:d8:33:d5:2c:a7:ea:f6:a8:db:f6:65:d3:54:59:65:68:5b:
         1f:83:a0:22:ab:fb:6f:f3:3d:a4:8e:e4:27:58:f7:f1:2f:96:
         5d:a4:56:e3:2f:03:53:0f:90:84:ab:f7:dd:2e:8a:be:ec:ef:
         12:b5:cc:e1:bc:1f:e8:3e:30:70:d5:a0:69:68:62:ab:fd:94:
         2d:10:4e:cd:1e:13:4f:37:4b:94:61:77:eb:aa:b2:16:f5:91:
         5c:24:f5:fa
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAqgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MzAx
NzE3MjdaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEVDQjE2NDM5MURBMUE1
ODBFQzA4OUQzOEVCOUVBRjFFODU5MTQ4NkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8Km4XFryHJWvu3ABZf8YFtuajQqaAkRz+IfxaJweIkmbDxylW
XtIlLdt3otNsp3EVhWqkq+sZyzG/jMwca42GgF9WcdqP//rhUcMP4ZYQAJQQvIT6
AYeGUiZ0z3gAbh4BtNEu/UF/CMmLkONMzJyIgatno/nr6+hjJBKJuv/2spPICSWQ
erRAJ6DLw9b15GEYhY4I3eLzan7uCblRrDe12/I35790/1APH8/IeTIcwstcl2HB
MZdDvvPdgOPCOfD9ZtjKgjT22BL68aSozFONr/QZkhkdagSDPJzFbX1o47cRPx7G
445PGlj31cCmgWRwQ1zvNJTyqG/3sLicMcg3AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU7LFkOR2hpYDsCJ04656vHoWRSG0wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5LzdMRmtPUjJocFlEc0NKMDQ2NTZ2SG9XUlNHMC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBALc0kAwDQYJKoZIhvcNAQELBQADggEBALp+ST3c1Ba/hVUnK6oOLxVlP32t
kzIZEjTjjF2T3LOX8hvicmj0MbMCK/LlLJJigQCkdYlepZ9kKkyVMSV/rZZeOIyX
8fvSMf9JmtnmzzTRsO0Vm9EYP384pxWRjS6IyS0m3BgqTHD31t17YimsLtxXIDLr
jPKzyPtHpzZnDXrxFf+yLYX3uJE85R6cWtRIptWYymPnW+Vr9nf7L+k8mZLkArPY
M9Usp+r2qNv2ZdNUWWVoWx+DoCKr+2/zPaSO5CdY9/Evll2kVuMvA1MPkISr990u
ir7s7xK1zOG8H+g+MHDVoGloYqv9lC0QTs0eE083S5Rhd+uqshb1kVwk9fo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org