Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/jyVh5BeAhEOvbni_o2ITg9wvQdA.roa
File:                     jyVh5BeAhEOvbni_o2ITg9wvQdA.roa (raw, json)
Hash identifier:          lzGj8dHPX0V5DgHbHo16AJEvJWh4+K3WAcOirX7uB4A=
Subject key identifier:   8F:25:61:E4:17:80:84:43:AF:6E:78:BF:A3:62:13:83:DC:2F:41:D0
Certificate issuer:       /CN=86A0BE02D491F35A561CC4904BEB7EB1AD4EC2FF
Certificate serial:       25
Authority key identifier: 86:A0:BE:02:D4:91:F3:5A:56:1C:C4:90:4B:EB:7E:B1:AD:4E:C2:FF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hqC-AtSR81pWHMSQS-t-sa1Owv8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/jyVh5BeAhEOvbni_o2ITg9wvQdA.roa
Signing time:             Sun 01 May 2022 01:30:20 +0000
ROA not before:           Sun 01 May 2022 01:30:20 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     9607
IP address blocks:        208.111.48.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86A0BE02D491F35A561CC4904BEB7EB1AD4EC2FF
        Validity
            Not Before: May  1 01:30:20 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=8F2561E417808443AF6E78BFA3621383DC2F41D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4d:35:dd:a5:14:63:36:76:f8:e8:47:39:94:
                    23:25:19:02:47:70:d4:a2:df:76:69:0d:24:a3:74:
                    28:16:6a:56:a5:dc:c2:1d:37:75:46:df:d0:24:7d:
                    39:2d:7c:3d:58:14:05:21:8c:3e:f0:8a:23:29:63:
                    96:b9:93:c5:02:dc:42:39:51:fe:c2:6e:e4:28:c7:
                    f5:0b:ce:8d:87:31:34:95:8e:5d:c2:7b:10:bc:e2:
                    3c:9f:6d:ce:74:9e:2f:1b:10:7c:a6:fe:ac:3d:58:
                    6d:a0:ca:52:0b:ae:3e:5b:71:03:e5:0e:7e:e3:70:
                    61:c1:e8:ac:85:fc:38:89:e1:98:d9:62:b3:9c:8b:
                    a0:84:e5:63:52:34:53:cb:2e:02:42:68:b0:24:9d:
                    c5:b7:5e:3b:9b:24:ac:16:6b:10:b2:4a:fe:bc:d3:
                    e6:48:bd:d8:78:45:fb:c0:23:15:0a:e8:1d:f7:39:
                    70:f1:87:94:77:24:eb:eb:5c:4c:ee:24:45:00:9b:
                    91:e7:b8:72:db:e0:d9:a1:2f:7e:69:ca:65:95:7b:
                    68:94:85:d1:fb:e3:be:70:e7:c0:bf:57:f3:7e:70:
                    6e:78:a0:26:e4:87:3c:b6:6e:a5:59:03:11:72:7c:
                    f2:06:b1:45:57:9d:ab:f3:86:ea:26:36:99:55:cd:
                    77:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:25:61:E4:17:80:84:43:AF:6E:78:BF:A3:62:13:83:DC:2F:41:D0
            X509v3 Authority Key Identifier:
                keyid:86:A0:BE:02:D4:91:F3:5A:56:1C:C4:90:4B:EB:7E:B1:AD:4E:C2:FF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/hqC-AtSR81pWHMSQS-t-sa1Owv8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hqC-AtSR81pWHMSQS-t-sa1Owv8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/jyVh5BeAhEOvbni_o2ITg9wvQdA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.111.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         68:47:9f:0d:00:08:10:03:2e:88:73:26:9e:67:c3:41:e0:82:
         28:1b:fd:55:d3:d4:e6:b7:53:3c:b0:db:8c:b6:f4:c8:c3:bf:
         d6:fa:1f:73:62:2f:b8:86:e5:4e:2e:ff:8d:e8:2b:bb:68:6c:
         b7:c8:ec:2a:4f:ed:6f:cf:3a:aa:b7:6b:d1:5a:b0:3a:0f:4c:
         95:fb:57:99:33:9f:e6:2d:b5:76:fa:59:15:ce:d1:57:7b:53:
         cc:b1:bd:55:ed:cd:2a:61:e2:97:c8:66:8a:ee:a1:ad:f0:31:
         ec:0d:71:cd:51:b2:05:92:0e:58:7b:29:29:73:56:5e:58:cd:
         6e:9f:e3:70:0c:7c:4d:4e:80:54:8c:83:d1:66:11:d6:62:e7:
         17:65:6f:64:e7:85:1b:df:fd:6c:3e:58:95:c9:49:d1:4a:33:
         55:fc:2a:21:c6:89:0b:4f:7c:4a:1f:ff:9d:c1:e6:35:08:fe:
         eb:16:17:55:b1:e6:3e:5c:de:00:5e:c3:4a:e0:22:ab:56:f4:
         82:72:f0:29:71:3e:29:c7:a7:32:ca:f2:70:2f:55:ef:84:e1:
         44:02:0b:c4:f9:87:4f:df:81:2f:c3:42:20:f7:88:22:b5:51:
         15:6c:83:bd:d0:c9:b1:2f:38:59:db:f3:a3:da:60:03:55:84:
         55:c2:0f:5d
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBJTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4NkEw
QkUwMkQ0OTFGMzVBNTYxQ0M0OTA0QkVCN0VCMUFENEVDMkZGMB4XDTIyMDUwMTAx
MzAyMFoXDTIzMDQyNzA5NTIzNFowMzExMC8GA1UEAxMoOEYyNTYxRTQxNzgwODQ0
M0FGNkU3OEJGQTM2MjEzODNEQzJGNDFEMDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKZNNd2lFGM2dvjoRzmUIyUZAkdw1KLfdmkNJKN0KBZqVqXcwh03
dUbf0CR9OS18PVgUBSGMPvCKIyljlrmTxQLcQjlR/sJu5CjH9QvOjYcxNJWOXcJ7
ELziPJ9tznSeLxsQfKb+rD1YbaDKUguuPltxA+UOfuNwYcHorIX8OInhmNlis5yL
oITlY1I0U8suAkJosCSdxbdeO5skrBZrELJK/rzT5ki92HhF+8AjFQroHfc5cPGH
lHck6+tcTO4kRQCbkee4ctvg2aEvfmnKZZV7aJSF0fvjvnDnwL9X835wbnigJuSH
PLZupVkDEXJ88gaxRVedq/OG6iY2mVXNd7sCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSPJWHkF4CEQ69ueL+jYhOD3C9B0DAfBgNVHSMEGDAWgBSGoL4C1JHzWlYcxJBL
636xrU7C/zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzU0L2hxQy1BdFNSODFwV0hNU1FTLXQtc2ExT3d2OC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2hxQy1BdFNSODFwV0hNU1FTLXQtc2Ex
T3d2OC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zNTQvanlWaDVCZUFoRU92Ym5pX28ySVRnOXd2UWRBLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA9BvMDANBgkqhkiG9w0BAQsFAAOCAQEAaEefDQAIEAMuiHMmnmfDQeCCKBv9
VdPU5rdTPLDbjLb0yMO/1vofc2IvuIblTi7/jegru2hst8jsKk/tb886qrdr0Vqw
Og9MlftXmTOf5i21dvpZFc7RV3tTzLG9Ve3NKmHil8hmiu6hrfAx7A1xzVGyBZIO
WHspKXNWXljNbp/jcAx8TU6AVIyD0WYR1mLnF2VvZOeFG9/9bD5YlclJ0UozVfwq
IcaJC098Sh//ncHmNQj+6xYXVbHmPlzeAF7DSuAiq1b0gnLwKXE+KcenMsrycC9V
74ThRAILxPmHT9+BL8NCIPeIIrVRFWyDvdDJsS84Wdvzo9pgA1WEVcIPXQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org