Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/HWIW5SV3LkSo1oz7EQJobILc_eE.roa
File:                     HWIW5SV3LkSo1oz7EQJobILc_eE.roa (raw, json)
Hash identifier:          T2DAS4gnVUj4qQd4iu4xy2nYwrdFgUti5ic4c0bxx6M=
Subject key identifier:   1D:62:16:E5:25:77:2E:44:A8:D6:8C:FB:11:02:68:6C:82:DC:FD:E1
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0437
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/HWIW5SV3LkSo1oz7EQJobILc_eE.roa
Signing time:             Thu 13 Apr 2023 09:55:27 +0000
ROA not before:           Thu 13 Apr 2023 09:55:27 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        59.84.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1079 (0x437)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:55:27 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=1D6216E525772E44A8D68CFB1102686C82DCFDE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:15:fa:71:db:b8:d7:3c:5b:75:01:37:e4:05:
                    1c:4b:58:79:c3:11:c3:ef:f5:91:0b:57:e7:18:16:
                    0e:04:48:76:17:cb:4c:5f:b1:2f:50:3a:c8:65:f5:
                    d4:fb:59:94:1e:07:a6:4b:2f:01:12:99:ef:ae:0d:
                    de:af:c7:6e:0a:5d:47:85:86:89:f7:e9:c3:52:95:
                    0e:18:65:98:d9:68:b3:bc:b2:b5:8e:e1:31:20:1e:
                    f8:db:5d:db:c1:b3:29:82:05:37:99:d0:e1:10:09:
                    24:d4:6f:02:68:aa:59:05:98:88:43:78:92:fb:87:
                    97:11:2b:56:ed:b0:93:d7:c6:b7:53:fe:e4:68:c2:
                    65:5d:b9:1c:1b:ba:c8:50:ba:71:1a:68:27:09:8d:
                    62:14:cc:7b:d1:72:fa:1d:52:ab:c7:01:90:35:88:
                    71:ea:29:39:19:ac:bd:02:c7:82:8a:37:c1:4b:b5:
                    a7:ed:31:45:d9:ae:61:0d:42:1f:14:36:32:b2:50:
                    b7:fb:04:b2:0f:7f:41:48:9b:85:b7:49:1f:be:6d:
                    f7:f9:d2:a7:fd:23:f2:ab:a7:ad:70:8c:23:aa:78:
                    5b:87:11:19:cd:64:36:fe:3b:97:7b:c0:27:f0:b6:
                    f9:ba:7f:84:bb:01:a8:ce:71:25:d2:bd:be:5b:95:
                    15:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:62:16:E5:25:77:2E:44:A8:D6:8C:FB:11:02:68:6C:82:DC:FD:E1
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/HWIW5SV3LkSo1oz7EQJobILc_eE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.84.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ac:a7:60:0b:c6:74:69:56:14:a9:19:cb:4a:65:1b:63:62:39:
         8e:d9:63:5c:6c:70:dc:6e:08:6d:6a:5a:5a:62:db:6d:61:54:
         8a:94:c0:f3:15:20:45:71:c6:b0:53:ff:85:25:32:35:1b:c0:
         10:bc:55:3e:fc:50:e1:55:57:fb:1f:fe:53:f2:7a:f0:c9:a8:
         e0:9b:5f:92:08:3b:47:3b:c7:18:1a:fa:26:bf:d9:55:4d:48:
         9e:d5:da:94:83:69:7f:1e:85:bb:d8:eb:90:54:26:52:aa:b8:
         95:b4:f9:12:dd:6b:3b:ff:02:a1:49:5e:8e:be:d4:b4:27:4f:
         39:a1:c7:02:1f:c0:99:64:10:dc:eb:ca:34:6e:3c:2b:ee:5c:
         25:13:fe:6d:85:7f:8c:aa:4c:3f:81:b2:e3:67:25:c9:0c:94:
         1e:7b:50:a7:ae:4c:89:95:cc:32:a6:8f:36:81:5e:4b:c3:bc:
         41:48:ab:13:0b:bf:f3:99:3e:50:03:ac:d2:22:c0:9d:1e:4d:
         22:ca:8b:ad:90:ee:45:8d:8f:1a:93:29:a5:28:ad:fc:20:ea:
         07:12:23:ae:cd:ee:4f:fc:c2:b3:26:5a:2b:aa:b8:90:3c:a4:
         07:23:58:06:42:df:81:1f:07:45:7d:fc:bc:64:b5:d6:76:73:
         7d:26:2f:10
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICBDcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yMzA0MTMw
OTU1MjdaFw0yNDAzMTQwMTMwMDJaMDMxMTAvBgNVBAMTKDFENjIxNkU1MjU3NzJF
NDRBOEQ2OENGQjExMDI2ODZDODJEQ0ZERTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+Ffpx27jXPFt1ATfkBRxLWHnDEcPv9ZELV+cYFg4ESHYXy0xf
sS9QOshl9dT7WZQeB6ZLLwESme+uDd6vx24KXUeFhon36cNSlQ4YZZjZaLO8srWO
4TEgHvjbXdvBsymCBTeZ0OEQCSTUbwJoqlkFmIhDeJL7h5cRK1btsJPXxrdT/uRo
wmVduRwbushQunEaaCcJjWIUzHvRcvodUqvHAZA1iHHqKTkZrL0Cx4KKN8FLtaft
MUXZrmENQh8UNjKyULf7BLIPf0FIm4W3SR++bff50qf9I/Krp61wjCOqeFuHERnN
ZDb+O5d7wCfwtvm6f4S7AajOcSXSvb5blRV1AgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUHWIW5SV3LkSo1oz7EQJobILc/eEwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTQ1L0hXSVc1U1YzTGtTbzFvejdFUUpvYklMY19lRS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA7VDANBgkqhkiG9w0BAQsFAAOCAQEArKdgC8Z0aVYUqRnLSmUbY2I5jtlj
XGxw3G4IbWpaWmLbbWFUipTA8xUgRXHGsFP/hSUyNRvAELxVPvxQ4VVX+x/+U/J6
8Mmo4Jtfkgg7RzvHGBr6Jr/ZVU1IntXalINpfx6Fu9jrkFQmUqq4lbT5Et1rO/8C
oUlejr7UtCdPOaHHAh/AmWQQ3OvKNG48K+5cJRP+bYV/jKpMP4Gy42clyQyUHntQ
p65MiZXMMqaPNoFeS8O8QUirEwu/85k+UAOs0iLAnR5NIsqLrZDuRY2PGpMppSit
/CDqBxIjrs3uT/zCsyZaK6q4kDykByNYBkLfgR8HRX38vGS11nZzfSYvEA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org