Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/ywZl17jHheW5MiC7DDxIjjNqvnE.roa
File:                     ywZl17jHheW5MiC7DDxIjjNqvnE.roa (raw, json)
Hash identifier:          xu7ZAkzBqJe5NLA5h2EClCDNePJpj0MnTkdgwzK5mMA=
Subject key identifier:   CB:06:65:D7:B8:C7:85:E5:B9:32:20:BB:0C:3C:48:8E:33:6A:BE:71
Certificate issuer:       /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial:       42
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/ywZl17jHheW5MiC7DDxIjjNqvnE.roa
Signing time:             Sat 01 Apr 2023 01:29:50 +0000
ROA not before:           Sat 01 Apr 2023 01:29:50 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9622
IP address blocks:        202.122.224.0/19 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
        Validity
            Not Before: Apr  1 01:29:50 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=CB0665D7B8C785E5B93220BB0C3C488E336ABE71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6e:0e:bb:28:d2:1a:3d:ea:fc:b2:f4:39:e6:
                    da:44:12:50:ee:79:df:d0:52:76:06:90:5c:ac:53:
                    72:ef:af:a0:a8:6e:bf:a6:f8:82:51:fa:e2:c0:fe:
                    cd:22:4a:67:49:17:0f:53:2e:85:82:8e:ed:b6:60:
                    1a:f3:d1:3f:bf:e9:ca:71:cd:b0:3c:41:40:40:97:
                    fd:7b:03:ce:8b:0c:e2:4d:26:a4:48:85:16:20:e1:
                    95:53:1a:72:59:9a:83:24:10:6a:09:d2:6b:f4:08:
                    2a:f7:3c:42:c3:08:8c:ae:a2:64:ed:04:bd:96:e9:
                    fc:ee:09:36:26:0c:c6:f3:14:69:6c:b4:f0:94:ad:
                    63:7f:db:06:3a:c2:24:fb:b8:2d:6e:70:7e:f4:ea:
                    11:e6:b2:58:ab:31:b7:ae:fd:25:59:6f:d6:b0:e9:
                    50:83:a4:dd:a4:14:6a:9d:d2:f2:e1:ed:f8:e6:ff:
                    1d:50:2e:a3:e0:fb:5e:07:1f:f3:71:cf:08:03:38:
                    76:39:63:f0:31:6b:be:60:d1:93:8c:f4:09:e0:cf:
                    ec:9d:3c:36:32:40:af:c7:02:8a:5d:ea:fc:3b:f0:
                    16:f5:23:25:7c:9b:c4:30:8c:bb:ef:79:b6:21:df:
                    66:93:77:a9:b3:18:6c:20:a4:a7:86:f0:27:e1:06:
                    64:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:06:65:D7:B8:C7:85:E5:B9:32:20:BB:0C:3C:48:8E:33:6A:BE:71
            X509v3 Authority Key Identifier:
                keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/ywZl17jHheW5MiC7DDxIjjNqvnE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.122.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         64:90:dd:3f:51:ec:58:ae:fe:54:c3:59:bd:e4:3f:31:86:9e:
         bc:f0:e2:a4:be:ee:51:4a:c5:64:a1:19:7e:c6:75:f2:fb:74:
         f1:51:c6:f8:51:e9:a1:fb:f2:36:72:9c:91:87:16:40:8b:01:
         2f:86:87:0d:f2:6b:0a:e0:69:23:30:c4:3a:00:d3:2d:53:b8:
         0a:6b:a7:a4:66:f8:27:4d:eb:e1:30:d2:ec:08:ee:b9:66:3d:
         23:2d:9c:3d:00:84:84:e4:40:3e:b6:b1:f6:f4:5d:25:62:72:
         ee:97:51:aa:17:74:2c:4f:4e:65:a1:d5:fc:62:2a:58:68:d9:
         48:42:79:7b:7d:0d:cb:bf:d1:85:c4:6e:6b:46:b9:3e:c2:60:
         cd:fd:e6:9f:2d:83:3b:bf:6f:be:c0:f7:aa:61:c3:95:33:7a:
         41:e7:22:7a:0a:f5:13:33:e9:9f:82:42:e0:80:7b:81:a3:32:
         aa:9a:38:2d:34:84:b1:0b:1a:fe:26:8c:01:64:a3:42:9b:30:
         cd:50:a2:d0:f1:24:5b:ae:84:a1:da:46:17:5f:14:e1:24:f1:
         bc:7d:5a:9c:e0:eb:2f:16:eb:95:f4:7d:9c:98:03:4b:3e:f2:
         1e:af:89:c6:8d:4b:96:a1:23:95:55:71:e0:ef:1d:53:43:58:
         81:9c:fe:4b
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBQjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1RDA1
NUIyREFBQzQ4ODc4Q0M5QjExMjdBMjlDRjExNjY2OTIwQTIzMB4XDTIzMDQwMTAx
Mjk1MFoXDTI0MDMxNDAxMzAwMlowMzExMC8GA1UEAxMoQ0IwNjY1RDdCOEM3ODVF
NUI5MzIyMEJCMEMzQzQ4OEUzMzZBQkU3MTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKNuDrso0ho96vyy9Dnm2kQSUO5539BSdgaQXKxTcu+voKhuv6b4
glH64sD+zSJKZ0kXD1MuhYKO7bZgGvPRP7/pynHNsDxBQECX/XsDzosM4k0mpEiF
FiDhlVMaclmagyQQagnSa/QIKvc8QsMIjK6iZO0EvZbp/O4JNiYMxvMUaWy08JSt
Y3/bBjrCJPu4LW5wfvTqEeayWKsxt679JVlv1rDpUIOk3aQUap3S8uHt+Ob/HVAu
o+D7Xgcf83HPCAM4djlj8DFrvmDRk4z0CeDP7J08NjJAr8cCil3q/DvwFvUjJXyb
xDCMu+95tiHfZpN3qbMYbCCkp4bwJ+EGZFUCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTLBmXXuMeF5bkyILsMPEiOM2q+cTAfBgNVHSMEGDAWgBRdBVstqsSIeMybESei
nPEWZpIKIzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzkzL1hRVmJMYXJFaUhqTW14RW5vcHp4Rm1hU0NpTS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1hRVmJMYXJFaUhqTW14RW5vcHp4Rm1h
U0NpTS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zOTMveXdabDE3akhoZVc1TWlDN0REeElqak5xdm5FLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBcp64DANBgkqhkiG9w0BAQsFAAOCAQEAZJDdP1HsWK7+VMNZveQ/MYaevPDi
pL7uUUrFZKEZfsZ18vt08VHG+FHpofvyNnKckYcWQIsBL4aHDfJrCuBpIzDEOgDT
LVO4CmunpGb4J03r4TDS7AjuuWY9Iy2cPQCEhORAPrax9vRdJWJy7pdRqhd0LE9O
ZaHV/GIqWGjZSEJ5e30Ny7/RhcRua0a5PsJgzf3mny2DO79vvsD3qmHDlTN6Qeci
egr1EzPpn4JC4IB7gaMyqpo4LTSEsQsa/iaMAWSjQpswzVCi0PEkW66EodpGF18U
4STxvH1anODrLxbrlfR9nJgDSz7yHq+Jxo1LlqEjlVVx4O8dU0NYgZz+Sw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org