Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/fH87BunK2odSGOqlsfccyx18i-o.roa
File:                     fH87BunK2odSGOqlsfccyx18i-o.roa (raw, json)
Hash identifier:          vWV5Vt8RMUMugOVGJ+zJjczHzPVYQt88LywOxq6BvFI=
Subject key identifier:   7C:7F:3B:06:E9:CA:DA:87:52:18:EA:A5:B1:F7:1C:CB:1D:7C:8B:EA
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       037A
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/fH87BunK2odSGOqlsfccyx18i-o.roa
Signing time:             Sun 01 May 2022 01:29:39 +0000
ROA not before:           Sun 01 May 2022 01:29:39 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        220.148.64.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 890 (0x37a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:29:39 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=7C7F3B06E9CADA875218EAA5B1F71CCB1D7C8BEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7a:40:f6:58:b2:9f:07:da:bd:8c:95:b1:9b:
                    40:a6:2c:0b:e3:eb:3f:77:6e:b5:92:09:35:ca:e2:
                    33:88:48:33:45:1e:dc:66:4b:c5:61:18:97:32:72:
                    69:7e:17:1a:75:2a:19:43:1a:4a:66:d0:62:85:8a:
                    3b:c9:07:8b:d0:6b:b2:f3:85:f3:9c:7a:d1:a4:71:
                    fc:41:2d:59:b0:a5:39:fe:c2:30:1c:88:53:ba:8b:
                    37:30:b1:fc:36:a7:ba:af:ea:cb:ae:83:3c:c3:c0:
                    cc:4a:2a:82:bb:24:ce:0e:52:05:b9:27:d1:ed:91:
                    99:bd:3d:7b:ae:20:19:70:36:44:b3:29:6d:a0:21:
                    b7:4a:61:cb:f8:fe:45:c7:30:43:85:75:75:05:a0:
                    fe:5a:15:5d:0f:2f:5b:42:32:74:18:8b:ae:ad:8a:
                    ed:d2:c7:53:dc:e0:4e:46:2b:c0:a3:b8:6b:13:da:
                    38:a1:d9:a6:16:41:e4:1a:3b:52:db:e9:9b:bd:32:
                    37:1a:d4:d0:eb:95:ec:3b:16:7e:56:e5:9f:bd:e3:
                    fb:33:b8:50:b8:7d:be:79:01:3d:ba:ff:1f:5b:93:
                    af:7b:eb:37:25:9e:ed:9a:97:c4:fc:00:96:0d:9e:
                    cc:da:6f:9a:08:88:5f:ba:ef:35:c3:3d:a9:7d:f6:
                    15:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:7F:3B:06:E9:CA:DA:87:52:18:EA:A5:B1:F7:1C:CB:1D:7C:8B:EA
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/fH87BunK2odSGOqlsfccyx18i-o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.148.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c5:5a:59:67:c8:51:48:25:70:68:6f:69:4b:96:11:b7:da:2d:
         ba:43:9d:40:4b:a8:2d:6d:f2:2c:2c:31:c4:c9:c0:6f:5e:08:
         4d:22:84:22:79:03:2a:24:83:c4:a8:ab:f6:ec:70:34:51:43:
         46:7e:ca:9c:7b:71:ca:f5:c5:84:a5:9c:83:45:55:c9:4a:52:
         09:d2:0e:4d:a5:5a:9b:2d:47:cf:a8:78:ee:65:94:7a:8d:19:
         4e:29:eb:33:44:2a:56:07:ab:14:ab:35:ef:b2:87:ac:79:6a:
         7b:b5:b9:45:1f:0b:86:82:06:9f:3b:b1:84:b6:33:f5:86:93:
         d4:3e:71:cc:62:e4:a6:81:cf:bb:76:50:af:74:9d:7f:db:85:
         05:73:2e:ca:b9:b5:30:eb:0b:be:f9:4a:b1:da:6d:e8:8d:ea:
         db:0b:1e:d6:1b:14:26:96:26:af:3c:e3:44:11:70:06:de:f2:
         af:96:3d:23:dc:8c:f5:dd:8b:4a:fb:80:8a:5f:f4:43:d9:70:
         6b:ba:99:c3:c1:23:9e:ec:50:ec:02:72:fb:e0:0b:8c:4a:3e:
         42:c2:23:75:ce:89:36:da:a2:4a:93:ff:e6:51:4a:86:42:48:
         29:2e:43:ce:cf:90:dd:4d:3c:e6:0f:00:59:91:a1:8b:6e:c4:
         78:07:37:f3
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA3owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yMjA1MDEw
MTI5MzlaFw0yMzA0MjcwOTUyMzRaMDMxMTAvBgNVBAMTKDdDN0YzQjA2RTlDQURB
ODc1MjE4RUFBNUIxRjcxQ0NCMUQ3QzhCRUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzekD2WLKfB9q9jJWxm0CmLAvj6z93brWSCTXK4jOISDNFHtxm
S8VhGJcycml+Fxp1KhlDGkpm0GKFijvJB4vQa7LzhfOcetGkcfxBLVmwpTn+wjAc
iFO6izcwsfw2p7qv6suugzzDwMxKKoK7JM4OUgW5J9HtkZm9PXuuIBlwNkSzKW2g
IbdKYcv4/kXHMEOFdXUFoP5aFV0PL1tCMnQYi66tiu3Sx1Pc4E5GK8CjuGsT2jih
2aYWQeQaO1Lb6Zu9Mjca1NDrlew7Fn5W5Z+94/szuFC4fb55AT26/x9bk6976zcl
nu2al8T8AJYNnszab5oIiF+67zXDPal99hUJAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUfH87BunK2odSGOqlsfccyx18i+owHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTQ1L2ZIODdCdW5LMm9kU0dPcWxzZmNjeXgxOGktby5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAXclEAwDQYJKoZIhvcNAQELBQADggEBAMVaWWfIUUglcGhvaUuWEbfaLbpD
nUBLqC1t8iwsMcTJwG9eCE0ihCJ5Ayokg8Soq/bscDRRQ0Z+ypx7ccr1xYSlnINF
VclKUgnSDk2lWpstR8+oeO5llHqNGU4p6zNEKlYHqxSrNe+yh6x5anu1uUUfC4aC
Bp87sYS2M/WGk9Q+ccxi5KaBz7t2UK90nX/bhQVzLsq5tTDrC775SrHabeiN6tsL
HtYbFCaWJq8840QRcAbe8q+WPSPcjPXdi0r7gIpf9EPZcGu6mcPBI57sUOwCcvvg
C4xKPkLCI3XOiTbaokqT/+ZRSoZCSCkuQ87PkN1NPOYPAFmRoYtuxHgHN/M=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org