Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/LcvyeqBBm7XX-y979uWJo7uGJ9A.roa
File:                     LcvyeqBBm7XX-y979uWJo7uGJ9A.roa (raw, json)
Hash identifier:          yNLhjkky2aaVQhocHz7tyg/DtSPxFn8+qsojU2A2TK8=
Subject key identifier:   2D:CB:F2:7A:A0:41:9B:B5:D7:FB:2F:7B:F6:E5:89:A3:BB:86:27:D0
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0377
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/LcvyeqBBm7XX-y979uWJo7uGJ9A.roa
Signing time:             Sun 01 May 2022 01:29:37 +0000
ROA not before:           Sun 01 May 2022 01:29:37 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        220.216.96.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 887 (0x377)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:29:37 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=2DCBF27AA0419BB5D7FB2F7BF6E589A3BB8627D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c9:4c:cb:19:67:f3:29:f8:88:c9:83:3b:f2:
                    0e:f4:97:65:d9:35:1d:ff:8e:50:58:81:d2:bd:c3:
                    90:c3:c3:47:f4:e6:9e:46:06:47:83:3e:c5:dc:8a:
                    a4:f4:0c:47:7b:86:2c:eb:cf:c3:24:49:fa:f6:dd:
                    57:fb:09:34:b3:89:3d:73:28:08:af:72:f2:ef:62:
                    6d:d2:56:99:df:ca:a8:0c:df:0c:f0:50:9a:e5:f7:
                    7f:81:ad:6e:e6:bd:66:54:3b:fe:33:41:59:25:6b:
                    e1:80:00:67:4f:38:5f:76:56:e4:15:b5:45:c1:67:
                    4c:2d:69:9e:63:88:cb:2c:6d:ad:c9:ec:3b:50:ec:
                    06:09:5f:b3:00:ea:70:60:c8:94:53:14:94:37:88:
                    31:4d:32:77:3e:2c:9f:14:f2:ef:25:06:03:e5:82:
                    df:c3:f1:5e:cd:ed:61:f1:fc:d1:19:95:4d:6c:c6:
                    8a:0d:ec:c3:d5:a0:1f:ff:9b:6e:4e:b0:90:b4:9f:
                    cb:9d:45:d8:fa:05:44:3f:8d:b2:0b:a3:fa:2c:10:
                    b7:b2:d3:1f:17:10:25:43:72:0b:0a:a9:bc:59:79:
                    10:80:ec:62:e1:70:37:59:02:8d:c6:91:28:b4:24:
                    24:48:3a:f3:75:4c:c8:c5:2f:04:e5:13:e7:e6:c3:
                    8c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:CB:F2:7A:A0:41:9B:B5:D7:FB:2F:7B:F6:E5:89:A3:BB:86:27:D0
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/LcvyeqBBm7XX-y979uWJo7uGJ9A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.216.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cc:0f:05:fa:a3:3e:93:dd:3d:93:42:28:7b:9f:44:08:34:9d:
         e2:ea:29:8a:bd:09:4a:8b:d2:95:d1:99:29:2f:3b:16:8d:9e:
         28:2b:f3:51:26:fb:9b:c8:b7:6b:14:da:f2:e5:39:e2:41:1e:
         4e:79:5b:c9:18:07:5a:4b:9c:f5:f3:5f:84:37:5e:14:40:eb:
         16:cf:49:d3:c3:39:63:8f:61:e4:40:92:fa:42:fd:aa:88:17:
         98:86:20:2d:28:03:92:9e:a0:03:19:77:a7:2e:4d:d1:4c:9e:
         df:4e:73:86:bf:1d:94:1f:87:fd:f7:8b:14:63:4c:0f:be:46:
         c1:3b:d1:ab:ae:a4:52:95:3d:e0:01:47:ff:40:6d:24:00:37:
         75:e8:88:8e:a1:81:cd:02:50:6e:64:91:be:78:e3:40:e8:ff:
         1e:dc:75:e7:87:1b:ce:0f:3c:90:4b:8a:22:a8:1d:b9:11:ad:
         66:31:f8:77:2e:45:08:a4:00:98:f2:9b:e8:84:27:88:a6:be:
         28:bc:51:3f:f2:d8:47:b0:74:38:56:3b:d6:0c:b6:57:84:8c:
         48:ec:93:1f:dd:a8:0a:a5:7a:0b:40:3f:a1:35:ba:27:71:00:
         58:df:bb:c6:18:7d:af:20:f7:ab:af:13:5c:f0:75:e7:82:51:
         bd:4c:ab:42
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA3cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yMjA1MDEw
MTI5MzdaFw0yMzA0MjcwOTUyMzRaMDMxMTAvBgNVBAMTKDJEQ0JGMjdBQTA0MTlC
QjVEN0ZCMkY3QkY2RTU4OUEzQkI4NjI3RDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXyUzLGWfzKfiIyYM78g70l2XZNR3/jlBYgdK9w5DDw0f05p5G
BkeDPsXciqT0DEd7hizrz8MkSfr23Vf7CTSziT1zKAivcvLvYm3SVpnfyqgM3wzw
UJrl93+BrW7mvWZUO/4zQVkla+GAAGdPOF92VuQVtUXBZ0wtaZ5jiMssba3J7DtQ
7AYJX7MA6nBgyJRTFJQ3iDFNMnc+LJ8U8u8lBgPlgt/D8V7N7WHx/NEZlU1sxooN
7MPVoB//m25OsJC0n8udRdj6BUQ/jbILo/osELey0x8XECVDcgsKqbxZeRCA7GLh
cDdZAo3GkSi0JCRIOvN1TMjFLwTlE+fmw4x5AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQULcvyeqBBm7XX+y979uWJo7uGJ9AwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTQ1L0xjdnllcUJCbTdYWC15OTc5dVdKbzd1R0o5QS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBALc2GAwDQYJKoZIhvcNAQELBQADggEBAMwPBfqjPpPdPZNCKHufRAg0neLq
KYq9CUqL0pXRmSkvOxaNnigr81Em+5vIt2sU2vLlOeJBHk55W8kYB1pLnPXzX4Q3
XhRA6xbPSdPDOWOPYeRAkvpC/aqIF5iGIC0oA5KeoAMZd6cuTdFMnt9Oc4a/HZQf
h/33ixRjTA++RsE70auupFKVPeABR/9AbSQAN3XoiI6hgc0CUG5kkb5440Do/x7c
deeHG84PPJBLiiKoHbkRrWYx+HcuRQikAJjym+iEJ4imvii8UT/y2EewdDhWO9YM
tleEjEjskx/dqAqlegtAP6E1uidxAFjfu8YYfa8g96uvE1zwdeeCUb1Mq0I=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:54 2024 by rpki-client on console-fra.rpki-client.org