Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/AjoilIbtQz69T_8PTtIWzdy7fTI.roa
File:                     AjoilIbtQz69T_8PTtIWzdy7fTI.roa (raw, json)
Hash identifier:          nZL52ZvZ64+/RzAlgTWoDpPUv2clxYNudUc4gct8H0s=
Subject key identifier:   02:3A:22:94:86:ED:43:3E:BD:4F:FF:0F:4E:D2:16:CD:DC:BB:7D:32
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       03FB
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/AjoilIbtQz69T_8PTtIWzdy7fTI.roa
Signing time:             Tue 01 Nov 2022 07:05:20 +0000
ROA not before:           Tue 01 Nov 2022 07:05:20 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     10010
IP address blocks:        133.186.32.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1019 (0x3fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Nov  1 07:05:20 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=023A229486ED433EBD4FFF0F4ED216CDDCBB7D32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cf:17:14:6d:97:3a:8e:8d:96:28:0b:f6:f8:
                    6a:e7:82:75:eb:4e:a9:91:7d:b4:88:c6:f6:c6:4a:
                    ac:ef:8c:fc:95:d0:88:c5:3b:11:4a:23:fa:71:0c:
                    fa:f4:e7:ff:eb:c2:a5:fe:1e:72:c1:7b:ab:3b:9d:
                    7d:1c:2c:a7:b4:e7:67:a6:2b:4f:c8:a9:45:88:eb:
                    ba:16:3b:af:64:2f:17:a3:b4:96:6b:80:f7:e7:79:
                    c1:11:0a:80:89:a0:53:81:f2:e2:d2:ee:e0:29:3c:
                    4c:e5:f6:a4:ae:ce:b2:10:1e:55:4f:d7:25:3a:7e:
                    58:26:00:a7:1c:ec:17:5c:5a:36:48:d0:75:73:e7:
                    e2:7a:93:a6:2c:1a:1a:60:0e:dd:86:f3:f5:3e:96:
                    e8:8b:41:23:b8:c1:c6:36:3a:3d:2e:c2:e2:7c:21:
                    60:31:51:cc:e0:85:74:86:42:1f:70:1a:a8:35:96:
                    d7:b8:71:c0:53:04:e2:48:db:50:a6:ae:9f:f8:40:
                    a5:66:be:65:b2:3c:70:a4:9c:ba:e5:3a:39:64:14:
                    af:1d:8b:7f:fd:5d:e7:5e:ec:8e:69:fb:50:53:24:
                    08:65:32:9d:b6:d2:93:f9:a7:6d:d4:bb:bc:1f:bb:
                    0f:6f:e3:04:92:a6:11:6e:64:86:2c:b2:d7:ee:e9:
                    55:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:3A:22:94:86:ED:43:3E:BD:4F:FF:0F:4E:D2:16:CD:DC:BB:7D:32
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/AjoilIbtQz69T_8PTtIWzdy7fTI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.186.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a4:a7:68:6d:b4:4c:4f:de:0b:c3:eb:c4:65:21:33:fd:9b:dd:
         4b:d3:f9:46:7b:cb:a5:b5:0b:b6:8e:93:a2:3b:5d:3b:9a:73:
         46:d9:fb:25:73:72:3f:3c:ec:e3:06:08:ac:09:fb:81:a1:25:
         12:09:f6:2f:db:57:4b:d5:3c:32:b7:98:81:0f:7a:83:98:97:
         9f:94:29:b6:58:ec:47:09:c2:91:92:11:36:b9:f7:4f:be:c3:
         9e:ef:1b:b7:27:d3:1d:2a:c4:a1:eb:85:ea:84:bc:b4:19:5d:
         d6:87:6d:91:8b:aa:30:d0:01:82:82:86:57:7b:fd:57:13:bc:
         be:ca:7e:f9:bc:69:ee:e6:06:c7:0f:e6:82:62:bf:b4:8c:b5:
         83:bf:d7:8a:1d:40:95:d0:89:9b:c6:fa:be:2c:14:d6:68:89:
         4d:e5:2a:a7:97:db:11:29:dd:9d:90:33:88:8a:06:f2:9f:b4:
         fb:33:13:6c:b3:6d:05:e7:f0:70:e5:d0:7f:da:27:56:b9:df:
         46:48:c5:51:63:b8:6c:19:4a:49:0b:02:d1:8a:94:ea:f8:57:
         3e:54:69:b2:1b:99:8d:db:ff:38:e5:c7:2e:59:33:af:26:20:
         4e:5d:4c:f8:3d:6a:d4:55:ec:14:dd:b1:b4:b8:a4:f1:84:96:
         83:64:2e:de
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA/swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yMjExMDEw
NzA1MjBaFw0yMzEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDAyM0EyMjk0ODZFRDQz
M0VCRDRGRkYwRjRFRDIxNkNERENCQjdEMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCdzxcUbZc6jo2WKAv2+GrngnXrTqmRfbSIxvbGSqzvjPyV0IjF
OxFKI/pxDPr05//rwqX+HnLBe6s7nX0cLKe052emK0/IqUWI67oWO69kLxejtJZr
gPfnecERCoCJoFOB8uLS7uApPEzl9qSuzrIQHlVP1yU6flgmAKcc7BdcWjZI0HVz
5+J6k6YsGhpgDt2G8/U+luiLQSO4wcY2Oj0uwuJ8IWAxUczghXSGQh9wGqg1lte4
ccBTBOJI21Cmrp/4QKVmvmWyPHCknLrlOjlkFK8di3/9Xede7I5p+1BTJAhlMp22
0pP5p23Uu7wfuw9v4wSSphFuZIYsstfu6VXLAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUAjoilIbtQz69T/8PTtIWzdy7fTIwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTQ1L0Fqb2lsSWJ0UXo2OVRfOFBUdElXemR5N2ZUSS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBASFuiAwDQYJKoZIhvcNAQELBQADggEBAKSnaG20TE/eC8PrxGUhM/2b3UvT
+UZ7y6W1C7aOk6I7XTuac0bZ+yVzcj887OMGCKwJ+4GhJRIJ9i/bV0vVPDK3mIEP
eoOYl5+UKbZY7EcJwpGSETa590++w57vG7cn0x0qxKHrheqEvLQZXdaHbZGLqjDQ
AYKChld7/VcTvL7Kfvm8ae7mBscP5oJiv7SMtYO/14odQJXQiZvG+r4sFNZoiU3l
KqeX2xEp3Z2QM4iKBvKftPszE2yzbQXn8HDl0H/aJ1a530ZIxVFjuGwZSkkLAtGK
lOr4Vz5UabIbmY3b/zjlxy5ZM68mIE5dTPg9atRV7BTdsbS4pPGEloNkLt4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org