Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/6Hvfji--bteHgnHZ6a7iBLi5kC0.roa
File:                     6Hvfji--bteHgnHZ6a7iBLi5kC0.roa (raw, json)
Hash identifier:          HgHj/+sCWTK2RZ6N1t3ZbbWQASzG+6rblbkzGSfOVQ0=
Subject key identifier:   E8:7B:DF:8E:2F:BE:6E:D7:87:82:71:D9:E9:AE:E2:04:B8:B9:90:2D
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       03E7
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/6Hvfji--bteHgnHZ6a7iBLi5kC0.roa
Signing time:             Sun 01 May 2022 01:33:06 +0000
ROA not before:           Sun 01 May 2022 01:33:06 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        219.96.60.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 999 (0x3e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:33:06 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=E87BDF8E2FBE6ED7878271D9E9AEE204B8B9902D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:da:ca:7b:fa:85:91:ee:18:b7:07:b5:b6:48:
                    d6:fb:25:e3:d3:d7:0c:a3:93:82:bb:8a:13:1b:14:
                    e3:81:c6:71:03:37:58:4e:7b:e6:32:1a:d9:8e:81:
                    76:93:89:6b:81:d5:a3:4d:2e:d6:90:fd:e1:27:27:
                    eb:3e:83:29:ad:59:bc:ee:b1:2b:c7:76:d1:5c:53:
                    1c:ce:98:d5:9a:1d:6b:8a:80:22:dc:6f:cb:30:d2:
                    9e:8b:b8:f6:54:69:ea:aa:a6:3e:e6:a7:b7:79:41:
                    97:e3:ea:dc:e7:28:56:19:8b:1f:b8:27:07:df:3a:
                    e1:fa:57:94:3b:f8:3c:d5:dd:a4:d6:81:0c:bf:e1:
                    ff:7f:ee:fc:3b:e0:14:b1:cc:26:82:07:f6:38:6a:
                    04:4b:50:16:03:66:dc:a6:1e:f1:10:cb:af:90:13:
                    07:ff:0c:f0:7c:5f:b4:87:ba:ee:e7:83:8c:fa:74:
                    fc:f1:b5:1e:16:3f:b7:cc:8b:47:d2:e8:71:42:39:
                    09:46:62:b8:61:1c:aa:99:0c:e2:49:61:1b:70:09:
                    4d:e1:6e:72:ba:db:ab:4b:d4:63:6d:14:f0:38:e5:
                    86:71:82:72:cc:f9:85:91:58:74:7b:74:2b:7d:ad:
                    76:52:69:da:e2:a2:d5:ff:e2:6e:f8:c9:8f:ed:c5:
                    ab:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:7B:DF:8E:2F:BE:6E:D7:87:82:71:D9:E9:AE:E2:04:B8:B9:90:2D
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/6Hvfji--bteHgnHZ6a7iBLi5kC0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.96.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:b0:5d:7c:c4:d1:8d:69:26:6c:f7:33:e9:16:57:a5:d9:bc:
         c0:ce:8e:e1:31:f3:9b:2a:12:62:8c:df:d5:e1:fa:b8:95:4c:
         86:de:03:03:92:e9:62:79:6d:ca:e6:5d:e4:81:88:b5:e2:a4:
         e8:fa:34:25:07:be:61:60:49:2e:43:ce:18:48:65:c4:20:55:
         ad:8c:45:d0:8f:b3:dc:5f:c2:1c:c6:e8:53:2f:18:bc:d0:ea:
         c2:a4:86:e4:f5:ca:64:b5:0a:f2:b9:62:1c:48:da:70:6d:28:
         1f:3c:81:09:22:9d:0e:9c:84:1a:91:0a:1a:81:53:99:79:de:
         ae:ab:6a:59:a7:7a:96:16:0e:a5:f4:ff:3c:8c:d4:94:bc:ed:
         8c:cd:85:b6:b4:0f:3e:88:b7:6d:eb:94:8f:78:be:2f:51:1d:
         6c:4e:a7:fd:a9:57:ee:ae:5d:c2:e8:50:8c:5b:7c:c0:a7:a8:
         56:57:81:f5:76:74:02:3b:50:e4:20:82:78:60:36:52:c8:47:
         fb:84:20:c0:dc:41:ff:87:85:00:f8:a1:ae:0a:6b:06:d5:5c:
         38:b5:b5:0a:a4:28:64:e3:ac:7e:d5:31:8b:87:0e:9b:2e:20:
         4e:02:a3:c9:f8:ea:a5:c9:54:e3:59:b8:5d:ad:4f:61:20:92:
         41:07:09:e7
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA+cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yMjA1MDEw
MTMzMDZaFw0yMzA0MjcwOTUyMzRaMDMxMTAvBgNVBAMTKEU4N0JERjhFMkZCRTZF
RDc4NzgyNzFEOUU5QUVFMjA0QjhCOTkwMkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCn2sp7+oWR7hi3B7W2SNb7JePT1wyjk4K7ihMbFOOBxnEDN1hO
e+YyGtmOgXaTiWuB1aNNLtaQ/eEnJ+s+gymtWbzusSvHdtFcUxzOmNWaHWuKgCLc
b8sw0p6LuPZUaeqqpj7mp7d5QZfj6tznKFYZix+4JwffOuH6V5Q7+DzV3aTWgQy/
4f9/7vw74BSxzCaCB/Y4agRLUBYDZtymHvEQy6+QEwf/DPB8X7SHuu7ng4z6dPzx
tR4WP7fMi0fS6HFCOQlGYrhhHKqZDOJJYRtwCU3hbnK626tL1GNtFPA45YZxgnLM
+YWRWHR7dCt9rXZSadriotX/4m74yY/txas5AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU6Hvfji++bteHgnHZ6a7iBLi5kC0wHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTQ1LzZIdmZqaS0tYnRlSGduSFo2YTdpQkxpNWtDMC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBALbYDwwDQYJKoZIhvcNAQELBQADggEBALqwXXzE0Y1pJmz3M+kWV6XZvMDO
juEx85sqEmKM39Xh+riVTIbeAwOS6WJ5bcrmXeSBiLXipOj6NCUHvmFgSS5DzhhI
ZcQgVa2MRdCPs9xfwhzG6FMvGLzQ6sKkhuT1ymS1CvK5YhxI2nBtKB88gQkinQ6c
hBqRChqBU5l53q6ralmnepYWDqX0/zyM1JS87YzNhba0Dz6It23rlI94vi9RHWxO
p/2pV+6uXcLoUIxbfMCnqFZXgfV2dAI7UOQggnhgNlLIR/uEIMDcQf+HhQD4oa4K
awbVXDi1tQqkKGTjrH7VMYuHDpsuIE4Co8n46qXJVONZuF2tT2EgkkEHCec=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org