Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/fBw2LpPbobz9Ftu4HkRTAmZGS4I.roa
File:                     fBw2LpPbobz9Ftu4HkRTAmZGS4I.roa (raw, json)
Hash identifier:          /avDgrxyZTMGx+lIB3c9ktJI19oJINpRYJfTL5MEfAU=
Subject key identifier:   7C:1C:36:2E:93:DB:A1:BC:FD:16:DB:B8:1E:44:53:02:66:46:4B:82
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       03CA
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/fBw2LpPbobz9Ftu4HkRTAmZGS4I.roa
Signing time:             Sun 01 May 2022 01:32:57 +0000
ROA not before:           Sun 01 May 2022 01:32:57 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        218.219.48.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 970 (0x3ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:32:57 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=7C1C362E93DBA1BCFD16DBB81E44530266464B82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a4:e8:2f:f0:38:e4:93:12:f0:7f:39:c0:84:
                    53:96:da:d2:ff:4d:99:c6:17:f2:3e:bc:43:49:b8:
                    eb:74:86:58:b9:b5:61:7b:39:6c:d1:53:13:45:2d:
                    a5:b9:03:c6:9e:09:7d:a2:e0:22:a1:5a:ad:32:a3:
                    1f:8b:7d:29:b2:3e:6b:d1:68:50:13:12:ff:e4:19:
                    f3:a4:fe:fa:e2:7a:b6:5f:33:3e:65:e5:04:8f:81:
                    a3:f3:f9:92:33:e7:b3:c6:9f:df:de:bb:6f:d7:c8:
                    7a:9d:8e:3d:16:d7:95:5b:1b:c4:42:0f:61:39:ac:
                    f8:ef:34:d1:39:4c:83:6c:d2:c1:44:63:1a:38:d1:
                    a6:ca:35:05:ed:b5:bc:a1:02:5f:f2:e3:f5:07:32:
                    27:db:77:cd:3b:f7:ad:a2:9d:f0:1d:b2:11:74:db:
                    cd:c3:c5:16:bc:30:02:cb:81:a5:9f:7b:8f:0a:f5:
                    6e:48:e7:f4:4b:0c:7a:3c:5a:57:54:59:7d:a9:86:
                    d1:34:b9:18:e1:1e:ce:f0:5e:dd:e7:70:95:87:9d:
                    b6:61:21:13:ce:cc:7c:90:06:2d:a6:19:57:43:b7:
                    89:42:8a:13:93:dd:4a:04:2a:22:b9:9c:db:0f:1a:
                    62:e7:04:95:3f:50:66:0c:bd:95:e9:1c:90:40:97:
                    9d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:1C:36:2E:93:DB:A1:BC:FD:16:DB:B8:1E:44:53:02:66:46:4B:82
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/fBw2LpPbobz9Ftu4HkRTAmZGS4I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.219.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:b0:6e:2f:ee:59:c3:d7:04:f4:df:c0:67:e6:25:b9:68:55:
         0e:7d:7a:01:9e:98:f8:d1:25:14:1c:46:e3:2c:37:b0:d9:43:
         b1:be:fa:ff:77:c8:65:5a:e4:4e:03:a8:e8:74:9a:ce:48:35:
         8e:cd:54:44:7c:17:67:ae:80:eb:f9:26:1f:d3:66:0a:e1:d3:
         59:b7:bf:91:80:e6:50:a0:6d:14:04:95:8a:7a:f0:0f:41:9d:
         08:b8:ab:89:4a:10:3b:d6:12:30:f1:02:22:17:13:ce:aa:e9:
         52:51:a8:14:8d:b9:83:dd:92:51:31:24:3d:e6:07:5f:85:ef:
         1a:51:0f:c3:98:73:93:f9:db:5a:4f:cc:b6:06:19:b9:f9:f7:
         b6:a3:e9:d5:f9:ed:34:83:f7:87:2d:e6:5a:57:4e:f1:71:9f:
         23:02:fb:5a:ff:17:80:07:47:fb:2e:66:21:1b:2e:9e:2b:0e:
         e3:3c:69:6f:4e:6a:e7:68:90:93:b0:54:dd:2d:97:56:dc:5c:
         9f:d0:d9:78:70:f0:05:64:dd:a7:38:7d:66:ac:89:e2:ec:a3:
         27:d5:ea:ae:82:f3:83:55:8b:6c:7a:63:90:31:fe:08:f4:65:
         d7:d6:24:a0:d7:e0:a2:a3:a9:b8:72:10:54:b1:98:ae:70:21:
         66:66:b5:b8
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA8owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yMjA1MDEw
MTMyNTdaFw0yMzA0MjcwOTUyMzRaMDMxMTAvBgNVBAMTKDdDMUMzNjJFOTNEQkEx
QkNGRDE2REJCODFFNDQ1MzAyNjY0NjRCODIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDTpOgv8DjkkxLwfznAhFOW2tL/TZnGF/I+vENJuOt0hli5tWF7
OWzRUxNFLaW5A8aeCX2i4CKhWq0yox+LfSmyPmvRaFATEv/kGfOk/vrierZfMz5l
5QSPgaPz+ZIz57PGn9/eu2/XyHqdjj0W15VbG8RCD2E5rPjvNNE5TINs0sFEYxo4
0abKNQXttbyhAl/y4/UHMifbd807962infAdshF0283DxRa8MALLgaWfe48K9W5I
5/RLDHo8WldUWX2phtE0uRjhHs7wXt3ncJWHnbZhIRPOzHyQBi2mGVdDt4lCihOT
3UoEKiK5nNsPGmLnBJU/UGYMvZXpHJBAl50hAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUfBw2LpPbobz9Ftu4HkRTAmZGS4IwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTQ1L2ZCdzJMcFBib2J6OUZ0dTRIa1JUQW1aR1M0SS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBALa2zAwDQYJKoZIhvcNAQELBQADggEBAFWwbi/uWcPXBPTfwGfmJbloVQ59
egGemPjRJRQcRuMsN7DZQ7G++v93yGVa5E4DqOh0ms5INY7NVER8F2eugOv5Jh/T
Zgrh01m3v5GA5lCgbRQElYp68A9BnQi4q4lKEDvWEjDxAiIXE86q6VJRqBSNuYPd
klExJD3mB1+F7xpRD8OYc5P521pPzLYGGbn597aj6dX57TSD94ct5lpXTvFxnyMC
+1r/F4AHR/suZiEbLp4rDuM8aW9OaudokJOwVN0tl1bcXJ/Q2Xhw8AVk3ac4fWas
ieLsoyfV6q6C84NVi2x6Y5Ax/gj0ZdfWJKDX4KKjqbhyEFSxmK5wIWZmtbg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org