Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/jbz3k8BjJm59D5Z721cvENW1G8o.roa
File:                     jbz3k8BjJm59D5Z721cvENW1G8o.roa (raw, json)
Hash identifier:          NZxaZKcd/tSpZM0TslozWGfBbbXPem9is2Ljn0yfsAo=
Subject key identifier:   8D:BC:F7:93:C0:63:26:6E:7D:0F:96:7B:DB:57:2F:10:D5:B5:1B:CA
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       03FC
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/jbz3k8BjJm59D5Z721cvENW1G8o.roa
Signing time:             Tue 01 Nov 2022 07:05:21 +0000
ROA not before:           Tue 01 Nov 2022 07:05:21 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     10010
IP address blocks:        133.186.48.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1020 (0x3fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Nov  1 07:05:21 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=8DBCF793C063266E7D0F967BDB572F10D5B51BCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4c:e0:96:24:e1:64:df:58:01:d7:20:3d:d4:
                    dc:cb:de:38:10:aa:50:c8:de:d3:ff:47:6c:02:00:
                    e0:39:bd:9f:8e:38:47:38:2b:c0:0f:83:3d:43:ae:
                    d2:75:be:7a:c6:1b:8b:fe:25:60:04:91:43:5d:ea:
                    8f:d3:67:e8:b8:ec:eb:49:7e:01:dc:52:6d:ce:85:
                    df:60:54:1b:29:01:2f:35:97:21:43:64:61:d3:a5:
                    0e:3d:1f:ac:b1:97:14:bd:01:ef:ac:ec:c4:a8:eb:
                    64:d5:23:8b:f2:5e:27:b0:2d:7c:78:ed:5c:28:33:
                    5d:92:5d:5e:83:b3:ac:b9:da:32:ee:c1:f5:94:8b:
                    15:61:b1:b9:22:b1:dc:a5:a4:2b:93:7f:e4:e1:11:
                    1c:0e:bf:8a:5e:7a:f8:d8:7c:35:a7:85:f3:27:04:
                    80:40:7b:ff:cf:bf:f8:77:77:66:ed:7e:ea:f8:9a:
                    e2:84:96:cf:4b:29:db:f1:03:d8:de:cb:36:02:48:
                    2f:44:d5:51:3b:52:a2:c9:93:68:1d:c4:8f:41:fe:
                    a8:ef:e0:30:97:e7:e2:4b:10:36:8c:64:01:6f:62:
                    22:98:81:d8:2e:51:c3:50:fb:cb:d0:c8:23:da:70:
                    d8:5b:9c:9d:fe:03:ad:bd:13:ed:e3:f6:57:a5:d1:
                    cb:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:BC:F7:93:C0:63:26:6E:7D:0F:96:7B:DB:57:2F:10:D5:B5:1B:CA
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/jbz3k8BjJm59D5Z721cvENW1G8o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.186.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:ca:1c:40:af:db:4a:86:ad:98:b9:d2:c0:b0:cd:e8:fd:d1:
         f2:12:f3:88:31:21:8a:7b:cf:19:4f:d2:8d:db:cb:83:00:7f:
         c1:6a:d3:94:aa:4c:11:10:10:74:6b:b5:0f:b6:0b:e2:53:1f:
         cd:92:1b:86:18:0d:ad:1d:27:69:b3:cd:07:ca:98:9e:b4:44:
         23:15:b5:52:0b:90:15:69:a5:99:7c:ab:3d:c7:85:d3:06:2e:
         17:60:a6:e6:5f:da:ca:9d:d7:42:a2:9e:6a:3b:c0:3e:3a:53:
         c7:cc:d9:e7:65:72:26:eb:a4:0e:d1:fb:25:c5:0c:60:60:d5:
         c7:78:71:5f:85:3f:30:5c:21:f7:c5:5a:d0:49:4e:a1:96:ba:
         15:0e:db:c8:c9:b2:b2:f1:aa:13:ed:14:fe:bc:73:af:32:85:
         cb:6b:91:c1:72:f9:d3:a0:fc:d0:d0:a9:60:bc:59:7f:5c:9a:
         46:ce:07:f7:11:5f:9e:c8:6f:22:6f:54:f8:f2:ce:b7:87:e1:
         bd:3e:dc:ee:e7:c9:9e:98:4f:fc:64:1e:61:57:4e:b6:c5:b6:
         e8:26:36:a6:1d:ef:a9:3a:f2:94:f6:96:de:30:2a:6a:a8:9e:
         61:d8:1d:bb:83:a4:c7:75:91:02:a4:45:27:0d:b3:f7:66:0e:
         d0:b1:7b:0d
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA/wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yMjExMDEw
NzA1MjFaFw0yMzEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDhEQkNGNzkzQzA2MzI2
NkU3RDBGOTY3QkRCNTcyRjEwRDVCNTFCQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDWTOCWJOFk31gB1yA91NzL3jgQqlDI3tP/R2wCAOA5vZ+OOEc4
K8APgz1DrtJ1vnrGG4v+JWAEkUNd6o/TZ+i47OtJfgHcUm3Ohd9gVBspAS81lyFD
ZGHTpQ49H6yxlxS9Ae+s7MSo62TVI4vyXiewLXx47VwoM12SXV6Ds6y52jLuwfWU
ixVhsbkisdylpCuTf+ThERwOv4peevjYfDWnhfMnBIBAe//Pv/h3d2btfur4muKE
ls9LKdvxA9jeyzYCSC9E1VE7UqLJk2gdxI9B/qjv4DCX5+JLEDaMZAFvYiKYgdgu
UcNQ+8vQyCPacNhbnJ3+A629E+3j9lel0cvJAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUjbz3k8BjJm59D5Z721cvENW1G8owHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTQ1L2piejNrOEJqSm01OUQ1WjcyMWN2RU5XMUc4by5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAKFujAwDQYJKoZIhvcNAQELBQADggEBAAPKHECv20qGrZi50sCwzej90fIS
84gxIYp7zxlP0o3by4MAf8Fq05SqTBEQEHRrtQ+2C+JTH82SG4YYDa0dJ2mzzQfK
mJ60RCMVtVILkBVppZl8qz3HhdMGLhdgpuZf2sqd10Kinmo7wD46U8fM2edlcibr
pA7R+yXFDGBg1cd4cV+FPzBcIffFWtBJTqGWuhUO28jJsrLxqhPtFP68c68yhctr
kcFy+dOg/NDQqWC8WX9cmkbOB/cRX57IbyJvVPjyzreH4b0+3O7nyZ6YT/xkHmFX
TrbFtugmNqYd76k68pT2lt4wKmqonmHYHbuDpMd1kQKkRScNs/dmDtCxew0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org