Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/vwbJazf9r4ALlW2ILP4K1hM_wm4.roa
File:                     vwbJazf9r4ALlW2ILP4K1hM_wm4.roa (raw, json)
Hash identifier:          QMTcMwi0RiyVCGZmMtSgQkF6oB5EIyPxHXCrMXGWlPU=
Subject key identifier:   BF:06:C9:6B:37:FD:AF:80:0B:95:6D:88:2C:FE:0A:D6:13:3F:C2:6E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       7D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vwbJazf9r4ALlW2ILP4K1hM_wm4.roa
Signing time:             Mon 27 Mar 2023 16:12:02 +0000
ROA not before:           Mon 27 Mar 2023 16:12:02 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.72.6.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125 (0x7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 27 16:12:02 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=BF06C96B37FDAF800B956D882CFE0AD6133FC26E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:23:9e:e3:c4:50:43:93:50:62:76:c0:a1:b0:
                    0a:cc:30:cb:f6:03:6f:4a:b0:66:ea:e4:f4:5e:2e:
                    7d:ab:46:ce:c0:7a:50:f5:36:5c:cc:20:40:ed:ee:
                    eb:3e:cb:97:c5:0f:fb:9b:15:69:21:0f:2c:3d:15:
                    c3:27:ff:4e:22:d1:f6:92:99:05:d1:99:82:9c:8a:
                    ff:3a:48:82:0b:93:8e:40:80:3a:ae:d8:eb:6c:20:
                    c9:5b:a4:2a:1b:80:3f:2d:29:46:0e:14:5e:1c:7d:
                    09:47:ae:f1:7b:8e:bb:32:94:09:07:73:27:b7:48:
                    19:01:6e:a2:a6:95:54:0a:ed:84:58:1c:5c:86:4b:
                    7c:3e:78:75:dd:38:73:c8:45:13:20:62:07:4e:d6:
                    02:80:54:f6:5d:51:7d:c8:14:b8:c9:d2:7c:bf:ee:
                    13:4d:cf:5e:e8:a7:99:b1:03:c6:a4:ba:72:d1:35:
                    52:b9:ee:14:77:9e:f5:77:74:41:3a:21:d5:81:5f:
                    c9:45:be:0b:14:f2:46:65:ab:03:b1:9b:c0:e1:d1:
                    7f:fd:7e:b8:f0:d6:c8:10:9a:42:ab:02:cc:f4:56:
                    7a:10:80:59:18:ca:6d:3c:0e:a7:43:ff:0f:8b:82:
                    0f:dd:06:2d:9c:73:15:d5:85:a8:00:2a:93:8d:4a:
                    26:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:06:C9:6B:37:FD:AF:80:0B:95:6D:88:2C:FE:0A:D6:13:3F:C2:6E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/vwbJazf9r4ALlW2ILP4K1hM_wm4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.72.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ba:bb:6c:f4:c5:c5:f8:9f:72:9b:a4:53:ad:6a:74:84:94:0c:
         b5:97:03:2b:b0:5c:f3:8c:5b:e7:ee:75:7c:1f:d1:a9:e5:8d:
         3c:ab:50:ec:30:88:cc:cd:b5:51:22:b0:3e:07:7a:e2:b8:10:
         e1:29:2b:b1:68:29:b4:2e:4f:a1:38:d2:e1:41:de:ee:b3:47:
         2f:ca:d9:2e:62:d9:2d:ce:03:be:bf:e6:ec:dd:51:ed:8c:10:
         7e:7d:3a:00:b8:8e:93:7f:64:65:3b:16:46:34:61:95:b8:5e:
         95:71:77:88:22:1e:e4:0e:e5:5b:14:9e:2c:f6:0f:57:0c:87:
         6c:47:11:3f:80:01:ba:71:71:2c:5c:ea:d3:d6:52:41:1c:e5:
         b0:13:8c:c0:65:d6:ef:76:5c:be:a3:57:e4:17:dd:58:bb:79:
         f6:12:d4:83:9c:59:02:88:f4:b3:74:4f:ce:0e:a5:8d:4e:39:
         6e:7a:25:c9:04:ef:a9:a9:66:e8:62:0f:bc:1e:6f:de:ca:2a:
         52:35:f2:20:85:f8:fe:70:61:99:54:73:8a:e3:b6:ae:d1:c5:
         78:c2:87:0a:8e:f2:36:57:43:02:ab:01:da:0c:51:b3:aa:15:
         3b:19:c5:30:57:06:78:9f:33:65:6e:0b:ba:93:74:7c:66:11:
         4d:2e:9d:a2
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBfTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2OTY1
QjBCMjBEREUwN0E0Qzk3OEUyNDA3M0VBMEUxMTE3QjM3NDczMB4XDTIzMDMyNzE2
MTIwMloXDTI0MDMxNDAxMzAwMlowMzExMC8GA1UEAxMoQkYwNkM5NkIzN0ZEQUY4
MDBCOTU2RDg4MkNGRTBBRDYxMzNGQzI2RTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL0jnuPEUEOTUGJ2wKGwCswwy/YDb0qwZurk9F4ufatGzsB6UPU2
XMwgQO3u6z7Ll8UP+5sVaSEPLD0Vwyf/TiLR9pKZBdGZgpyK/zpIgguTjkCAOq7Y
62wgyVukKhuAPy0pRg4UXhx9CUeu8XuOuzKUCQdzJ7dIGQFuoqaVVArthFgcXIZL
fD54dd04c8hFEyBiB07WAoBU9l1RfcgUuMnSfL/uE03PXuinmbEDxqS6ctE1Urnu
FHee9Xd0QToh1YFfyUW+CxTyRmWrA7GbwOHRf/1+uPDWyBCaQqsCzPRWehCAWRjK
bTwOp0P/D4uCD90GLZxzFdWFqAAqk41KJlUCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBS/BslrN/2vgAuVbYgs/grWEz/CbjAfBgNVHSMEGDAWgBRpZbCyDd4HpMl44kBz
6g4RF7N0czAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzA5L2FXV3dzZzNlQjZUSmVPSkFjLW9PRVJlemRITS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2FXV3dzZzNlQjZUSmVPSkFjLW9PRVJl
emRITS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDkvdndiSmF6ZjlyNEFMbFcySUxQNEsxaE1fd200LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAQFIBjANBgkqhkiG9w0BAQsFAAOCAQEAurts9MXF+J9ym6RTrWp0hJQMtZcD
K7Bc84xb5+51fB/RqeWNPKtQ7DCIzM21USKwPgd64rgQ4SkrsWgptC5PoTjS4UHe
7rNHL8rZLmLZLc4Dvr/m7N1R7YwQfn06ALiOk39kZTsWRjRhlbhelXF3iCIe5A7l
WxSeLPYPVwyHbEcRP4ABunFxLFzq09ZSQRzlsBOMwGXW73ZcvqNX5BfdWLt59hLU
g5xZAoj0s3RPzg6ljU45bnolyQTvqalm6GIPvB5v3soqUjXyIIX4/nBhmVRziuO2
rtHFeMKHCo7yNldDAqsB2gxRs6oVOxnFMFcGeJ8zZW4LupN0fGYRTS6dog==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org