Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/wlFLJYIiyIbOTAnQUcvcPI9M2xM.roa
File:                     wlFLJYIiyIbOTAnQUcvcPI9M2xM.roa (raw, json)
Hash identifier:          xVq/eLWzQGaoN2K7ceNZpjTg2ZYZp0dLJajBrmI3rpA=
Subject key identifier:   C2:51:4B:25:82:22:C8:86:CE:4C:09:D0:51:CB:DC:3C:8F:4C:DB:13
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       013D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wlFLJYIiyIbOTAnQUcvcPI9M2xM.roa
Signing time:             Wed 24 May 2023 16:31:11 +0000
ROA not before:           Wed 24 May 2023 16:31:11 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.75.248.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 317 (0x13d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:31:11 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=C2514B258222C886CE4C09D051CBDC3C8F4CDB13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e7:17:f3:18:6c:29:85:58:5a:12:67:b5:05:
                    6e:9f:ee:4d:38:63:7b:8b:d1:a0:ed:3b:24:7b:d8:
                    93:ed:8e:0d:2f:61:87:59:3e:79:50:b6:d7:d7:79:
                    ab:cc:c2:7b:a1:c1:e2:4d:0a:c9:80:22:40:02:98:
                    79:20:a0:23:a6:7f:27:45:a7:96:90:60:3f:9e:f6:
                    21:44:d0:66:ab:ca:1b:46:75:73:87:94:bc:57:79:
                    97:59:d4:9d:1c:f0:96:f5:71:18:ca:9f:2f:85:48:
                    72:61:42:91:ea:72:51:fe:8d:ca:d3:a4:e1:bd:53:
                    e7:49:13:b7:8c:b4:ce:bb:9f:20:0c:69:f9:3f:c9:
                    d4:6f:b5:46:e6:36:a5:29:87:ed:8b:ea:4c:22:52:
                    7a:4c:56:5c:f9:45:3f:b3:b8:6c:a8:63:ec:02:2c:
                    d8:49:c9:29:0c:05:ff:a2:a1:76:7d:eb:3e:bb:64:
                    c7:83:20:37:44:cc:50:1f:c6:09:14:3f:68:6b:d1:
                    30:94:1c:46:e6:5a:25:35:34:58:6e:d4:29:83:7f:
                    69:d7:68:f3:38:31:26:8b:90:48:d7:a4:d5:09:1b:
                    e9:c6:51:6a:a9:46:bf:38:64:ca:bb:a1:19:e3:b8:
                    5c:b8:3e:e8:6f:c7:ef:2d:c3:8a:a0:3b:b1:c8:04:
                    9a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:51:4B:25:82:22:C8:86:CE:4C:09:D0:51:CB:DC:3C:8F:4C:DB:13
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wlFLJYIiyIbOTAnQUcvcPI9M2xM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:9d:e4:e9:85:cb:77:5c:20:04:36:e7:75:00:eb:e5:87:24:
         40:79:4d:4a:a9:77:bf:5c:90:af:b1:b7:2f:84:fe:76:f7:c1:
         30:68:4f:71:92:1d:fa:c3:11:96:10:9a:52:26:47:20:70:66:
         6c:ff:6b:b2:22:52:5f:7b:a0:b3:6b:22:b3:70:e2:62:79:b6:
         c2:7e:48:96:13:92:5d:48:9a:3e:98:ad:57:92:fb:64:6d:e7:
         5f:7f:0d:c5:fd:31:aa:d2:1b:d9:bb:e6:a4:e1:5b:2e:d4:39:
         e1:c8:ba:21:43:aa:31:cc:6a:9d:81:3e:1d:6c:b6:1f:f4:6f:
         47:80:a0:64:c0:c8:42:4a:b3:e4:63:95:1b:93:5b:a0:9b:38:
         d6:68:c0:50:d4:8a:3e:2e:db:24:38:9c:d9:6f:9b:fb:62:fa:
         d1:51:47:b9:e5:2e:27:92:b0:26:52:b0:0f:0c:b5:13:90:c2:
         51:eb:c5:4f:1b:2c:3f:8e:62:9c:6e:15:98:96:b7:89:e3:4c:
         eb:30:06:6a:f0:bc:d1:3a:e3:a7:15:91:4e:04:42:53:ed:3d:
         a1:a4:96:87:c0:aa:05:c4:fa:02:c1:62:6f:de:c5:57:e7:99:
         ac:3a:1b:5e:b3:b2:bf:b9:01:85:01:23:89:97:3b:fa:37:5d:
         ea:1a:b8:a3
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MjQx
NjMxMTFaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEMyNTE0QjI1ODIyMkM4
ODZDRTRDMDlEMDUxQ0JEQzNDOEY0Q0RCMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDB5xfzGGwphVhaEme1BW6f7k04Y3uL0aDtOyR72JPtjg0vYYdZ
PnlQttfXeavMwnuhweJNCsmAIkACmHkgoCOmfydFp5aQYD+e9iFE0GaryhtGdXOH
lLxXeZdZ1J0c8Jb1cRjKny+FSHJhQpHqclH+jcrTpOG9U+dJE7eMtM67nyAMafk/
ydRvtUbmNqUph+2L6kwiUnpMVlz5RT+zuGyoY+wCLNhJySkMBf+ioXZ96z67ZMeD
IDdEzFAfxgkUP2hr0TCUHEbmWiU1NFhu1CmDf2nXaPM4MSaLkEjXpNUJG+nGUWqp
Rr84ZMq7oRnjuFy4Puhvx+8tw4qgO7HIBJrFAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUwlFLJYIiyIbOTAnQUcvcPI9M2xMwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3dsRkxKWUlpeUliT1RBblFVY3ZjUEk5TTJ4TS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIBS/gwDQYJKoZIhvcNAQELBQADggEBALWd5OmFy3dcIAQ253UA6+WHJEB5
TUqpd79ckK+xty+E/nb3wTBoT3GSHfrDEZYQmlImRyBwZmz/a7IiUl97oLNrIrNw
4mJ5tsJ+SJYTkl1Imj6YrVeS+2Rt519/DcX9MarSG9m75qThWy7UOeHIuiFDqjHM
ap2BPh1sth/0b0eAoGTAyEJKs+RjlRuTW6CbONZowFDUij4u2yQ4nNlvm/ti+tFR
R7nlLieSsCZSsA8MtROQwlHrxU8bLD+OYpxuFZiWt4njTOswBmrwvNE646cVkU4E
QlPtPaGklofAqgXE+gLBYm/exVfnmaw6G16zsr+5AYUBI4mXO/o3XeoauKM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org