Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/Lb63sCdsRPZoJDIu4VXxVVSUv20.roa
File:                     Lb63sCdsRPZoJDIu4VXxVVSUv20.roa (raw, json)
Hash identifier:          La5mgd/St+YNflfa7hXQZq/6D/5hX2fAqXVdCrASxRQ=
Subject key identifier:   2D:BE:B7:B0:27:6C:44:F6:68:24:32:2E:E1:55:F1:55:54:94:BF:6D
Certificate issuer:       /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Certificate serial:       26
Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/Lb63sCdsRPZoJDIu4VXxVVSUv20.roa
Signing time:             Wed 01 Feb 2023 01:30:24 +0000
ROA not before:           Wed 01 Feb 2023 01:30:24 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     17676
IP address blocks:        61.206.16.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
        Validity
            Not Before: Feb  1 01:30:24 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=2DBEB7B0276C44F66824322EE155F1555494BF6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4c:72:a9:11:5b:73:75:e5:a7:0c:b3:82:2f:
                    84:05:2f:b9:f4:41:ab:ac:55:8b:98:c6:34:f8:77:
                    4e:0f:17:47:0a:7b:c5:d4:d3:e9:80:81:35:09:d1:
                    db:b8:a6:f2:e1:3b:ea:9e:d3:5d:8f:b0:c0:f4:ec:
                    24:f7:2e:38:63:4b:1b:59:f7:ec:26:e8:a4:b6:39:
                    22:a3:62:81:ef:fd:30:58:3a:d6:04:64:1d:54:1c:
                    70:43:80:ea:7e:b1:a2:0b:10:3d:fd:9f:f2:8d:42:
                    35:97:03:33:6f:0c:00:6a:f5:0a:cc:f9:f2:37:9d:
                    ca:d4:48:1b:52:a4:53:64:c5:3a:e2:9d:aa:54:09:
                    7c:dd:7b:89:15:45:9b:51:89:7d:3c:d7:2e:fb:49:
                    1e:75:27:64:9b:73:f7:69:3e:8d:e6:a1:cb:f6:68:
                    92:7b:f1:2b:91:7f:a0:51:b4:b1:5d:28:39:21:4f:
                    d6:0e:1e:42:8b:b1:40:d9:25:8b:7d:da:d4:94:17:
                    90:ee:c0:53:45:3c:f7:ba:fe:ba:d3:76:eb:08:a9:
                    7e:a3:1d:1f:1c:c6:72:ae:46:66:f0:23:5a:2f:a5:
                    2a:5a:88:21:33:05:f4:5f:53:fd:0a:77:9b:bf:e4:
                    c4:e4:f1:9f:2a:9f:20:89:21:90:84:0a:13:52:30:
                    94:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:BE:B7:B0:27:6C:44:F6:68:24:32:2E:E1:55:F1:55:54:94:BF:6D
            X509v3 Authority Key Identifier:
                keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/Lb63sCdsRPZoJDIu4VXxVVSUv20.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.206.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         dd:22:d9:da:28:ec:c0:6f:32:26:ad:cc:9a:b1:04:7a:90:c9:
         5d:9d:fc:74:8e:67:95:b6:e0:e3:07:8d:8d:5c:08:77:52:cb:
         01:42:4e:2d:c6:03:fc:67:09:2b:ef:5d:7b:b6:38:fd:d4:d6:
         f7:56:a8:35:f4:ec:80:5d:70:d5:e1:c9:9f:e0:37:1c:88:a3:
         cb:0c:92:38:71:4d:b1:4e:47:8f:c0:e9:b7:0b:b6:42:e8:fb:
         96:4c:de:6f:be:d9:3e:9e:bc:79:4b:69:70:bd:04:22:09:17:
         dd:3c:16:bc:ff:1e:15:4f:91:6f:47:5b:f8:6c:6e:0d:dc:a3:
         14:64:d8:97:42:ae:ef:6b:3d:7f:7f:71:01:bd:c2:c1:0e:bd:
         31:79:bb:b4:8c:80:18:67:d5:d4:77:90:9d:05:15:5f:08:23:
         87:b7:60:ca:db:fa:4b:56:ab:c1:a2:ca:88:ce:be:89:dc:53:
         d5:fa:db:64:25:21:dc:19:97:0c:56:fb:a6:5b:76:7f:a2:01:
         ca:aa:bf:5d:60:a1:10:ca:48:7d:ab:b7:55:40:c2:02:b5:55:
         ce:ce:73:83:89:1d:dc:b2:9b:37:ed:d5:7e:0b:e3:b2:7d:66:
         0c:0b:93:4e:4b:4b:20:48:22:02:b5:f2:65:d0:b0:8f:a3:85:
         58:89:59:97
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBJjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFNjIz
MzhERTMzMkM2RjRCOUUyNTk2RUU1REMzNzlBMjVFRkU1OENGMB4XDTIzMDIwMTAx
MzAyNFoXDTI0MDExNTAxMzAwMlowMzExMC8GA1UEAxMoMkRCRUI3QjAyNzZDNDRG
NjY4MjQzMjJFRTE1NUYxNTU1NDk0QkY2RDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKpMcqkRW3N15acMs4IvhAUvufRBq6xVi5jGNPh3Tg8XRwp7xdTT
6YCBNQnR27im8uE76p7TXY+wwPTsJPcuOGNLG1n37CbopLY5IqNige/9MFg61gRk
HVQccEOA6n6xogsQPf2f8o1CNZcDM28MAGr1Csz58jedytRIG1KkU2TFOuKdqlQJ
fN17iRVFm1GJfTzXLvtJHnUnZJtz92k+jeahy/ZoknvxK5F/oFG0sV0oOSFP1g4e
QouxQNkli33a1JQXkO7AU0U897r+utN26wipfqMdHxzGcq5GZvAjWi+lKlqIITMF
9F9T/Qp3m7/kxOTxnyqfIIkhkIQKE1IwlAkCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQtvrewJ2xE9mgkMi7hVfFVVJS/bTAfBgNVHSMEGDAWgBTmIzjeMyxvS54llu5d
w3miXv5YzzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDQwLzVpTTQzak1zYjB1ZUpaYnVYY041b2w3LVdNOC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzVpTTQzak1zYjB1ZUpaYnVYY041b2w3
LVdNOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80NDAvTGI2M3NDZHNSUFpvSkRJdTRWWHhWVlNVdjIwLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBD3OEDANBgkqhkiG9w0BAQsFAAOCAQEA3SLZ2ijswG8yJq3MmrEEepDJXZ38
dI5nlbbg4weNjVwId1LLAUJOLcYD/GcJK+9de7Y4/dTW91aoNfTsgF1w1eHJn+A3
HIijywySOHFNsU5Hj8Dptwu2Quj7lkzeb77ZPp68eUtpcL0EIgkX3TwWvP8eFU+R
b0db+GxuDdyjFGTYl0Ku72s9f39xAb3CwQ69MXm7tIyAGGfV1HeQnQUVXwgjh7dg
ytv6S1arwaLKiM6+idxT1frbZCUh3BmXDFb7plt2f6IByqq/XWChEMpIfau3VUDC
ArVVzs5zg4kd3LKbN+3Vfgvjsn1mDAuTTktLIEgiArXyZdCwj6OFWIlZlw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org