Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/fNnh9iy_QzRG4xDIinhM5SVjAFs.roa
File:                     fNnh9iy_QzRG4xDIinhM5SVjAFs.roa (raw, json)
Hash identifier:          eFvbxrZr6q4M1YOy+P9pCkoqzkyqZxpe9qD+46THkJs=
Subject key identifier:   7C:D9:E1:F6:2C:BF:43:34:46:E3:10:C8:8A:78:4C:E5:25:63:00:5B
Certificate issuer:       /CN=D0F562FF36F711A3EDF99FC81DB54ED36634D8B1
Certificate serial:       19
Authority key identifier: D0:F5:62:FF:36:F7:11:A3:ED:F9:9F:C8:1D:B5:4E:D3:66:34:D8:B1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0PVi_zb3EaPt-Z_IHbVO02Y02LE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/fNnh9iy_QzRG4xDIinhM5SVjAFs.roa
Signing time:             Fri 01 Oct 2021 01:28:26 +0000
ROA not before:           Fri 01 Oct 2021 01:28:26 +0000
ROA not after:            Thu 15 Sep 2022 01:30:02 +0000
asID:                     55900
IP address blocks:        198.144.128.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0F562FF36F711A3EDF99FC81DB54ED36634D8B1
        Validity
            Not Before: Oct  1 01:28:26 2021 GMT
            Not After : Sep 15 01:30:02 2022 GMT
        Subject: CN=7CD9E1F62CBF433446E310C88A784CE52563005B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:03:e8:82:e3:a5:55:99:3f:96:2c:4e:cf:f0:
                    6d:d8:d7:38:ac:f6:35:58:77:35:88:08:c1:cc:c8:
                    f0:ff:0e:84:57:46:05:c7:0a:b4:46:5b:ba:0f:79:
                    02:66:c6:f3:46:a9:e2:79:93:c9:7b:f9:f5:4e:5b:
                    d1:e2:f4:07:13:3a:a4:ea:6b:d2:77:84:ad:b3:66:
                    64:c6:e0:d9:8d:de:55:2b:cf:5d:c8:cc:6f:24:30:
                    60:39:82:60:e3:2f:c0:58:f0:1d:b6:d6:86:5b:86:
                    96:32:5c:61:ae:1f:6b:6a:0e:1a:93:6c:21:b3:08:
                    dd:72:cb:60:ca:bf:37:69:0d:28:e1:85:e8:7b:e4:
                    5d:dd:09:7a:93:79:86:2a:77:15:8f:4d:a7:41:33:
                    80:1f:7d:74:8d:d6:af:06:39:95:1f:b4:a9:a5:b6:
                    13:a3:24:3e:ad:f4:8f:34:cc:6f:b0:6c:07:c1:38:
                    ab:38:74:b2:92:91:05:ad:ab:9b:bb:08:dc:73:14:
                    60:c1:27:17:2a:9a:ea:5f:f1:20:f7:3b:9d:50:31:
                    e6:e8:2c:b6:01:47:9d:ca:b2:18:8b:37:7b:59:6f:
                    12:e9:71:09:e5:79:5b:03:01:56:d0:0e:13:1a:7a:
                    9b:9c:dd:8a:0f:4d:7b:6b:88:17:ed:a1:b8:bf:f1:
                    9c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D9:E1:F6:2C:BF:43:34:46:E3:10:C8:8A:78:4C:E5:25:63:00:5B
            X509v3 Authority Key Identifier:
                keyid:D0:F5:62:FF:36:F7:11:A3:ED:F9:9F:C8:1D:B5:4E:D3:66:34:D8:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/0PVi_zb3EaPt-Z_IHbVO02Y02LE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0PVi_zb3EaPt-Z_IHbVO02Y02LE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/fNnh9iy_QzRG4xDIinhM5SVjAFs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.144.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9b:89:76:d0:08:b9:d8:08:df:79:ca:13:73:da:60:b3:d1:f8:
         cb:98:59:9c:a0:87:0e:9f:d8:8a:e0:3a:db:76:1c:30:2c:1f:
         76:67:65:8d:8a:f5:98:f8:bb:99:47:dd:3a:22:07:56:30:48:
         ce:d5:6e:90:9c:03:80:01:26:89:85:5c:19:fb:1d:29:6c:3f:
         2f:d7:f0:bc:7d:81:14:bc:91:9e:bb:7e:6a:1d:fb:6b:60:2a:
         0c:2a:23:1d:17:1e:1d:43:7b:42:1d:b4:8a:68:11:1a:b1:ea:
         9d:e7:7c:d8:c1:1b:5a:0e:90:91:15:b3:89:4f:bf:2a:57:58:
         9a:64:59:79:db:d4:f6:ac:cd:d1:b6:6c:01:88:49:18:de:b9:
         48:e8:1e:45:3c:ad:2a:5d:ff:b8:cc:e7:dd:ca:db:a8:b9:37:
         90:17:c5:47:7c:06:bf:be:e8:97:19:23:4a:dc:4b:69:bd:75:
         a5:15:c4:aa:50:0f:62:49:0f:e9:0a:cb:9e:71:04:5a:58:b2:
         b4:23:0b:98:e6:89:ff:6a:d4:3b:1b:b9:56:4d:56:3b:2a:82:
         59:27:47:86:a2:31:4e:14:f4:1b:12:4f:97:93:10:aa:23:f5:
         80:33:92:72:05:bf:7b:23:98:d0:b9:dc:a4:72:e8:bf:0e:bd:
         8b:82:f7:4f
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBGTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMEY1
NjJGRjM2RjcxMUEzRURGOTlGQzgxREI1NEVEMzY2MzREOEIxMB4XDTIxMTAwMTAx
MjgyNloXDTIyMDkxNTAxMzAwMlowMzExMC8GA1UEAxMoN0NEOUUxRjYyQ0JGNDMz
NDQ2RTMxMEM4OEE3ODRDRTUyNTYzMDA1QjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKMD6ILjpVWZP5YsTs/wbdjXOKz2NVh3NYgIwczI8P8OhFdGBccK
tEZbug95AmbG80ap4nmTyXv59U5b0eL0BxM6pOpr0neErbNmZMbg2Y3eVSvPXcjM
byQwYDmCYOMvwFjwHbbWhluGljJcYa4fa2oOGpNsIbMI3XLLYMq/N2kNKOGF6Hvk
Xd0JepN5hip3FY9Np0EzgB99dI3WrwY5lR+0qaW2E6MkPq30jzTMb7BsB8E4qzh0
spKRBa2rm7sI3HMUYMEnFyqa6l/xIPc7nVAx5ugstgFHncqyGIs3e1lvEulxCeV5
WwMBVtAOExp6m5zdig9Ne2uIF+2huL/xnOcCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBR82eH2LL9DNEbjEMiKeEzlJWMAWzAfBgNVHSMEGDAWgBTQ9WL/NvcRo+35n8gd
tU7TZjTYsTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTM5LzBQVmlfemIzRWFQdC1aX0lIYlZPMDJZMDJMRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBQVmlfemIzRWFQdC1aX0lIYlZPMDJZ
MDJMRS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC81MzkvZk5uaDlpeV9RelJHNHhESWluaE01U1ZqQUZzLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMaQgDANBgkqhkiG9w0BAQsFAAOCAQEA
m4l20Ai52AjfecoTc9pgs9H4y5hZnKCHDp/YiuA623YcMCwfdmdljYr1mPi7mUfd
OiIHVjBIztVukJwDgAEmiYVcGfsdKWw/L9fwvH2BFLyRnrt+ah37a2AqDCojHRce
HUN7Qh20imgRGrHqned82MEbWg6QkRWziU+/KldYmmRZedvU9qzN0bZsAYhJGN65
SOgeRTytKl3/uMzn3crbqLk3kBfFR3wGv77olxkjStxLab11pRXEqlAPYkkP6QrL
nnEEWliytCMLmOaJ/2rUOxu5Vk1WOyqCWSdHhqIxThT0GxJPl5MQqiP1gDOScgW/
eyOY0LncpHLovw69i4L3Tw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:10 2023 by rpki-client on console-fra.rpki-client.org