Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/smrCfvrmSfv8HYTaFfEl9LBMza4.roa
File:                     smrCfvrmSfv8HYTaFfEl9LBMza4.roa (raw, json)
Hash identifier:          3z0fbXpud5qZD28ZeUmiA71y9qzztn6I4zdtmFKqKr4=
Subject key identifier:   B2:6A:C2:7E:FA:E6:49:FB:FC:1D:84:DA:15:F1:25:F4:B0:4C:CD:AE
Certificate issuer:       /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Certificate serial:       27
Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/smrCfvrmSfv8HYTaFfEl9LBMza4.roa
Signing time:             Wed 01 Feb 2023 01:30:25 +0000
ROA not before:           Wed 01 Feb 2023 01:30:25 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     17676
IP address blocks:        61.206.128.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
        Validity
            Not Before: Feb  1 01:30:25 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=B26AC27EFAE649FBFC1D84DA15F125F4B04CCDAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:57:2f:2b:64:ce:cf:89:07:3a:db:0a:77:cb:
                    67:8f:2a:94:47:24:63:ce:20:3f:c3:10:34:f5:2d:
                    fc:b9:bc:e8:9a:36:d2:bf:cb:58:dc:98:86:ae:e7:
                    56:61:ff:0c:64:8f:2d:fe:65:45:2b:2b:0a:96:66:
                    5d:ea:55:c8:a0:52:f5:65:83:5c:c1:60:fa:5c:92:
                    38:f5:d2:e9:36:64:4a:35:00:62:fc:86:7c:2f:6e:
                    64:7b:fa:3b:5c:43:5d:b5:87:02:53:dc:ab:5d:5d:
                    61:06:63:17:6a:37:6c:aa:6c:90:82:19:82:42:23:
                    9e:34:1c:00:82:0f:16:5e:73:2b:e4:27:2d:31:a9:
                    4c:ae:6b:8f:95:6f:a0:8b:20:9e:b4:ba:76:e8:71:
                    fa:2f:7d:3f:71:60:66:b0:d5:96:de:5c:e5:52:2f:
                    d4:f2:12:81:32:a4:92:86:93:3c:64:32:32:8b:b9:
                    f0:70:c0:57:99:83:e6:cb:d9:35:70:fc:8a:f5:96:
                    a8:22:a7:ee:15:4f:42:22:93:16:4e:3a:be:c3:e9:
                    1b:4c:00:6c:47:e5:34:a6:4e:12:9e:81:66:6e:4a:
                    ce:38:0a:32:3f:0b:e4:3c:99:1e:66:33:8b:ad:1c:
                    2e:99:2c:52:ac:67:35:e1:a4:d4:56:c0:a0:4e:42:
                    00:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:6A:C2:7E:FA:E6:49:FB:FC:1D:84:DA:15:F1:25:F4:B0:4C:CD:AE
            X509v3 Authority Key Identifier:
                keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/smrCfvrmSfv8HYTaFfEl9LBMza4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.206.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         65:20:3a:23:9b:a1:81:e6:10:88:b6:f4:2f:2c:e5:04:fb:30:
         17:a6:88:61:17:5d:61:33:14:0b:fb:f0:bb:6b:75:be:b1:6a:
         4d:e8:2c:13:31:29:ac:07:c4:54:00:2c:6f:a8:62:af:07:ad:
         4c:0f:aa:dc:b4:4b:ee:19:1d:18:5a:4a:ae:14:98:d8:c0:aa:
         af:61:ee:1a:ca:28:d2:71:83:1c:6c:28:fd:0b:10:4e:3c:63:
         d4:6f:bd:ba:1b:ef:63:29:0c:39:25:95:e6:5d:01:fe:b0:90:
         03:f7:90:b5:3a:4a:2c:22:5b:95:ce:85:42:02:d4:a0:fe:e1:
         96:5d:ec:8b:e1:1a:d5:28:69:a2:b1:bf:b7:de:b9:e9:ae:7e:
         db:10:9f:43:33:b8:20:db:4b:52:7e:76:88:b2:b7:de:63:ad:
         04:31:5d:1e:99:c6:fd:dd:61:0d:6e:fb:91:eb:66:9a:e4:c1:
         4b:00:e4:86:a6:69:f6:98:f4:97:17:f9:61:33:03:aa:62:88:
         de:13:9e:df:18:f8:31:02:07:77:e8:4e:29:61:08:f3:34:c3:
         4b:79:9e:19:e7:36:d5:51:35:ad:31:20:85:22:42:a7:14:58:
         91:60:5b:f8:88:f2:0d:63:48:89:8b:1b:5c:f0:e8:6d:c6:05:
         77:73:2e:51
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBJzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFNjIz
MzhERTMzMkM2RjRCOUUyNTk2RUU1REMzNzlBMjVFRkU1OENGMB4XDTIzMDIwMTAx
MzAyNVoXDTI0MDExNTAxMzAwMlowMzExMC8GA1UEAxMoQjI2QUMyN0VGQUU2NDlG
QkZDMUQ4NERBMTVGMTI1RjRCMDRDQ0RBRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALlXLytkzs+JBzrbCnfLZ48qlEckY84gP8MQNPUt/Lm86Jo20r/L
WNyYhq7nVmH/DGSPLf5lRSsrCpZmXepVyKBS9WWDXMFg+lySOPXS6TZkSjUAYvyG
fC9uZHv6O1xDXbWHAlPcq11dYQZjF2o3bKpskIIZgkIjnjQcAIIPFl5zK+QnLTGp
TK5rj5VvoIsgnrS6duhx+i99P3FgZrDVlt5c5VIv1PISgTKkkoaTPGQyMou58HDA
V5mD5svZNXD8ivWWqCKn7hVPQiKTFk46vsPpG0wAbEflNKZOEp6BZm5KzjgKMj8L
5DyZHmYzi60cLpksUqxnNeGk1FbAoE5CADUCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSyasJ++uZJ+/wdhNoV8SX0sEzNrjAfBgNVHSMEGDAWgBTmIzjeMyxvS54llu5d
w3miXv5YzzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDQwLzVpTTQzak1zYjB1ZUpaYnVYY041b2w3LVdNOC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzVpTTQzak1zYjB1ZUpaYnVYY041b2w3
LVdNOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80NDAvc21yQ2Z2cm1TZnY4SFlUYUZmRWw5TEJNemE0LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBj3OgDANBgkqhkiG9w0BAQsFAAOCAQEAZSA6I5uhgeYQiLb0LyzlBPswF6aI
YRddYTMUC/vwu2t1vrFqTegsEzEprAfEVAAsb6hirwetTA+q3LRL7hkdGFpKrhSY
2MCqr2HuGsoo0nGDHGwo/QsQTjxj1G+9uhvvYykMOSWV5l0B/rCQA/eQtTpKLCJb
lc6FQgLUoP7hll3si+Ea1ShporG/t9656a5+2xCfQzO4INtLUn52iLK33mOtBDFd
HpnG/d1hDW77ketmmuTBSwDkhqZp9pj0lxf5YTMDqmKI3hOe3xj4MQIHd+hOKWEI
8zTDS3meGec21VE1rTEghSJCpxRYkWBb+IjyDWNIiYsbXPDobcYFd3MuUQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org