Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/TCyhWeMw5mqVaheBRo_mTRiRfO4.roa
File:                     TCyhWeMw5mqVaheBRo_mTRiRfO4.roa (raw, json)
Hash identifier:          jX0EmCE6YQZ1i/3FOELHW3HVbuwobYNrKvPpkSv2Skg=
Subject key identifier:   4C:2C:A1:59:E3:30:E6:6A:95:6A:17:81:46:8F:E6:4D:18:91:7C:EE
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0350
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TCyhWeMw5mqVaheBRo_mTRiRfO4.roa
Signing time:             Thu 01 Jun 2023 17:56:30 +0000
ROA not before:           Thu 01 Jun 2023 17:56:30 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.104.0.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 848 (0x350)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 17:56:30 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=4C2CA159E330E66A956A1781468FE64D18917CEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4f:7e:49:6f:4f:c8:c4:57:92:11:65:66:87:
                    9a:22:76:44:be:e9:6e:f3:e4:b2:be:ed:81:34:0c:
                    86:63:15:ab:8f:01:cc:01:ee:14:52:f4:44:44:57:
                    83:48:ed:fd:27:b1:3f:5b:63:69:91:20:93:63:a0:
                    74:9b:14:c5:a3:f8:59:a9:e4:0b:e1:fb:5a:79:bb:
                    3e:a1:a0:9f:aa:4f:1c:8b:be:08:d2:77:c7:61:0f:
                    87:e4:b4:ea:38:1c:9b:7b:0b:07:22:5b:94:df:6e:
                    81:d2:bf:2f:35:60:1a:17:25:55:57:9e:eb:b3:6c:
                    77:c7:85:12:20:16:62:89:25:28:e5:1e:9f:ed:7c:
                    dc:52:22:5e:a4:36:a1:6c:36:a5:38:1d:ff:fe:98:
                    ab:29:fb:3e:5a:30:76:4f:e1:6c:5b:b2:52:05:17:
                    4f:19:49:87:2b:2f:04:5b:42:e1:d7:6c:eb:66:de:
                    f8:19:85:ae:77:48:99:02:65:c3:45:b9:75:64:77:
                    51:2c:64:0e:88:89:1c:59:0e:22:02:9c:1c:1a:5a:
                    42:31:eb:f4:90:6e:6a:ee:75:e0:ab:77:bd:2f:98:
                    fc:75:09:34:a2:ac:2f:18:91:5a:16:9c:3d:51:2e:
                    18:f5:c5:5b:72:d4:f7:dd:d1:e4:74:c0:45:d5:c1:
                    95:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:2C:A1:59:E3:30:E6:6A:95:6A:17:81:46:8F:E6:4D:18:91:7C:EE
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/TCyhWeMw5mqVaheBRo_mTRiRfO4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.104.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:d7:84:b8:a7:c0:60:96:95:bf:e1:42:06:93:6c:19:f0:b9:
         6d:18:2c:ae:ad:62:2f:95:80:f0:2b:df:37:30:d2:48:d3:24:
         2f:62:52:fe:95:51:ee:04:38:a2:45:60:9b:b0:1d:c4:e0:41:
         36:0c:93:c0:27:dd:6d:65:05:f9:24:46:1b:cf:59:f7:1c:7d:
         72:b6:91:4b:af:d6:9c:37:41:58:dd:e7:75:83:84:9c:a1:1f:
         75:63:0f:e3:a1:9d:01:18:73:ee:e8:1e:0a:f5:02:45:04:f4:
         1b:07:49:39:09:df:29:a5:0c:b8:16:f5:de:48:32:66:02:da:
         a1:6f:84:58:36:24:e9:23:aa:60:89:42:63:58:aa:3d:f9:7c:
         b2:fe:f9:85:d7:77:f5:c5:9c:ca:e7:23:62:31:7f:7e:19:0f:
         43:8b:5f:95:d3:d2:8d:56:01:49:cb:f3:6b:9c:db:d5:ff:e5:
         fe:23:78:74:c7:d2:99:1b:24:35:9f:de:c5:76:d0:e2:4c:c1:
         8e:f6:3b:3e:c8:0b:09:89:8c:8f:b1:72:c6:26:ee:db:f4:ef:
         fa:cb:ca:10:b4:68:ba:d4:dd:7f:2d:4d:4a:d8:23:b4:3f:32:
         39:ee:4c:c1:48:5e:28:3a:8a:35:ca:74:06:73:c3:3c:85:ac:
         3d:28:32:d1
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA1AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA2MDEx
NzU2MzBaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDRDMkNBMTU5RTMzMEU2
NkE5NTZBMTc4MTQ2OEZFNjREMTg5MTdDRUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCZT35Jb0/IxFeSEWVmh5oidkS+6W7z5LK+7YE0DIZjFauPAcwB
7hRS9EREV4NI7f0nsT9bY2mRIJNjoHSbFMWj+Fmp5Avh+1p5uz6hoJ+qTxyLvgjS
d8dhD4fktOo4HJt7CwciW5TfboHSvy81YBoXJVVXnuuzbHfHhRIgFmKJJSjlHp/t
fNxSIl6kNqFsNqU4Hf/+mKsp+z5aMHZP4WxbslIFF08ZSYcrLwRbQuHXbOtm3vgZ
ha53SJkCZcNFuXVkd1EsZA6IiRxZDiICnBwaWkIx6/SQbmrudeCrd70vmPx1CTSi
rC8YkVoWnD1RLhj1xVty1Pfd0eR0wEXVwZWrAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUTCyhWeMw5mqVaheBRo/mTRiRfO4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L1RDeWhXZU13NW1xVmFoZUJSb19tVFJpUmZPNC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIxaAAwDQYJKoZIhvcNAQELBQADggEBAG7XhLinwGCWlb/hQgaTbBnwuW0Y
LK6tYi+VgPAr3zcw0kjTJC9iUv6VUe4EOKJFYJuwHcTgQTYMk8An3W1lBfkkRhvP
WfccfXK2kUuv1pw3QVjd53WDhJyhH3VjD+OhnQEYc+7oHgr1AkUE9BsHSTkJ3yml
DLgW9d5IMmYC2qFvhFg2JOkjqmCJQmNYqj35fLL++YXXd/XFnMrnI2Ixf34ZD0OL
X5XT0o1WAUnL82uc29X/5f4jeHTH0pkbJDWf3sV20OJMwY72Oz7ICwmJjI+xcsYm
7tv07/rLyhC0aLrU3X8tTUrYI7Q/MjnuTMFIXig6ijXKdAZzwzyFrD0oMtE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:01 2024 by rpki-client on console-ams.rpki-client.org