Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/pJf8xcxTFtiPRuI5MqNfh5PL_nQ.roa
File:                     pJf8xcxTFtiPRuI5MqNfh5PL_nQ.roa (raw, json)
Hash identifier:          6qBPhYBLZw89WlzIfw5zyd81wXSBqKlDZdzsenBzDB8=
Subject key identifier:   A4:97:FC:C5:CC:53:16:D8:8F:46:E2:39:32:A3:5F:87:93:CB:FE:74
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       CA
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/pJf8xcxTFtiPRuI5MqNfh5PL_nQ.roa
Signing time:             Sun 01 Jan 2023 01:29:35 +0000
ROA not before:           Sun 01 Jan 2023 01:29:35 +0000
ROA not after:            Fri 15 Dec 2023 01:30:02 +0000
asID:                     2527
IP address blocks:        218.221.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Jan  1 01:29:35 2023 GMT
            Not After : Dec 15 01:30:02 2023 GMT
        Subject: CN=A497FCC5CC5316D88F46E23932A35F8793CBFE74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:5f:a8:a9:ee:cd:6d:67:32:f6:fb:e8:20:7a:
                    47:f2:44:33:cd:17:06:94:34:4d:94:3d:81:9f:61:
                    85:de:75:b2:38:4a:13:20:2c:47:d6:f4:47:1b:a6:
                    b2:ed:8d:18:98:dd:88:6d:86:60:01:a2:01:38:52:
                    6e:7e:b5:e6:fb:9c:fa:66:2d:bc:6a:e6:86:a9:e7:
                    a5:c4:46:64:34:24:fc:e6:93:9a:f4:c7:6b:e9:40:
                    ba:db:06:ca:2b:d9:ab:f6:f0:e7:8d:db:ca:ad:82:
                    1d:92:87:50:4f:71:21:5e:ad:76:d8:c8:aa:06:73:
                    0d:b6:e5:ac:ed:1d:62:f4:88:4b:c2:f2:40:1f:0a:
                    a9:34:7b:49:80:fd:10:5f:45:c1:f5:85:0d:a9:08:
                    c1:d4:d5:3c:91:fb:3d:97:23:57:18:bb:2e:79:80:
                    8e:a5:97:c5:ed:62:d8:86:e4:3b:ad:4d:2b:16:ae:
                    4a:cf:e4:67:ea:0d:bf:7a:42:49:a6:3d:b0:56:e6:
                    a4:6f:c6:9a:68:46:97:63:17:63:1c:ee:4a:c1:a7:
                    d4:9d:7b:52:fe:ca:95:9f:17:db:c6:46:a8:5d:c7:
                    e0:87:51:94:32:ca:9a:de:86:c2:fb:b0:51:82:17:
                    b0:8a:f5:b2:52:ea:ed:c7:c3:83:c2:fa:f1:e1:73:
                    d4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:97:FC:C5:CC:53:16:D8:8F:46:E2:39:32:A3:5F:87:93:CB:FE:74
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/pJf8xcxTFtiPRuI5MqNfh5PL_nQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.221.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2d:a2:32:7f:6b:a9:58:45:cd:aa:78:3e:73:a8:47:e8:0e:74:
         2e:95:85:7e:10:5d:83:7e:ec:23:40:2b:c3:4d:70:05:81:dc:
         32:2b:15:56:7e:54:3f:46:d4:d7:62:7a:0e:b6:78:c4:ec:96:
         b1:72:c9:e2:0f:09:75:6d:35:ba:99:e3:c7:db:e6:79:4e:8e:
         e3:03:48:cb:e6:a6:e1:db:6d:de:52:66:24:af:c2:e1:17:a7:
         18:09:b1:9d:97:3e:c2:d1:e8:8b:e9:05:7a:46:65:5b:4d:21:
         5b:95:be:79:b2:70:9c:7c:36:42:94:12:94:ad:c0:d5:fa:54:
         82:f3:d6:d7:54:6a:89:d2:13:26:55:bb:77:ac:0f:6b:24:49:
         3f:c1:2d:b0:c0:4e:ff:df:fa:38:69:5d:7c:9b:f6:0f:ff:ce:
         8c:9e:d3:25:09:66:0a:e1:14:e5:3a:13:49:49:5f:a4:ab:79:
         90:0f:f1:b5:a9:d7:04:d2:56:39:9c:9c:aa:63:12:46:72:2a:
         cd:34:3b:9b:ac:b6:1c:e4:c9:ba:67:d5:d8:3e:96:05:c8:0e:
         98:08:0b:37:da:70:2c:5d:09:e8:ba:cd:a1:f5:cd:ba:9a:b2:
         ca:df:38:c7:3d:6d:38:bf:38:d4:7d:a8:af:a4:54:bc:ff:25:
         09:f0:72:2a
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgICAMowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1
QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yMzAxMDEw
MTI5MzVaFw0yMzEyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEE0OTdGQ0M1Q0M1MzE2
RDg4RjQ2RTIzOTMyQTM1Rjg3OTNDQkZFNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDoX6ip7s1tZzL2++ggekfyRDPNFwaUNE2UPYGfYYXedbI4ShMg
LEfW9EcbprLtjRiY3YhthmABogE4Um5+teb7nPpmLbxq5oap56XERmQ0JPzmk5r0
x2vpQLrbBsor2av28OeN28qtgh2Sh1BPcSFerXbYyKoGcw225aztHWL0iEvC8kAf
Cqk0e0mA/RBfRcH1hQ2pCMHU1TyR+z2XI1cYuy55gI6ll8XtYtiG5DutTSsWrkrP
5GfqDb96QkmmPbBW5qRvxppoRpdjF2Mc7krBp9Sde1L+ypWfF9vGRqhdx+CHUZQy
yprehsL7sFGCF7CK9bJS6u3Hw4PC+vHhc9QXAgMBAAGjggIhMIICHTAdBgNVHQ4E
FgQUpJf8xcxTFtiPRuI5MqNfh5PL/nQwHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo
3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1
ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr
BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80My9wSmY4eGN4VEZ0aVBSdUk1TXFOZmg1UExfblEucm9hMEYG
CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk
cC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAF
AwMA2t0wDQYJKoZIhvcNAQELBQADggEBAC2iMn9rqVhFzap4PnOoR+gOdC6VhX4Q
XYN+7CNAK8NNcAWB3DIrFVZ+VD9G1Ndieg62eMTslrFyyeIPCXVtNbqZ48fb5nlO
juMDSMvmpuHbbd5SZiSvwuEXpxgJsZ2XPsLR6IvpBXpGZVtNIVuVvnmycJx8NkKU
EpStwNX6VILz1tdUaonSEyZVu3esD2skST/BLbDATv/f+jhpXXyb9g//zoye0yUJ
ZgrhFOU6E0lJX6SreZAP8bWp1wTSVjmcnKpjEkZyKs00O5usthzkybpn1dg+lgXI
DpgICzfacCxdCei6zaH1zbqassrfOMc9bTi/ONR9qK+kVLz/JQnwcio=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org