Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/LaW04o3U32gEYFy325P6RiO-TIA.roa
File:                     LaW04o3U32gEYFy325P6RiO-TIA.roa (raw, json)
Hash identifier:          0y2ZFKps8La/2wICsPRiUzExfd5BH+ZS4Z8a/Et30dA=
Subject key identifier:   2D:A5:B4:E2:8D:D4:DF:68:04:60:5C:B7:DB:93:FA:46:23:BE:4C:80
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       B0
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/LaW04o3U32gEYFy325P6RiO-TIA.roa
Signing time:             Thu 13 Apr 2023 09:52:56 +0000
ROA not before:           Thu 13 Apr 2023 09:52:56 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9607
IP address blocks:        203.141.48.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176 (0xb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Apr 13 09:52:56 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=2DA5B4E28DD4DF6804605CB7DB93FA4623BE4C80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:84:5d:0b:80:31:dc:06:1e:eb:63:4c:84:67:
                    9f:6e:65:6a:39:09:a6:a6:18:b6:96:6a:6d:e7:2a:
                    fb:97:cd:43:05:e5:22:cc:01:4b:f3:dd:8c:58:ff:
                    39:22:2c:25:05:11:95:2e:d8:7d:3f:f3:0b:8b:87:
                    10:1b:f5:10:42:e2:7e:ed:06:ef:47:4e:1b:a8:f0:
                    e0:04:b2:2b:e6:e0:d2:e8:3d:61:69:14:c1:22:91:
                    ed:29:a7:8f:6c:52:4b:b0:87:13:9e:18:f5:bc:67:
                    01:1d:ff:68:df:be:eb:11:bc:31:cb:e4:a2:06:c0:
                    04:7a:22:3a:58:4d:5c:10:88:22:ad:39:28:64:38:
                    6e:ed:82:0b:c4:af:1c:ef:b8:05:0b:42:a6:68:c4:
                    b9:54:03:0a:55:ec:06:e3:ce:94:65:64:1b:9b:57:
                    78:da:b2:df:58:43:80:02:5e:eb:08:02:d7:3d:38:
                    20:16:a1:ac:54:95:54:e0:95:30:75:a1:4c:30:bf:
                    ad:2d:61:44:5a:5b:dd:2a:07:d6:0e:ef:3f:28:21:
                    0c:d8:91:07:44:4f:21:93:d5:e9:35:26:2f:67:33:
                    b9:52:76:01:a9:53:ff:d2:55:84:fd:3b:f1:1f:63:
                    b0:88:eb:72:bb:a0:a1:72:11:cc:16:fb:a8:9e:6b:
                    d5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A5:B4:E2:8D:D4:DF:68:04:60:5C:B7:DB:93:FA:46:23:BE:4C:80
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/LaW04o3U32gEYFy325P6RiO-TIA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.141.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:d5:49:91:c4:92:4a:2c:4f:4b:e9:d4:1a:49:aa:3c:49:e7:
         f9:7c:dd:6c:07:51:99:9b:93:20:79:02:81:9f:6d:fb:30:b7:
         34:da:bf:66:51:fc:cd:7d:02:24:5d:e6:eb:17:4d:d0:fa:00:
         2d:9c:c1:e2:3c:ca:c1:19:e0:f2:ae:55:6e:93:40:8b:81:f6:
         a2:83:1d:8e:f8:19:a0:ad:6f:c5:73:14:60:ad:8c:74:83:d7:
         d5:e1:41:26:f9:48:ea:e7:35:00:03:56:67:5d:c3:ed:7c:72:
         9c:c8:38:7b:e5:67:33:20:11:3a:5f:79:e8:15:7e:b0:03:ac:
         78:22:70:f9:41:9e:1b:54:fa:4b:83:24:52:9b:62:d4:70:e2:
         05:f0:e8:79:d3:1f:dd:c2:29:9a:1f:5e:61:25:5a:ba:a9:e7:
         87:0e:03:79:c0:72:b1:cc:4a:56:56:e6:65:98:d7:b2:3d:09:
         3a:97:d1:1e:6d:c8:3e:5d:de:88:65:d8:da:27:65:99:1a:98:
         3b:b7:63:d3:cb:2a:7c:5d:ac:82:1a:4e:b8:bf:81:46:e1:07:
         c1:6f:94:e7:f3:53:b2:8e:37:47:21:69:fd:e6:d3:97:34:98:
         7f:b6:74:98:8e:04:9e:e7:f4:08:9e:dc:7a:99:20:bd:95:30:
         95:92:0a:bd
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICALAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEE1
QUNBQzI5OTBCRDhGODY1NUMwQzcyMUJBQ0ZGMDMwQTU5RDFGQzAeFw0yMzA0MTMw
OTUyNTZaFw0yNDAzMTQwMTMwMDJaMDMxMTAvBgNVBAMTKDJEQTVCNEUyOERENERG
NjgwNDYwNUNCN0RCOTNGQTQ2MjNCRTRDODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDWhF0LgDHcBh7rY0yEZ59uZWo5CaamGLaWam3nKvuXzUMF5SLM
AUvz3YxY/zkiLCUFEZUu2H0/8wuLhxAb9RBC4n7tBu9HThuo8OAEsivm4NLoPWFp
FMEike0pp49sUkuwhxOeGPW8ZwEd/2jfvusRvDHL5KIGwAR6IjpYTVwQiCKtOShk
OG7tggvErxzvuAULQqZoxLlUAwpV7AbjzpRlZBubV3jast9YQ4ACXusIAtc9OCAW
oaxUlVTglTB1oUwwv60tYURaW90qB9YO7z8oIQzYkQdETyGT1ek1Ji9nM7lSdgGp
U//SVYT9O/EfY7CI63K7oKFyEcwW+6iea9VdAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQULaW04o3U32gEYFy325P6RiO+TIAwHwYDVR0jBBgwFoAUClrKwpkL2PhlXAxy
G6z/AwpZ0fwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM1NC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3cFowZncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3
cFowZncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzU0L0xhVzA0bzNVMzJnRVlGeTMyNVA2UmlPLVRJQS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBALLjTAwDQYJKoZIhvcNAQELBQADggEBAAXVSZHEkkosT0vp1BpJqjxJ5/l8
3WwHUZmbkyB5AoGfbfswtzTav2ZR/M19AiRd5usXTdD6AC2cweI8ysEZ4PKuVW6T
QIuB9qKDHY74GaCtb8VzFGCtjHSD19XhQSb5SOrnNQADVmddw+18cpzIOHvlZzMg
ETpfeegVfrADrHgicPlBnhtU+kuDJFKbYtRw4gXw6HnTH93CKZofXmElWrqp54cO
A3nAcrHMSlZW5mWY17I9CTqX0R5tyD5d3ohl2NonZZkamDu3Y9PLKnxdrIIaTri/
gUbhB8FvlOfzU7KON0chaf3m05c0mH+2dJiOBJ7n9Aie3HqZIL2VMJWSCr0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org