Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/_zpeTrd08kCcvbqnrb3izpGT7Bc.roa
File:                     _zpeTrd08kCcvbqnrb3izpGT7Bc.roa (raw, json)
Hash identifier:          nI6nnfniu7525hn1BLFscIWnQkgKVDvLoka2huSmBHs=
Subject key identifier:   FF:3A:5E:4E:B7:74:F2:40:9C:BD:BA:A7:AD:BD:E2:CE:91:93:EC:17
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0454
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/_zpeTrd08kCcvbqnrb3izpGT7Bc.roa
Signing time:             Thu 13 Apr 2023 09:57:49 +0000
ROA not before:           Thu 13 Apr 2023 09:57:49 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        118.151.192.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1108 (0x454)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:57:49 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=FF3A5E4EB774F2409CBDBAA7ADBDE2CE9193EC17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e5:85:09:3c:b9:03:cf:5b:1c:8b:90:62:ec:
                    c9:ab:6b:c8:ab:6c:6f:a2:02:1e:eb:0b:90:28:9f:
                    7c:5c:9c:03:ad:d8:70:38:60:bf:27:b3:89:61:df:
                    24:e9:10:dd:08:7c:57:83:61:46:db:a5:67:47:eb:
                    be:56:ff:5a:ca:22:fa:8f:93:09:48:aa:7f:14:fd:
                    68:97:81:4e:24:be:a9:d1:e5:22:13:da:c9:b1:b4:
                    c1:54:25:9a:4c:12:2c:da:61:89:00:72:d9:3d:56:
                    6f:bc:5c:ab:a1:d0:d1:23:70:f0:ea:9f:d1:dd:30:
                    2a:b0:32:65:c0:b2:7c:b7:2e:fd:20:e4:85:87:62:
                    b6:88:dc:61:36:0f:29:16:55:89:d0:16:77:a5:3d:
                    b9:11:75:a2:05:5e:9e:7b:96:71:a3:83:c4:00:2f:
                    1f:74:a9:e0:00:ad:7d:21:8b:f6:55:db:9d:72:12:
                    50:59:ef:c4:10:20:9c:f4:f2:24:c1:a0:c0:38:e2:
                    46:5c:ad:22:6f:43:20:85:3b:f8:1e:cc:f4:6a:0d:
                    69:47:45:e2:38:0b:cf:28:c5:cd:d8:7e:ad:dd:95:
                    dc:77:cc:dd:4d:43:e5:dd:49:85:4e:6e:b4:dd:86:
                    9e:b3:8a:fd:b1:16:7b:40:98:af:84:e5:b5:7c:25:
                    93:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:3A:5E:4E:B7:74:F2:40:9C:BD:BA:A7:AD:BD:E2:CE:91:93:EC:17
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/_zpeTrd08kCcvbqnrb3izpGT7Bc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.151.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0e:98:6e:30:f0:8f:88:40:f2:71:dd:54:01:cf:54:65:7e:4f:
         e4:51:43:a9:4c:5e:88:8a:86:ff:78:cd:7d:90:fd:c9:08:86:
         e3:c1:5c:10:57:4f:5a:66:34:c4:95:fe:65:35:39:da:e3:bd:
         4f:3f:51:92:20:a3:34:6f:d4:2b:72:49:b8:74:53:49:cb:ed:
         9b:b0:2e:88:ae:42:91:54:e3:15:20:9e:9e:2a:d6:d9:63:b1:
         7e:72:3c:d2:ff:fb:a3:2d:a9:37:26:77:c9:4e:3f:a3:7c:33:
         e7:dc:99:73:39:38:4e:60:3e:cd:46:75:f5:3a:62:05:9c:c1:
         4e:9d:53:4f:dd:3f:2f:d6:f0:9f:dd:66:be:71:2c:2a:cb:48:
         d0:12:a1:a4:65:91:55:48:0c:7f:59:2c:d5:41:bc:2f:d4:4e:
         2e:05:76:94:48:96:0b:ac:bb:c9:c7:e4:f7:69:77:d4:c8:3e:
         2b:11:c9:80:3d:9e:46:3e:3d:8e:9f:2b:bc:8f:84:8b:ab:43:
         44:ff:a2:83:01:14:0a:49:59:5a:c6:5d:ec:ad:2b:2e:2a:90:
         56:b7:db:f8:2f:22:52:6f:7e:0f:08:90:55:e1:6a:05:6d:68:
         ee:e4:7a:15:62:2b:42:4a:6f:f4:8e:6a:80:3d:46:bc:26:3e:
         8a:21:10:24
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBFQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yMzA0MTMw
OTU3NDlaFw0yNDAzMTQwMTMwMDJaMDMxMTAvBgNVBAMTKEZGM0E1RTRFQjc3NEYy
NDA5Q0JEQkFBN0FEQkRFMkNFOTE5M0VDMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDC5YUJPLkDz1sci5Bi7Mmra8irbG+iAh7rC5Aon3xcnAOt2HA4
YL8ns4lh3yTpEN0IfFeDYUbbpWdH675W/1rKIvqPkwlIqn8U/WiXgU4kvqnR5SIT
2smxtMFUJZpMEizaYYkActk9Vm+8XKuh0NEjcPDqn9HdMCqwMmXAsny3Lv0g5IWH
YraI3GE2DykWVYnQFnelPbkRdaIFXp57lnGjg8QALx90qeAArX0hi/ZV251yElBZ
78QQIJz08iTBoMA44kZcrSJvQyCFO/gezPRqDWlHReI4C88oxc3Yfq3dldx3zN1N
Q+XdSYVObrTdhp6ziv2xFntAmK+E5bV8JZNDAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU/zpeTrd08kCcvbqnrb3izpGT7BcwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTQ1L196cGVUcmQwOGtDY3ZicW5yYjNpenBHVDdCYy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAR2l8AwDQYJKoZIhvcNAQELBQADggEBAA6YbjDwj4hA8nHdVAHPVGV+T+RR
Q6lMXoiKhv94zX2Q/ckIhuPBXBBXT1pmNMSV/mU1OdrjvU8/UZIgozRv1CtySbh0
U0nL7ZuwLoiuQpFU4xUgnp4q1tljsX5yPNL/+6MtqTcmd8lOP6N8M+fcmXM5OE5g
Ps1GdfU6YgWcwU6dU0/dPy/W8J/dZr5xLCrLSNASoaRlkVVIDH9ZLNVBvC/UTi4F
dpRIlgusu8nH5Pdpd9TIPisRyYA9nkY+PY6fK7yPhIurQ0T/ooMBFApJWVrGXeyt
Ky4qkFa32/gvIlJvfg8IkFXhagVtaO7kehViK0JKb/SOaoA9RrwmPoohECQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org