Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/LcMpvDjpQPYvmr_x8v6eNgJX9RM.roa
File:                     LcMpvDjpQPYvmr_x8v6eNgJX9RM.roa (raw, json)
Hash identifier:          0cepdZEoPH9BmkyvOp3ga0RNf3g66SWwv4+SLtAl+Dg=
Subject key identifier:   2D:C3:29:BC:38:E9:40:F6:2F:9A:BF:F1:F2:FE:9E:36:02:57:F5:13
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       03B7
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/LcMpvDjpQPYvmr_x8v6eNgJX9RM.roa
Signing time:             Sun 01 May 2022 01:32:08 +0000
ROA not before:           Sun 01 May 2022 01:32:08 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        61.206.64.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 951 (0x3b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:32:08 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=2DC329BC38E940F62F9ABFF1F2FE9E360257F513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:57:81:07:06:17:7f:a0:ec:e9:87:8f:47:f0:
                    81:2a:3e:b8:be:8a:47:c9:40:62:4a:ab:01:6b:af:
                    1a:7e:24:b2:b0:25:46:e5:cf:f0:22:65:21:2f:14:
                    1c:21:29:9f:58:80:65:20:aa:50:b8:66:97:84:40:
                    f6:01:71:90:19:8c:5b:f6:77:a8:02:cf:be:f5:fe:
                    41:36:18:86:02:2c:c7:06:07:35:44:58:1f:ff:7c:
                    b0:6c:bc:22:9a:99:db:92:5a:34:f8:7a:20:7e:af:
                    35:66:24:94:14:ab:13:e3:b7:74:81:50:ac:8c:5d:
                    ae:89:2e:ac:ad:c4:85:f4:1e:6d:d5:ac:e0:3a:13:
                    21:d0:45:2e:f7:0a:ed:a8:51:e8:85:b1:d3:60:6e:
                    f1:e9:71:a1:05:b9:10:e3:40:c0:e5:77:ad:47:81:
                    96:22:a8:74:d9:0a:1a:31:86:39:94:aa:b7:fa:01:
                    f6:ab:e3:06:dd:b7:c3:5d:98:6a:4b:9f:2e:0f:86:
                    66:0f:3b:43:b9:60:d2:ff:50:82:41:a7:ac:f2:aa:
                    98:b3:d6:57:1f:a2:d5:a3:4b:4b:8d:87:1d:9f:2d:
                    b8:5f:08:31:d9:67:4c:08:78:76:fd:39:82:71:d9:
                    14:1d:b7:c7:d7:93:16:99:23:d3:51:7a:19:bb:30:
                    7d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C3:29:BC:38:E9:40:F6:2F:9A:BF:F1:F2:FE:9E:36:02:57:F5:13
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/LcMpvDjpQPYvmr_x8v6eNgJX9RM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.206.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         34:8c:f5:7e:99:ba:ef:80:a6:cc:d4:2c:d1:30:95:59:85:66:
         ec:ae:c4:76:db:e2:83:71:f1:09:cc:a8:5b:25:b2:bb:1f:b2:
         79:e8:6d:ba:74:6c:12:a6:ad:d8:67:0d:dd:76:ff:5e:32:2d:
         a6:b0:65:cb:5e:d7:80:ab:eb:b3:9d:12:47:13:71:b0:0d:e5:
         d7:15:2b:b0:41:31:38:7d:1a:88:83:c5:06:fb:a6:07:da:79:
         16:9d:f6:ec:31:bf:f2:e6:9b:04:a3:cf:d3:97:76:d7:e5:84:
         92:11:06:f9:40:95:09:71:f2:6f:e0:96:7d:7a:05:6d:1b:18:
         e0:e7:fa:58:31:ee:80:41:3b:20:a2:7e:9b:ec:cb:38:bc:80:
         62:53:c2:24:47:e3:60:db:5a:5b:81:32:4d:b7:a8:df:d0:c6:
         a7:ce:25:5e:94:0f:42:ad:80:59:fc:1e:ce:25:f7:fa:c2:82:
         cc:69:73:74:52:c6:c5:5b:d3:e3:8d:8c:06:09:22:fe:7d:2e:
         40:76:6b:ad:19:e2:8b:41:af:46:1a:26:46:7d:25:1c:a2:88:
         72:db:33:56:2c:e1:32:2c:5b:c5:d6:b9:54:3c:11:9a:50:ed:
         fd:11:3d:45:c6:9d:f0:4a:e4:27:e9:2d:10:cb:8c:9b:3d:f1:
         c9:72:c4:de
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA7cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yMjA1MDEw
MTMyMDhaFw0yMzA0MjcwOTUyMzRaMDMxMTAvBgNVBAMTKDJEQzMyOUJDMzhFOTQw
RjYyRjlBQkZGMUYyRkU5RTM2MDI1N0Y1MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDbV4EHBhd/oOzph49H8IEqPri+ikfJQGJKqwFrrxp+JLKwJUbl
z/AiZSEvFBwhKZ9YgGUgqlC4ZpeEQPYBcZAZjFv2d6gCz771/kE2GIYCLMcGBzVE
WB//fLBsvCKamduSWjT4eiB+rzVmJJQUqxPjt3SBUKyMXa6JLqytxIX0Hm3VrOA6
EyHQRS73Cu2oUeiFsdNgbvHpcaEFuRDjQMDld61HgZYiqHTZChoxhjmUqrf6Afar
4wbdt8NdmGpLny4PhmYPO0O5YNL/UIJBp6zyqpiz1lcfotWjS0uNhx2fLbhfCDHZ
Z0wIeHb9OYJx2RQdt8fXkxaZI9NRehm7MH09AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQULcMpvDjpQPYvmr/x8v6eNgJX9RMwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTQ1L0xjTXB2RGpwUVBZdm1yX3g4djZlTmdKWDlSTS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAQ9zkAwDQYJKoZIhvcNAQELBQADggEBADSM9X6Zuu+ApszULNEwlVmFZuyu
xHbb4oNx8QnMqFslsrsfsnnobbp0bBKmrdhnDd12/14yLaawZcte14Cr67OdEkcT
cbAN5dcVK7BBMTh9GoiDxQb7pgfaeRad9uwxv/LmmwSjz9OXdtflhJIRBvlAlQlx
8m/gln16BW0bGODn+lgx7oBBOyCifpvsyzi8gGJTwiRH42DbWluBMk23qN/QxqfO
JV6UD0KtgFn8Hs4l9/rCgsxpc3RSxsVb0+ONjAYJIv59LkB2a60Z4otBr0YaJkZ9
JRyiiHLbM1Ys4TIsW8XWuVQ8EZpQ7f0RPUXGnfBK5CfpLRDLjJs98clyxN4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org