Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/wmmi8YuZDoMUFtok9W8F_Q-gyKY.roa
File:                     wmmi8YuZDoMUFtok9W8F_Q-gyKY.roa (raw, json)
Hash identifier:          jdrYSuxlbqFCbI1SP5oD+mysdOGkQaa3Bm7+YbaZ9Mg=
Subject key identifier:   C2:69:A2:F1:8B:99:0E:83:14:16:DA:24:F5:6F:05:FD:0F:A0:C8:A6
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0236
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wmmi8YuZDoMUFtok9W8F_Q-gyKY.roa
Signing time:             Tue 30 May 2023 16:30:38 +0000
ROA not before:           Tue 30 May 2023 16:30:38 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        110.158.131.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 566 (0x236)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:30:38 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=C269A2F18B990E831416DA24F56F05FD0FA0C8A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b7:c6:49:ae:36:6b:5c:e3:3a:a7:d1:8e:a6:
                    e1:ef:3c:17:80:ea:b7:2f:03:c4:00:0e:38:8e:37:
                    5e:e2:63:ea:bb:c8:ff:ea:ad:d5:04:75:ca:9c:11:
                    9a:2f:a6:fe:e2:04:3b:a9:e8:53:53:42:e4:38:90:
                    75:4f:18:c6:80:e4:f5:f0:3f:51:82:07:6b:95:d8:
                    bb:04:27:ab:72:34:fc:7c:f7:25:db:3e:09:5c:e0:
                    0b:84:44:d3:1b:83:c8:86:f3:a6:80:c0:9b:a6:df:
                    5c:bc:1d:e0:4f:87:a0:b0:f2:61:96:d3:90:5f:6d:
                    ca:35:14:82:58:4e:b7:37:d3:13:ba:40:d9:41:d9:
                    51:c6:fa:5e:86:fb:17:5d:f0:a9:79:d1:ee:fc:7d:
                    0e:a2:45:ed:b2:b9:f6:98:14:22:46:c2:31:47:dc:
                    c4:4e:ab:c4:b3:45:7b:2c:97:58:d0:ac:27:ec:ca:
                    a5:b4:6f:fe:61:0d:92:5e:b4:d3:2e:d9:f5:24:00:
                    a9:d6:04:d4:26:02:41:9e:4d:52:13:2b:59:6a:37:
                    34:15:ee:31:6c:b8:9e:29:5a:8f:1a:06:01:ea:d8:
                    a4:68:ac:d2:21:c3:83:19:e0:07:39:80:70:9d:11:
                    2d:64:53:96:98:5f:58:3f:12:7e:3b:d0:34:f5:0e:
                    11:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:69:A2:F1:8B:99:0E:83:14:16:DA:24:F5:6F:05:FD:0F:A0:C8:A6
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wmmi8YuZDoMUFtok9W8F_Q-gyKY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.158.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:75:a4:8b:d8:f0:f6:5b:2a:7c:60:1e:d3:55:64:0c:02:82:
         40:a2:93:34:4e:cf:c0:ef:f5:4d:8a:e5:ee:2e:5c:3f:0e:e6:
         ec:77:9e:c5:ef:c6:f0:79:be:65:c2:64:b2:97:87:2a:e1:6b:
         95:c9:71:4a:40:cb:48:87:0b:ae:ff:6a:57:85:4d:fe:01:99:
         e9:90:3f:aa:be:ca:53:e4:c1:0b:33:b7:2a:1c:9e:b3:fa:cc:
         30:66:4e:d4:dc:75:d8:5d:1a:44:27:8f:fe:ef:78:65:fc:74:
         72:de:7b:60:90:a5:c1:42:41:ad:2c:2a:1a:94:8e:ff:0d:55:
         8a:c6:02:54:6e:07:84:16:0e:5d:af:a1:0c:93:e8:69:95:63:
         ec:6c:07:90:60:c1:2e:de:0d:ee:f7:c2:c9:62:39:4a:d0:95:
         9c:13:be:45:89:d2:2f:1d:6c:40:c0:fe:37:6b:57:4c:b4:ab:
         45:f5:8c:c6:60:0a:2e:81:a9:fb:11:20:9a:d0:91:2b:4a:09:
         24:6d:88:ca:fe:e4:8b:e4:74:eb:c8:ee:12:34:c7:55:c3:bc:
         96:de:e3:ed:6e:dc:9d:9b:a1:e6:b0:86:e0:4a:4d:95:c3:c2:
         ef:e9:72:99:ff:3c:43:6c:e1:fc:2d:69:3a:36:21:83:82:c6:
         69:6b:13:48
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAjYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MzAx
NjMwMzhaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEMyNjlBMkYxOEI5OTBF
ODMxNDE2REEyNEY1NkYwNUZEMEZBMEM4QTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCot8ZJrjZrXOM6p9GOpuHvPBeA6rcvA8QADjiON17iY+q7yP/q
rdUEdcqcEZovpv7iBDup6FNTQuQ4kHVPGMaA5PXwP1GCB2uV2LsEJ6tyNPx89yXb
Pglc4AuERNMbg8iG86aAwJum31y8HeBPh6Cw8mGW05Bfbco1FIJYTrc30xO6QNlB
2VHG+l6G+xdd8Kl50e78fQ6iRe2yufaYFCJGwjFH3MROq8SzRXssl1jQrCfsyqW0
b/5hDZJetNMu2fUkAKnWBNQmAkGeTVITK1lqNzQV7jFsuJ4pWo8aBgHq2KRorNIh
w4MZ4Ac5gHCdES1kU5aYX1g/En470DT1DhGDAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUwmmi8YuZDoMUFtok9W8F/Q+gyKYwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3dtbWk4WXVaRG9NVUZ0b2s5VzhGX1EtZ3lLWS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABunoMwDQYJKoZIhvcNAQELBQADggEBAIN1pIvY8PZbKnxgHtNVZAwCgkCi
kzROz8Dv9U2K5e4uXD8O5ux3nsXvxvB5vmXCZLKXhyrha5XJcUpAy0iHC67/aleF
Tf4BmemQP6q+ylPkwQsztyocnrP6zDBmTtTcddhdGkQnj/7veGX8dHLee2CQpcFC
Qa0sKhqUjv8NVYrGAlRuB4QWDl2voQyT6GmVY+xsB5BgwS7eDe73wsliOUrQlZwT
vkWJ0i8dbEDA/jdrV0y0q0X1jMZgCi6BqfsRIJrQkStKCSRtiMr+5IvkdOvI7hI0
x1XDvJbe4+1u3J2boeawhuBKTZXDwu/pcpn/PENs4fwtaTo2IYOCxmlrE0g=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org