Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/dOpm2QdZnwPKmbtlu2AtL0kXv_M.roa
File:                     dOpm2QdZnwPKmbtlu2AtL0kXv_M.roa (raw, json)
Hash identifier:          GeRXz3c5la4G7eTJ/ww+4u7sm3maEDu5zOdXV3ieszU=
Subject key identifier:   74:EA:66:D9:07:59:9F:03:CA:99:BB:65:BB:60:2D:2F:49:17:BF:F3
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0320
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/dOpm2QdZnwPKmbtlu2AtL0kXv_M.roa
Signing time:             Tue 25 May 2021 02:42:50 +0000
ROA not before:           Tue 25 May 2021 02:42:50 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        112.139.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 800 (0x320)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:42:50 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=74EA66D907599F03CA99BB65BB602D2F4917BFF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b4:cf:97:a4:3d:78:80:9f:ca:9a:60:e0:d2:
                    0c:f6:59:4b:54:b4:bb:da:12:48:9b:2b:4a:99:09:
                    9c:ac:e4:a9:17:83:ff:de:b3:36:00:dd:f5:03:83:
                    5f:c8:69:b0:12:75:f0:a6:e0:d9:f0:c5:1e:a4:54:
                    f0:b2:8f:9f:b6:0a:d2:fd:b6:33:02:5c:58:89:b1:
                    93:fa:c0:a1:a4:d2:be:d8:41:e7:b5:f8:ac:7e:de:
                    4b:98:ce:e7:79:56:40:c9:26:08:85:9d:53:b1:ba:
                    d1:9b:c1:c4:d0:5e:9d:14:02:a5:cb:aa:b7:44:06:
                    25:3d:b7:36:79:07:7b:0b:10:c3:84:70:6c:43:d2:
                    57:2e:10:37:60:f4:2f:45:d5:1a:18:5c:2e:0c:1c:
                    df:79:ce:86:9f:a7:66:43:a4:d4:4b:e1:d4:f4:38:
                    d9:fa:19:95:f5:a6:9b:02:17:14:36:01:9c:05:a2:
                    95:80:db:7d:78:8f:bf:b1:a2:fe:06:9f:f5:e0:a4:
                    0c:6a:8b:ac:0b:df:ef:65:fa:71:e3:61:02:a9:27:
                    7f:bf:c8:90:bf:c5:68:62:3b:71:61:17:ec:2d:10:
                    8a:ac:b2:10:ba:f9:a9:55:c1:cf:d8:2e:bd:43:7e:
                    09:1b:37:bc:c4:0f:89:d9:d3:fe:6b:a5:53:c3:04:
                    51:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:EA:66:D9:07:59:9F:03:CA:99:BB:65:BB:60:2D:2F:49:17:BF:F3
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/dOpm2QdZnwPKmbtlu2AtL0kXv_M.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.139.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         8f:70:64:74:34:42:e3:fe:19:04:5c:cc:17:eb:8c:fb:cd:e8:
         41:1e:81:ec:04:2e:a6:51:6b:2a:37:6d:82:a1:7a:f6:f4:9e:
         22:42:ca:0a:ae:9c:71:dd:a5:87:46:b5:a6:47:68:77:78:88:
         9f:06:05:62:c9:a4:4a:c4:5d:2a:c4:03:7c:46:9a:f8:36:a2:
         20:41:1a:a4:10:61:5d:64:b9:d7:4c:c7:44:c5:16:d8:a4:50:
         b6:ca:20:aa:55:12:dd:5d:08:5c:88:a8:88:8f:07:8d:00:80:
         42:15:85:85:55:da:13:c5:ab:a1:55:be:5e:eb:aa:43:d0:4b:
         db:67:1e:92:9f:3e:dd:1a:bf:b7:aa:25:ca:b5:ab:ac:48:28:
         e6:47:c7:29:1b:2e:51:26:4f:ff:3b:13:d4:48:a9:18:35:ed:
         85:f7:ac:03:72:c8:2f:bd:56:23:fc:f3:5b:84:78:79:17:0e:
         bb:9c:0f:93:c6:33:ce:96:88:ae:90:48:8e:bd:c2:be:ad:42:
         ae:18:9e:3b:85:ef:11:eb:0c:6f:0a:bc:b0:1c:98:1d:aa:fa:
         78:b5:8d:54:15:db:d1:65:94:72:a4:03:2b:8c:da:1e:2c:ea:
         8c:ba:b4:f5:0e:22:17:32:68:de:a7:2a:08:29:9e:be:62:d9:
         db:55:6f:63
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAyAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yMTA1MjUw
MjQyNTBaFw0yMjA1MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDc0RUE2NkQ5MDc1OTlG
MDNDQTk5QkI2NUJCNjAyRDJGNDkxN0JGRjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAtM+XpD14gJ/KmmDg0gz2WUtUtLvaEkibK0qZCZys5KkXg//e
szYA3fUDg1/IabASdfCm4NnwxR6kVPCyj5+2CtL9tjMCXFiJsZP6wKGk0r7YQee1
+Kx+3kuYzud5VkDJJgiFnVOxutGbwcTQXp0UAqXLqrdEBiU9tzZ5B3sLEMOEcGxD
0lcuEDdg9C9F1RoYXC4MHN95zoafp2ZDpNRL4dT0ONn6GZX1ppsCFxQ2AZwFopWA
2314j7+xov4Gn/XgpAxqi6wL3+9l+nHjYQKpJ3+/yJC/xWhiO3FhF+wtEIqsshC6
+alVwc/YLr1DfgkbN7zED4nZ0/5rpVPDBFHrAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUdOpm2QdZnwPKmbtlu2AtL0kXv/MwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNTQ1L2RPcG0yUWRabndQS21idGx1MkF0TDBrWHZfTS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAdwi4AwDQYJKoZIhvcNAQELBQADggEB
AI9wZHQ0QuP+GQRczBfrjPvN6EEegewELqZRayo3bYKhevb0niJCygqunHHdpYdG
taZHaHd4iJ8GBWLJpErEXSrEA3xGmvg2oiBBGqQQYV1kuddMx0TFFtikULbKIKpV
Et1dCFyIqIiPB40AgEIVhYVV2hPFq6FVvl7rqkPQS9tnHpKfPt0av7eqJcq1q6xI
KOZHxykbLlEmT/87E9RIqRg17YX3rANyyC+9ViP881uEeHkXDrucD5PGM86WiK6Q
SI69wr6tQq4YnjuF7xHrDG8KvLAcmB2q+ni1jVQV29FllHKkAyuM2h4s6oy6tPUO
IhcyaN6nKggpnr5i2dtVb2M=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:16 2023 by rpki-client on console-ams.rpki-client.org