Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/wxYWah05nvlWEvLMcHexWTS0V-w.roa
File:                     wxYWah05nvlWEvLMcHexWTS0V-w.roa (raw, json)
Hash identifier:          pyr1MPL5vWKdoPNqUBGVD0SSrrdXLDycS2BHfkMnqz0=
Subject key identifier:   C3:16:16:6A:1D:39:9E:F9:56:12:F2:CC:70:77:B1:59:34:B4:57:EC
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0109
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/wxYWah05nvlWEvLMcHexWTS0V-w.roa
Signing time:             Tue 06 Dec 2022 04:14:52 +0000
ROA not before:           Tue 06 Dec 2022 04:14:52 +0000
ROA not after:            Wed 15 Nov 2023 01:30:02 +0000
asID:                     4686
IP address blocks:        220.150.223.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 265 (0x109)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Dec  6 04:14:52 2022 GMT
            Not After : Nov 15 01:30:02 2023 GMT
        Subject: CN=C316166A1D399EF95612F2CC7077B15934B457EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:8d:87:0a:03:a2:3b:87:69:2a:86:e1:0d:9a:
                    38:03:c9:cb:41:be:8f:1d:49:14:8c:d0:6a:65:88:
                    07:f6:df:a1:3f:e4:8a:be:5b:6d:d1:54:75:77:08:
                    e7:22:1f:c0:0e:38:74:f3:ad:bc:d7:b9:9e:19:a2:
                    43:c4:8e:64:dc:51:a9:d8:51:ea:7e:e4:52:d2:62:
                    9e:a2:de:ff:df:ae:cd:58:77:08:8a:af:89:c9:2b:
                    f9:d0:f7:ba:61:75:32:7f:93:eb:32:a5:1a:cb:99:
                    3d:73:7c:10:40:fd:d1:0c:54:c5:ec:58:2d:79:d5:
                    0d:64:63:3c:c3:92:2b:05:e4:e9:39:93:c2:55:18:
                    b0:68:57:23:e6:3b:64:11:45:c9:49:32:ab:8d:31:
                    4b:01:11:78:db:f3:e6:01:05:5f:fb:54:59:57:50:
                    68:79:dc:c8:c5:16:d0:66:16:53:a2:38:4c:ca:c5:
                    43:34:86:e3:15:69:36:f0:05:08:22:8b:0e:10:aa:
                    a0:bc:76:34:7d:d8:16:27:b6:c7:ac:4e:6d:be:30:
                    d3:0f:6e:14:24:63:65:fa:bf:7d:1d:f0:65:17:4d:
                    40:de:6e:87:03:a0:42:85:a0:b8:09:ef:b9:73:b4:
                    a6:5e:06:8a:0a:cc:a0:fd:d0:a0:0c:ba:ef:d5:f6:
                    b0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:16:16:6A:1D:39:9E:F9:56:12:F2:CC:70:77:B1:59:34:B4:57:EC
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/wxYWah05nvlWEvLMcHexWTS0V-w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.150.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:e4:8d:52:a5:59:18:d8:a2:f2:f6:8c:19:9f:0f:af:cd:e1:
         9b:6d:e0:c9:b0:dd:35:55:8c:b0:eb:16:b1:18:43:f7:37:a8:
         33:ed:17:5a:99:be:6a:54:be:79:7d:87:75:a6:2b:ab:1f:ed:
         41:99:9e:f9:ba:5e:02:6a:35:0f:04:ee:7b:48:a1:60:d7:20:
         6c:6d:50:b1:cd:21:11:30:f7:b5:04:51:70:40:d7:f7:6d:f1:
         cc:2b:0d:08:8e:36:2b:6e:9b:ab:6e:ad:31:d1:61:f1:9b:47:
         98:fd:62:d4:3b:77:28:50:bf:a0:c7:63:9e:4f:d7:f8:bf:ba:
         61:ec:a9:13:93:f4:a5:16:68:59:7a:ff:fa:31:a6:47:10:07:
         af:e8:b3:d0:c0:14:c2:83:d8:c5:30:cf:b1:81:bd:15:62:f9:
         c8:c5:55:9f:7a:d4:e0:d8:49:09:e8:f9:c2:ae:48:ff:3b:e7:
         6f:4c:0c:69:8e:d3:96:1f:4f:31:44:24:a0:f3:fd:53:e5:35:
         62:bf:d1:bb:58:05:3c:f4:fc:7a:28:44:2a:1b:bc:cb:58:a4:
         cd:2f:c8:0c:0c:84:60:bd:e5:ae:de:e4:f8:28:17:4c:c4:f5:
         1a:8f:d2:00:30:20:a4:b7:70:ac:7d:eb:6b:d4:d4:1f:15:5b:
         4e:02:25:cb
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yMjEyMDYw
NDE0NTJaFw0yMzExMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEMzMTYxNjZBMUQzOTlF
Rjk1NjEyRjJDQzcwNzdCMTU5MzRCNDU3RUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDfjYcKA6I7h2kqhuENmjgDyctBvo8dSRSM0GpliAf236E/5Iq+
W23RVHV3COciH8AOOHTzrbzXuZ4ZokPEjmTcUanYUep+5FLSYp6i3v/frs1YdwiK
r4nJK/nQ97phdTJ/k+sypRrLmT1zfBBA/dEMVMXsWC151Q1kYzzDkisF5Ok5k8JV
GLBoVyPmO2QRRclJMquNMUsBEXjb8+YBBV/7VFlXUGh53MjFFtBmFlOiOEzKxUM0
huMVaTbwBQgiiw4QqqC8djR92BYntsesTm2+MNMPbhQkY2X6v30d8GUXTUDebocD
oEKFoLgJ77lztKZeBooKzKD90KAMuu/V9rBTAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUwxYWah05nvlWEvLMcHexWTS0V+wwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L3d4WVdhaDA1bnZsV0V2TE1jSGV4V1RTMFYtdy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADclt8wDQYJKoZIhvcNAQELBQADggEBADnkjVKlWRjYovL2jBmfD6/N4Ztt
4Mmw3TVVjLDrFrEYQ/c3qDPtF1qZvmpUvnl9h3WmK6sf7UGZnvm6XgJqNQ8E7ntI
oWDXIGxtULHNIREw97UEUXBA1/dt8cwrDQiONitum6turTHRYfGbR5j9YtQ7dyhQ
v6DHY55P1/i/umHsqROT9KUWaFl6//oxpkcQB6/os9DAFMKD2MUwz7GBvRVi+cjF
VZ961ODYSQno+cKuSP87529MDGmO05YfTzFEJKDz/VPlNWK/0btYBTz0/HooRCob
vMtYpM0vyAwMhGC95a7e5PgoF0zE9RqP0gAwIKS3cKx962vU1B8VW04CJcs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:09 2024 by rpki-client on console-ams.rpki-client.org