Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/N8qmogoUgJVzoefoB7GNXkKUWXE.roa
File:                     N8qmogoUgJVzoefoB7GNXkKUWXE.roa (raw, json)
Hash identifier:          YDt/gJccNEgKjvADxwYmpYm73Je+HUKkULpnr0WLOjY=
Subject key identifier:   37:CA:A6:A2:0A:14:80:95:73:A1:E7:E8:07:B1:8D:5E:42:94:59:71
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       09
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/N8qmogoUgJVzoefoB7GNXkKUWXE.roa
Signing time:             Tue 09 May 2023 08:16:38 +0000
ROA not before:           Tue 09 May 2023 08:16:38 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     4685
IP address blocks:        116.91.224.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: May  9 08:16:38 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=37CAA6A20A14809573A1E7E807B18D5E42945971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0d:6a:51:21:17:ce:25:35:56:f6:88:2f:f7:
                    33:35:d1:4b:d2:18:1f:e1:cd:f8:8e:d1:c9:c1:81:
                    ee:fe:6b:a6:e1:b5:af:87:66:86:a9:80:00:cb:da:
                    cd:02:79:dc:c8:9e:09:30:b2:93:67:af:8c:ab:5f:
                    7d:7e:21:1f:4a:98:92:67:ca:33:88:e2:46:f3:bd:
                    48:05:c6:dc:7a:73:b4:5f:17:bf:88:c0:20:78:1f:
                    d1:a6:b9:3d:fc:e0:f4:7f:b5:de:5a:10:f0:77:11:
                    0f:c8:22:ac:75:0a:94:db:de:b8:4b:63:3a:7e:c3:
                    c4:59:5e:af:7e:7c:66:4c:24:59:25:88:46:cf:31:
                    0b:00:24:f0:27:e1:5e:28:7c:e0:bf:fc:4d:2c:00:
                    62:69:f1:61:53:4c:af:4a:6b:21:7c:d7:73:4d:a8:
                    b9:63:a4:30:42:36:c5:c8:f5:a2:45:b0:7e:55:7f:
                    c5:79:dd:46:b0:e7:d8:2f:60:b4:84:21:8a:1a:8a:
                    81:39:d2:04:a6:73:a9:b2:88:9f:94:53:6b:ff:77:
                    f4:27:ef:9d:d4:2c:b7:e9:c7:f9:be:6f:74:ae:ce:
                    f4:59:2c:50:0f:b9:40:84:4a:b6:29:60:e0:2b:73:
                    03:45:73:6d:9a:6c:ad:b6:42:ea:73:c9:6c:0f:3d:
                    82:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:CA:A6:A2:0A:14:80:95:73:A1:E7:E8:07:B1:8D:5E:42:94:59:71
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/N8qmogoUgJVzoefoB7GNXkKUWXE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.91.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         88:7f:7c:83:29:90:a0:1b:94:ea:9b:96:22:7b:1e:59:e4:05:
         53:8c:7b:20:e7:14:cc:7f:26:6b:0a:28:06:65:0d:0c:a0:69:
         83:f4:62:0f:07:93:c8:cf:56:73:21:54:12:9a:20:dd:e5:65:
         6f:69:1d:66:36:b4:c8:1f:7b:b0:94:bc:29:ae:f9:2b:91:06:
         71:28:d5:25:9a:9f:12:f4:54:dd:f0:a3:9c:43:25:d7:95:a2:
         53:1c:2f:dd:40:f0:1b:aa:81:0d:76:0b:f8:10:ce:36:da:dc:
         35:72:5f:ab:ba:e9:d4:d5:42:18:49:d8:5e:56:a7:26:77:79:
         04:82:f6:16:56:f9:11:bd:c3:70:3e:23:3f:0b:95:b3:45:a1:
         2d:b8:43:bd:22:4e:14:6e:04:58:1e:2e:75:d7:f4:ed:d2:9e:
         48:07:ba:08:d6:a0:e9:63:88:f8:dc:9b:60:66:f9:d7:b8:18:
         ad:d3:b2:5c:50:64:f7:85:2c:db:e1:bf:ac:2e:7b:22:17:ed:
         6b:1e:31:dc:48:47:87:a6:d0:42:95:5f:cd:55:58:78:3e:d8:
         d9:81:d9:2e:79:2c:00:d9:ac:8c:9b:08:7d:5f:4e:36:4d:b7:
         f2:86:c7:6b:3c:21:ac:73:d2:b3:33:f2:f9:29:b5:73:72:a4:
         e7:7d:89:b1
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIBCTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxQkUz
QUIwRjhEQjI2NUFCQjIyODdFNzUxNTFFN0Y1QTkzQjJDNzM2MB4XDTIzMDUwOTA4
MTYzOFoXDTI0MDQxNDAxMzAwMlowMzExMC8GA1UEAxMoMzdDQUE2QTIwQTE0ODA5
NTczQTFFN0U4MDdCMThENUU0Mjk0NTk3MTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALsNalEhF84lNVb2iC/3MzXRS9IYH+HN+I7RycGB7v5rpuG1r4dm
hqmAAMvazQJ53MieCTCyk2evjKtffX4hH0qYkmfKM4jiRvO9SAXG3HpztF8Xv4jA
IHgf0aa5Pfzg9H+13loQ8HcRD8girHUKlNveuEtjOn7DxFler358ZkwkWSWIRs8x
CwAk8CfhXih84L/8TSwAYmnxYVNMr0prIXzXc02ouWOkMEI2xcj1okWwflV/xXnd
RrDn2C9gtIQhihqKgTnSBKZzqbKIn5RTa/939CfvndQst+nH+b5vdK7O9FksUA+5
QIRKtilg4CtzA0VzbZpsrbZC6nPJbA89gksCAwEAAaOCAiIwggIeMB0GA1UdDgQW
BBQ3yqaiChSAlXOh5+gHsY1eQpRZcTAfBgNVHSMEGDAWgBQb46sPjbJlq7IofnUV
Hn9ak7LHNjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTAvRy1PckQ0MnlaYXV5S0g1MUZSNV9XcE95eHpZLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRy1PckQ0MnlaYXV5S0g1MUZSNV9XcE95
eHpZLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzUwL044cW1vZ29VZ0pWem9lZm9CN0dOWGtLVVdYRS5yb2EwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAV0W+AwDQYJKoZIhvcNAQELBQADggEBAIh/fIMpkKAblOqbliJ7HlnkBVOMeyDn
FMx/JmsKKAZlDQygaYP0Yg8Hk8jPVnMhVBKaIN3lZW9pHWY2tMgfe7CUvCmu+SuR
BnEo1SWanxL0VN3wo5xDJdeVolMcL91A8BuqgQ12C/gQzjba3DVyX6u66dTVQhhJ
2F5WpyZ3eQSC9hZW+RG9w3A+Iz8LlbNFoS24Q70iThRuBFgeLnXX9O3SnkgHugjW
oOljiPjcm2Bm+de4GK3TslxQZPeFLNvhv6wueyIX7WseMdxIR4em0EKVX81VWHg+
2NmB2S55LADZrIybCH1fTjZNt/KGx2s8Iaxz0rMz8vkptXNypOd9ibE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org