Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/gJBqPC3qQXZ8h9M_Z0Q5Vu74Q5g.roa
File:                     gJBqPC3qQXZ8h9M_Z0Q5Vu74Q5g.roa (raw, json)
Hash identifier:          W/30whKcJ/rwUsIEbHsaEkiAoSLylKf3a1rRNmbWQBE=
Subject key identifier:   80:90:6A:3C:2D:EA:41:76:7C:87:D3:3F:67:44:39:56:EE:F8:43:98
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0334
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/gJBqPC3qQXZ8h9M_Z0Q5Vu74Q5g.roa
Signing time:             Tue 25 May 2021 02:42:56 +0000
ROA not before:           Tue 25 May 2021 02:42:56 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        220.148.132.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 820 (0x334)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:42:56 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=80906A3C2DEA41767C87D33F67443956EEF84398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4a:ae:d2:fd:7d:84:c0:e5:8f:85:53:be:a6:
                    59:98:11:97:69:6f:e6:74:34:60:fb:5c:68:05:7c:
                    07:47:f1:4b:6a:17:5c:99:6c:51:6f:43:39:4d:cf:
                    42:48:6c:9f:8b:57:a2:de:db:0e:47:0a:72:48:83:
                    4b:6c:f1:34:a8:bd:7f:d0:65:a6:5d:e7:57:4e:3e:
                    e6:0d:01:14:17:48:a6:50:65:2b:dc:c9:1e:0a:8d:
                    67:f7:6f:cc:10:1a:0c:12:73:e7:22:05:5e:8c:5a:
                    61:7c:47:9a:64:58:3e:2c:45:71:27:97:b4:97:00:
                    8e:ea:aa:89:64:2c:9a:ed:2b:55:2e:18:36:fa:a5:
                    9c:69:b8:bb:a0:b2:da:5b:e4:65:a0:c1:99:dd:c7:
                    ce:06:0a:8a:1b:23:ba:68:57:cf:da:1b:3a:02:3f:
                    58:66:8d:2c:f9:be:06:24:92:23:73:8d:f8:d5:44:
                    5f:07:8a:12:d6:ef:e9:78:be:62:1f:10:11:e8:76:
                    b0:72:1e:a1:68:8b:75:cc:32:80:0b:1a:18:76:86:
                    99:f6:db:25:76:0c:50:f3:f7:ea:b5:b6:a5:8f:ad:
                    c3:74:ae:3b:62:0f:72:b5:38:c2:5c:fa:db:07:c7:
                    ff:a0:53:50:4e:6b:45:70:53:73:4e:4c:32:40:6d:
                    34:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:90:6A:3C:2D:EA:41:76:7C:87:D3:3F:67:44:39:56:EE:F8:43:98
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/gJBqPC3qQXZ8h9M_Z0Q5Vu74Q5g.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.148.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c3:fe:e7:08:fa:d2:5c:54:08:27:10:f4:57:73:08:61:8a:3f:
         b1:6c:37:0a:82:2a:e0:b6:dc:8c:40:d5:c2:84:f9:3b:c7:a2:
         67:7c:54:c8:cb:0f:76:ed:cd:67:d5:63:b7:b6:44:9d:6d:b9:
         c6:21:68:e7:6e:98:76:19:61:72:b4:48:de:4f:a1:bd:20:18:
         63:6d:82:a7:36:8a:9c:7d:6f:f2:d2:4d:4a:e6:af:f7:51:67:
         53:2d:b4:b4:56:54:e3:c5:9f:c1:60:c2:5b:0f:11:ad:5f:0f:
         56:a5:f4:7e:09:da:23:15:b0:20:0c:7a:0a:ed:5c:36:cb:ce:
         17:91:ed:9c:a4:a7:76:14:ca:06:57:c3:49:e0:dc:fb:05:7f:
         d0:f3:90:52:40:ac:7d:f4:35:6f:bc:75:22:9c:b2:2e:d0:31:
         7e:5f:c8:e4:0d:93:52:b9:f9:2a:bc:c0:b8:39:c5:bc:93:4d:
         3b:13:68:fd:73:67:c9:af:6a:5f:a9:fb:0f:c0:d8:b8:29:74:
         1d:62:af:6e:af:ae:06:41:ce:cb:90:62:d4:8e:5a:0b:d6:d1:
         a5:74:1a:22:32:4c:70:57:7b:e8:b9:f6:73:80:ab:8d:22:67:
         8f:74:7c:b2:b9:f2:b6:70:3a:fb:56:b0:f0:f5:d7:7f:df:f6:
         2f:ad:90:31
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAzQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yMTA1MjUw
MjQyNTZaFw0yMjA1MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDgwOTA2QTNDMkRFQTQx
NzY3Qzg3RDMzRjY3NDQzOTU2RUVGODQzOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDSq7S/X2EwOWPhVO+plmYEZdpb+Z0NGD7XGgFfAdH8UtqF1yZ
bFFvQzlNz0JIbJ+LV6Le2w5HCnJIg0ts8TSovX/QZaZd51dOPuYNARQXSKZQZSvc
yR4KjWf3b8wQGgwSc+ciBV6MWmF8R5pkWD4sRXEnl7SXAI7qqolkLJrtK1UuGDb6
pZxpuLugstpb5GWgwZndx84GCoobI7poV8/aGzoCP1hmjSz5vgYkkiNzjfjVRF8H
ihLW7+l4vmIfEBHodrByHqFoi3XMMoALGhh2hpn22yV2DFDz9+q1tqWPrcN0rjti
D3K1OMJc+tsHx/+gU1BOa0VwU3NOTDJAbTThAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUgJBqPC3qQXZ8h9M/Z0Q5Vu74Q5gwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNTQ1L2dKQnFQQzNxUVhaOGg5TV9aMFE1VnU3NFE1Zy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALclIQwDQYJKoZIhvcNAQELBQADggEB
AMP+5wj60lxUCCcQ9FdzCGGKP7FsNwqCKuC23IxA1cKE+TvHomd8VMjLD3btzWfV
Y7e2RJ1tucYhaOdumHYZYXK0SN5Pob0gGGNtgqc2ipx9b/LSTUrmr/dRZ1MttLRW
VOPFn8FgwlsPEa1fD1al9H4J2iMVsCAMegrtXDbLzheR7Zykp3YUygZXw0ng3PsF
f9DzkFJArH30NW+8dSKcsi7QMX5fyOQNk1K5+Sq8wLg5xbyTTTsTaP1zZ8mval+p
+w/A2LgpdB1ir26vrgZBzsuQYtSOWgvW0aV0GiIyTHBXe+i59nOAq40iZ490fLK5
8rZwOvtWsPD113/f9i+tkDE=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:10 2023 by rpki-client on console-fra.rpki-client.org