Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/S5pvGP9_bQvbpeKIjCb2GXiKe18.roa
File:                     S5pvGP9_bQvbpeKIjCb2GXiKe18.roa (raw, json)
Hash identifier:          qE4RIUZ4i4O0WHuRBsMUhAxmb13bv2Y74KZlMh9xqB8=
Subject key identifier:   4B:9A:6F:18:FF:7F:6D:0B:DB:A5:E2:88:8C:26:F6:19:78:8A:7B:5F
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0211
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/S5pvGP9_bQvbpeKIjCb2GXiKe18.roa
Signing time:             Tue 30 May 2023 16:29:32 +0000
ROA not before:           Tue 30 May 2023 16:29:32 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        110.163.44.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 529 (0x211)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:29:32 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=4B9A6F18FF7F6D0BDBA5E2888C26F619788A7B5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f5:d9:97:44:89:ef:9a:2a:90:5a:36:5b:0b:
                    1a:17:dc:e9:6f:3c:4f:f0:45:f5:da:1f:63:41:2a:
                    88:cd:5a:f0:51:59:8b:a6:0c:4f:87:78:21:a0:47:
                    34:f0:1f:76:1b:a4:f5:59:52:9c:34:63:40:9c:e1:
                    dc:eb:c7:81:1c:bb:c8:76:c3:84:9e:1b:ca:46:e3:
                    2d:66:61:52:74:1b:c8:4d:e2:1a:4e:0c:f2:69:d8:
                    2e:62:ab:ce:e6:4b:a0:42:99:31:1a:1b:77:35:e1:
                    55:46:11:02:fc:48:bc:b4:fd:09:49:ac:b8:e7:79:
                    f3:5d:d7:24:b2:a2:d2:8a:77:aa:e8:d7:95:81:09:
                    07:28:5c:fe:82:ec:f4:57:3c:c5:64:56:5d:76:e5:
                    e3:ff:7a:c6:e2:c9:eb:1d:2e:e5:bd:f7:2f:c7:1d:
                    c5:e4:ef:da:b4:c5:c2:f1:d6:66:e1:c5:96:a4:c5:
                    88:16:c5:d4:bd:df:da:6e:d3:9d:5b:d3:7a:e6:e9:
                    45:28:d9:bd:ba:6a:af:1c:a3:7e:11:0b:3b:a5:6c:
                    f2:81:45:35:fe:ec:a7:16:52:dc:6f:5e:2a:b8:8c:
                    e5:db:59:93:43:29:2f:76:9f:26:4c:9f:e0:ae:d5:
                    97:b1:5f:9b:ef:7c:dd:bc:84:40:bc:d4:ef:26:b9:
                    ad:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:9A:6F:18:FF:7F:6D:0B:DB:A5:E2:88:8C:26:F6:19:78:8A:7B:5F
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/S5pvGP9_bQvbpeKIjCb2GXiKe18.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.163.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:9a:08:c9:72:8d:5c:c1:5b:a8:ed:85:f4:80:09:75:00:8e:
         7d:8f:66:73:74:3e:c1:30:8a:65:d5:24:98:20:28:08:9e:9c:
         dc:6d:29:54:d5:76:05:9a:5d:b4:78:95:ad:fe:9f:30:79:ba:
         b4:1f:1e:11:50:4f:b8:71:bf:ea:83:f8:6f:e3:97:55:8c:b4:
         4e:b1:a1:a7:da:3d:db:72:8f:25:15:08:bc:45:7d:d6:0b:f9:
         a2:84:8d:6d:f5:11:f1:52:69:69:a0:93:ed:f9:d8:31:25:bb:
         b5:2c:50:88:a2:d0:d5:90:2f:6e:fe:3a:ca:2a:2b:4f:92:fc:
         dd:37:a5:f1:e7:d9:1d:a1:bf:e8:91:12:03:20:5d:90:74:a2:
         fd:43:11:a4:b3:b0:9c:91:e3:b1:a7:29:6a:60:0b:27:48:6a:
         c0:1f:5e:d4:7c:59:f9:f3:7f:9a:76:f8:58:fd:22:60:73:58:
         7c:e0:d0:e4:74:8f:8d:98:ce:2c:10:5c:f7:39:d6:15:f8:d1:
         f6:90:a7:ed:31:fd:ac:d3:ed:29:9f:a0:20:99:b3:be:26:3a:
         e3:e1:23:32:15:80:29:33:ae:11:0a:fa:88:de:fa:f5:6e:08:
         b9:54:a0:a3:b2:d3:0f:d0:e3:d6:f5:f1:d5:13:bd:a9:6e:b5:
         37:2a:b0:45
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAhEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MzAx
NjI5MzJaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDRCOUE2RjE4RkY3RjZE
MEJEQkE1RTI4ODhDMjZGNjE5Nzg4QTdCNUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCv9dmXRInvmiqQWjZbCxoX3OlvPE/wRfXaH2NBKojNWvBRWYum
DE+HeCGgRzTwH3YbpPVZUpw0Y0Cc4dzrx4Ecu8h2w4SeG8pG4y1mYVJ0G8hN4hpO
DPJp2C5iq87mS6BCmTEaG3c14VVGEQL8SLy0/QlJrLjnefNd1ySyotKKd6ro15WB
CQcoXP6C7PRXPMVkVl125eP/esbiyesdLuW99y/HHcXk79q0xcLx1mbhxZakxYgW
xdS939pu051b03rm6UUo2b26aq8co34RCzulbPKBRTX+7KcWUtxvXiq4jOXbWZND
KS92nyZMn+Cu1ZexX5vvfN28hEC81O8mua2ZAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUS5pvGP9/bQvbpeKIjCb2GXiKe18wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L1M1cHZHUDlfYlF2YnBlS0lqQ2IyR1hpS2UxOC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJuoywwDQYJKoZIhvcNAQELBQADggEBAIKaCMlyjVzBW6jthfSACXUAjn2P
ZnN0PsEwimXVJJggKAienNxtKVTVdgWaXbR4la3+nzB5urQfHhFQT7hxv+qD+G/j
l1WMtE6xoafaPdtyjyUVCLxFfdYL+aKEjW31EfFSaWmgk+352DElu7UsUIii0NWQ
L27+OsoqK0+S/N03pfHn2R2hv+iREgMgXZB0ov1DEaSzsJyR47GnKWpgCydIasAf
XtR8Wfnzf5p2+Fj9ImBzWHzg0OR0j42YziwQXPc51hX40faQp+0x/azT7SmfoCCZ
s74mOuPhIzIVgCkzrhEK+oje+vVuCLlUoKOy0w/Q49b18dUTvalutTcqsEU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org