Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/f_f7o4Df3Lw8bhGJqXYq7RYrt_M.roa
File:                     f_f7o4Df3Lw8bhGJqXYq7RYrt_M.roa (raw, json)
Hash identifier:          mNLxUVOhAzeUzYsHLCSZCkFcwXiBvAxY37G6w9TPoWE=
Subject key identifier:   7F:F7:FB:A3:80:DF:DC:BC:3C:6E:11:89:A9:76:2A:ED:16:2B:B7:F3
Certificate issuer:       /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial:       53
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/f_f7o4Df3Lw8bhGJqXYq7RYrt_M.roa
Signing time:             Sun 01 Jan 2023 01:29:28 +0000
ROA not before:           Sun 01 Jan 2023 01:29:28 +0000
ROA not after:            Fri 15 Dec 2023 01:30:02 +0000
asID:                     2527
IP address blocks:        131.147.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
        Validity
            Not Before: Jan  1 01:29:28 2023 GMT
            Not After : Dec 15 01:30:02 2023 GMT
        Subject: CN=7FF7FBA380DFDCBC3C6E1189A9762AED162BB7F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e1:38:a4:95:85:e5:c4:09:67:45:d3:b8:b6:
                    70:db:94:20:4e:2f:37:a0:59:5f:87:97:97:8a:7a:
                    73:20:ea:1c:30:5c:a2:bf:a5:e4:24:5d:1f:d7:ae:
                    41:8a:8f:26:55:2c:04:55:78:f0:11:af:e2:1d:f6:
                    b4:ab:0e:38:c1:05:f1:7c:58:6b:8a:bb:8a:7f:71:
                    3a:8a:b7:0a:86:06:e6:1b:6d:92:15:3a:2d:36:00:
                    a7:3e:8f:4b:1a:54:1f:a4:39:48:e7:3d:a9:3d:14:
                    9b:ee:e4:44:d8:e7:8f:56:7e:d5:58:9a:0f:72:a5:
                    3a:ef:a6:89:b6:91:85:aa:99:c7:55:19:ae:46:68:
                    dd:fa:7e:08:f2:3c:d7:ad:12:b3:22:eb:4f:35:44:
                    38:93:55:ee:77:e6:13:ca:7b:b4:b2:d6:5c:90:b5:
                    81:07:00:da:5b:c6:0a:76:8a:a7:97:44:fa:6c:4f:
                    c3:ff:20:54:11:5d:1b:46:df:c0:1a:d9:26:e3:28:
                    f9:05:2c:4c:0c:29:c5:39:e3:b5:eb:a5:cf:56:6b:
                    08:c6:f9:7e:b8:1c:49:3c:40:83:b8:d2:72:ae:1f:
                    39:c6:20:32:99:4c:03:12:ee:c9:9b:53:2c:84:02:
                    80:c9:96:f6:19:0c:05:a6:a5:d7:ff:93:98:f6:b8:
                    3a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F7:FB:A3:80:DF:DC:BC:3C:6E:11:89:A9:76:2A:ED:16:2B:B7:F3
            X509v3 Authority Key Identifier:
                keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/f_f7o4Df3Lw8bhGJqXYq7RYrt_M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.147.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6f:ca:b7:30:e8:82:45:49:01:3a:ec:b6:14:90:df:7f:ac:d4:
         39:9a:76:5d:67:b3:d4:a7:8f:b2:7d:d2:1d:e4:db:13:1f:97:
         e7:2b:dc:2d:79:9d:f8:4e:b1:59:c0:69:a1:19:15:69:dc:d2:
         bc:64:2f:4e:d1:3b:66:a7:f9:cf:1a:15:8b:bc:56:c2:04:28:
         c3:c9:1c:c4:b3:2e:95:a8:a2:f9:57:f2:10:a4:c7:f5:d6:00:
         ce:2f:e7:3f:01:55:6b:4e:4b:22:c5:6f:91:e6:81:88:7a:90:
         2e:ab:af:ca:21:ad:2a:b9:ce:d0:cf:4d:4a:2b:32:22:5a:0a:
         c8:17:80:14:36:d2:d7:02:9b:e3:bc:87:b4:5e:34:5a:f1:24:
         b0:3d:64:88:fb:35:c1:e4:78:b5:12:bd:87:d0:a8:cc:43:12:
         69:cf:28:b7:e8:44:84:5b:bd:db:07:ae:05:c3:e2:9e:56:06:
         67:d2:e0:c3:41:20:3a:ad:22:8f:99:96:6c:26:5e:dd:e0:e7:
         33:b7:9c:26:f0:4f:28:c6:f5:fc:3b:27:0b:18:67:bf:09:19:
         6a:26:8f:f0:78:62:fc:93:4f:77:77:9d:aa:96:33:1b:b5:2f:
         0c:62:3f:69:e7:fa:06:27:c1:0f:12:5f:1a:11:85:9f:f6:e2:
         90:29:64:6b
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIBUzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwNENB
N0YzNUFGMUE4RjUyNTc1QTlGRUZGRjIxQzRBNDcwODBEREZBMB4XDTIzMDEwMTAx
MjkyOFoXDTIzMTIxNTAxMzAwMlowMzExMC8GA1UEAxMoN0ZGN0ZCQTM4MERGRENC
QzNDNkUxMTg5QTk3NjJBRUQxNjJCQjdGMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOXhOKSVheXECWdF07i2cNuUIE4vN6BZX4eXl4p6cyDqHDBcor+l
5CRdH9euQYqPJlUsBFV48BGv4h32tKsOOMEF8XxYa4q7in9xOoq3CoYG5httkhU6
LTYApz6PSxpUH6Q5SOc9qT0Um+7kRNjnj1Z+1ViaD3KlOu+mibaRhaqZx1UZrkZo
3fp+CPI8160SsyLrTzVEOJNV7nfmE8p7tLLWXJC1gQcA2lvGCnaKp5dE+mxPw/8g
VBFdG0bfwBrZJuMo+QUsTAwpxTnjteulz1ZrCMb5frgcSTxAg7jScq4fOcYgMplM
AxLuyZtTLIQCgMmW9hkMBaal1/+TmPa4Oi8CAwEAAaOCAiEwggIdMB0GA1UdDgQW
BBR/9/ujgN/cvDxuEYmpdirtFiu38zAfBgNVHSMEGDAWgBQEyn81rxqPUldan+//
IcSkcIDd+jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDMvQk1wX05hOGFqMUpYV3Bfdl95SEVwSENBM2ZvLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvQk1wX05hOGFqMUpYV3Bfdl95SEVwSENB
M2ZvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzQzL2ZfZjdvNERmM0x3OGJoR0pxWFlxN1JZcnRfTS5yb2EwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwCDkzANBgkqhkiG9w0BAQsFAAOCAQEAb8q3MOiCRUkBOuy2FJDff6zUOZp2XWez
1KePsn3SHeTbEx+X5yvcLXmd+E6xWcBpoRkVadzSvGQvTtE7Zqf5zxoVi7xWwgQo
w8kcxLMulaii+VfyEKTH9dYAzi/nPwFVa05LIsVvkeaBiHqQLquvyiGtKrnO0M9N
SisyIloKyBeAFDbS1wKb47yHtF40WvEksD1kiPs1weR4tRK9h9CozEMSac8ot+hE
hFu92weuBcPinlYGZ9Lgw0EgOq0ij5mWbCZe3eDnM7ecJvBPKMb1/DsnCxhnvwkZ
aiaP8Hhi/JNPd3edqpYzG7UvDGI/aef6BifBDxJfGhGFn/bikClkaw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org