Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/IuYOAP5u_UOt3ZZ3Ica5EGqINZ4.roa
File:                     IuYOAP5u_UOt3ZZ3Ica5EGqINZ4.roa (raw, json)
Hash identifier:          j2VBCOOsYPamNaC3HmENd4k4BsCSH3yfq+pZignPOLE=
Subject key identifier:   22:E6:0E:00:FE:6E:FD:43:AD:DD:96:77:21:C6:B9:10:6A:88:35:9E
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       040F
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/IuYOAP5u_UOt3ZZ3Ica5EGqINZ4.roa
Signing time:             Thu 13 Apr 2023 09:52:20 +0000
ROA not before:           Thu 13 Apr 2023 09:52:20 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        220.216.56.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1039 (0x40f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:52:20 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=22E60E00FE6EFD43ADDD967721C6B9106A88359E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:40:4c:f3:e2:7c:61:6e:12:c5:0c:66:ac:8a:
                    93:b9:88:fa:7d:62:b5:81:3c:cf:bc:b9:a8:d0:da:
                    25:96:aa:0f:5b:df:4f:1f:64:0e:1f:c0:fb:24:60:
                    b3:ef:f9:4b:17:a0:b0:97:69:6b:0b:99:5b:f9:1c:
                    23:e1:e5:8f:28:73:08:59:bf:55:48:e7:b8:02:e7:
                    b8:f6:dd:7d:c1:2d:bf:04:36:42:99:44:2b:e4:a7:
                    ec:03:8b:47:4a:d9:c1:f6:e3:3e:79:ea:05:37:7e:
                    c0:c8:37:53:e6:6e:c8:44:62:0a:d1:71:63:63:8d:
                    49:ef:5f:af:13:6e:40:29:96:cd:20:ab:03:49:e2:
                    47:9a:3a:28:f9:79:77:32:ca:d4:e6:54:14:1c:76:
                    bb:f6:e7:5f:55:3b:67:6d:10:a7:23:c5:d2:54:1a:
                    2e:9b:ce:82:84:08:e6:54:9c:1f:4d:47:78:69:e3:
                    33:08:d2:c6:5b:46:e2:cd:71:8e:c4:21:d4:cd:dc:
                    11:cf:00:83:fc:7a:ae:95:5e:ab:d6:e7:19:97:4b:
                    7f:e3:86:1d:e8:e5:b7:73:fa:9e:32:45:84:2a:ff:
                    bb:cc:fc:2c:7b:b0:a1:71:8c:3f:27:20:7d:76:af:
                    5a:c8:63:7a:0a:6e:49:42:ee:13:99:a7:ae:de:1f:
                    6f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E6:0E:00:FE:6E:FD:43:AD:DD:96:77:21:C6:B9:10:6A:88:35:9E
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/IuYOAP5u_UOt3ZZ3Ica5EGqINZ4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.216.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         cb:2d:10:e2:da:29:9f:3a:76:f9:43:0d:f8:16:4e:80:a7:7e:
         d3:1d:b6:c2:44:05:9a:63:f2:1b:70:c7:a1:00:2d:76:5e:c1:
         c4:94:7e:72:eb:d2:82:f4:f8:95:fa:8f:44:3e:1d:db:b3:da:
         93:d7:57:ff:03:60:a0:9f:16:5d:b7:28:7a:2d:b8:60:6c:56:
         a7:b5:96:1c:5f:4c:85:bc:9a:1e:89:95:cc:00:d9:fa:f5:61:
         c1:bf:0d:17:a0:1c:0c:28:e5:fc:81:af:c0:9e:ce:e8:d0:b7:
         7e:b5:2e:0d:de:31:d0:7b:02:49:67:88:cd:c9:91:51:39:e0:
         e5:67:9c:b2:33:1d:a7:51:ad:44:b6:3c:32:d7:c1:f1:dd:de:
         ac:39:ba:e2:be:d2:23:23:71:88:60:43:24:4c:c1:d4:2a:32:
         3b:15:39:3f:8e:3c:9f:a7:1d:3b:75:4a:76:30:c9:31:eb:d6:
         76:c0:7c:36:be:23:96:3a:df:1a:e6:24:aa:3e:eb:33:2c:fa:
         26:84:6d:44:67:87:54:bd:0f:a0:bc:9a:ba:1e:ac:24:67:71:
         f5:b7:ba:1d:38:84:16:67:c0:7d:0a:c4:dd:92:19:b3:f6:95:
         a1:3b:f6:6e:8a:64:c5:f9:69:f6:81:74:17:4f:47:b1:14:fe:
         6d:aa:ee:ee
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBA8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yMzA0MTMw
OTUyMjBaFw0yNDAzMTQwMTMwMDJaMDMxMTAvBgNVBAMTKDIyRTYwRTAwRkU2RUZE
NDNBREREOTY3NzIxQzZCOTEwNkE4ODM1OUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvQEzz4nxhbhLFDGasipO5iPp9YrWBPM+8uajQ2iWWqg9b308f
ZA4fwPskYLPv+UsXoLCXaWsLmVv5HCPh5Y8ocwhZv1VI57gC57j23X3BLb8ENkKZ
RCvkp+wDi0dK2cH24z556gU3fsDIN1PmbshEYgrRcWNjjUnvX68TbkApls0gqwNJ
4keaOij5eXcyytTmVBQcdrv2519VO2dtEKcjxdJUGi6bzoKECOZUnB9NR3hp4zMI
0sZbRuLNcY7EIdTN3BHPAIP8eq6VXqvW5xmXS3/jhh3o5bdz+p4yRYQq/7vM/Cx7
sKFxjD8nIH12r1rIY3oKbklC7hOZp67eH2+fAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUIuYOAP5u/UOt3ZZ3Ica5EGqINZ4wHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTQ1L0l1WU9BUDV1X1VPdDNaWjNJY2E1RUdxSU5aNC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAPc2DgwDQYJKoZIhvcNAQELBQADggEBAMstEOLaKZ86dvlDDfgWToCnftMd
tsJEBZpj8htwx6EALXZewcSUfnLr0oL0+JX6j0Q+Hduz2pPXV/8DYKCfFl23KHot
uGBsVqe1lhxfTIW8mh6JlcwA2fr1YcG/DRegHAwo5fyBr8CezujQt361Lg3eMdB7
AklniM3JkVE54OVnnLIzHadRrUS2PDLXwfHd3qw5uuK+0iMjcYhgQyRMwdQqMjsV
OT+OPJ+nHTt1SnYwyTHr1nbAfDa+I5Y63xrmJKo+6zMs+iaEbURnh1S9D6C8mroe
rCRncfW3uh04hBZnwH0KxN2SGbP2laE79m6KZMX5afaBdBdPR7EU/m2q7u4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org