Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/465/_TqvPQOiKzPGZFUF3oHSKV_1Ogg.roa
File:                     _TqvPQOiKzPGZFUF3oHSKV_1Ogg.roa (raw, json)
Hash identifier:          BSivP00t/fs3UiVlVJcLhSEWODJ78hxEesMTEgNnvAQ=
Subject key identifier:   FD:3A:AF:3D:03:A2:2B:33:C6:64:55:05:DE:81:D2:29:5F:F5:3A:08
Certificate issuer:       /CN=47A27188E214C396304497DB571B23F93EBFBDC6
Certificate serial:       26
Authority key identifier: 47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/_TqvPQOiKzPGZFUF3oHSKV_1Ogg.roa
Signing time:             Tue 01 Mar 2022 01:28:04 +0000
ROA not before:           Tue 01 Mar 2022 01:28:04 +0000
ROA not after:            Wed 15 Feb 2023 01:30:03 +0000
asID:                     10011
IP address blocks:        103.13.60.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A27188E214C396304497DB571B23F93EBFBDC6
        Validity
            Not Before: Mar  1 01:28:04 2022 GMT
            Not After : Feb 15 01:30:03 2023 GMT
        Subject: CN=FD3AAF3D03A22B33C6645505DE81D2295FF53A08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e4:4c:0c:b2:5a:5e:a9:57:d6:63:b8:52:56:
                    28:3f:4e:ed:be:c7:a7:63:bc:f9:30:fd:65:7b:95:
                    82:26:c3:2d:8e:80:66:b8:33:05:55:75:04:69:35:
                    8e:38:36:c9:a8:c3:f6:7f:52:87:8b:97:03:3a:84:
                    3b:04:03:19:7c:2c:bb:2e:b1:cb:9c:1f:44:27:1c:
                    df:ae:d3:14:88:86:be:be:9d:ec:be:4e:0b:f7:81:
                    64:12:7c:91:d7:e9:6a:ac:e8:24:4e:25:56:82:74:
                    0a:a6:83:12:6c:8b:4e:85:2a:d8:47:25:90:ad:29:
                    97:1a:6a:e3:3d:df:11:af:20:78:e9:cf:62:69:96:
                    f2:88:36:9a:c1:62:f8:c6:6d:38:73:6c:97:07:db:
                    34:5c:b0:80:91:7a:77:e6:67:ef:76:32:20:84:ff:
                    61:e5:d0:5b:3c:1e:36:4e:9f:ae:03:02:a2:c5:1b:
                    72:2a:ba:62:7d:6d:3b:5c:ad:46:fe:ed:18:ff:f6:
                    47:57:6b:d7:bc:d4:f9:48:29:72:6d:2c:34:03:5b:
                    08:e2:16:5e:e1:6a:d6:76:17:a4:a6:68:77:ef:3f:
                    ed:e1:80:e6:5b:9b:26:4b:03:11:c2:31:68:57:62:
                    03:02:2e:c5:97:cd:42:ab:39:31:64:ae:c8:0e:51:
                    53:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:3A:AF:3D:03:A2:2B:33:C6:64:55:05:DE:81:D2:29:5F:F5:3A:08
            X509v3 Authority Key Identifier:
                keyid:47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/_TqvPQOiKzPGZFUF3oHSKV_1Ogg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:d3:49:c9:56:61:64:54:40:39:59:f8:ac:ee:2c:80:94:d8:
         86:c7:8d:df:02:6b:30:a5:31:af:e1:de:6f:1b:f6:0f:f3:85:
         c4:5b:cf:10:ca:53:f7:6b:a5:88:35:e1:54:d0:98:d7:75:83:
         fd:59:b4:22:7e:82:81:6e:8f:4d:e6:87:0c:3a:a5:b0:6f:8f:
         c7:a8:bc:75:b1:93:4e:d8:bf:c4:bf:35:d9:72:48:dd:74:a0:
         96:b6:7b:40:e4:01:ed:ef:b0:a2:a5:fd:5e:d1:38:1f:a0:50:
         98:fa:f6:02:d2:d0:a3:a3:d2:f2:20:38:34:aa:41:af:d0:2f:
         54:34:71:53:2d:cc:f7:e1:76:cb:7a:ba:0d:b6:64:94:bf:25:
         75:6a:b6:24:c3:1b:00:91:45:1f:fd:dd:c6:ff:04:e8:e8:ab:
         ab:c1:6b:3a:17:4b:fe:e9:ec:68:e9:db:82:5d:28:a4:eb:d8:
         ec:61:5e:c2:8c:9b:aa:b4:09:54:f1:e7:ff:9a:cd:39:f5:a8:
         96:73:bd:1b:61:62:f0:55:a8:e0:c2:cf:e3:7e:ae:6e:30:b0:
         3f:03:26:05:03:6a:be:70:a5:10:7c:db:9d:e9:ea:cf:62:9a:
         c9:06:d2:dd:83:a1:09:57:0c:f6:c9:ba:dd:b6:5f:ee:1e:e2:
         46:72:9c:32
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBJjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0N0Ey
NzE4OEUyMTRDMzk2MzA0NDk3REI1NzFCMjNGOTNFQkZCREM2MB4XDTIyMDMwMTAx
MjgwNFoXDTIzMDIxNTAxMzAwM1owMzExMC8GA1UEAxMoRkQzQUFGM0QwM0EyMkIz
M0M2NjQ1NTA1REU4MUQyMjk1RkY1M0EwODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKzkTAyyWl6pV9ZjuFJWKD9O7b7Hp2O8+TD9ZXuVgibDLY6AZrgz
BVV1BGk1jjg2yajD9n9Sh4uXAzqEOwQDGXwsuy6xy5wfRCcc367TFIiGvr6d7L5O
C/eBZBJ8kdfpaqzoJE4lVoJ0CqaDEmyLToUq2EclkK0plxpq4z3fEa8geOnPYmmW
8og2msFi+MZtOHNslwfbNFywgJF6d+Zn73YyIIT/YeXQWzweNk6frgMCosUbciq6
Yn1tO1ytRv7tGP/2R1dr17zU+Ugpcm0sNANbCOIWXuFq1nYXpKZod+8/7eGA5lub
JksDEcIxaFdiAwIuxZfNQqs5MWSuyA5RU9cCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBT9Oq89A6IrM8ZkVQXegdIpX/U6CDAfBgNVHSMEGDAWgBRHonGI4hTDljBEl9tX
GyP5Pr+9xjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDY1L1I2SnhpT0lVdzVZd1JKZmJWeHNqLVQ2X3ZjWS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1I2SnhpT0lVdzVZd1JKZmJWeHNqLVQ2
X3ZjWS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80NjUvX1RxdlBRT2lLelBHWkZVRjNvSFNLVl8xT2dnLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmcNPDANBgkqhkiG9w0BAQsFAAOCAQEA
LdNJyVZhZFRAOVn4rO4sgJTYhseN3wJrMKUxr+Hebxv2D/OFxFvPEMpT92uliDXh
VNCY13WD/Vm0In6CgW6PTeaHDDqlsG+Px6i8dbGTTti/xL812XJI3XSglrZ7QOQB
7e+woqX9XtE4H6BQmPr2AtLQo6PS8iA4NKpBr9AvVDRxUy3M9+F2y3q6DbZklL8l
dWq2JMMbAJFFH/3dxv8E6Oirq8FrOhdL/unsaOnbgl0opOvY7GFewoybqrQJVPHn
/5rNOfWolnO9G2Fi8FWo4MLP436ubjCwPwMmBQNqvnClEHzbnenqz2KayQbS3YOh
CVcM9sm63bZf7h7iRnKcMg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:16 2023 by rpki-client on console-ams.rpki-client.org