Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/rCk5tL17SP5Xs7yVxikwHzvLdoA.roa
File:                     rCk5tL17SP5Xs7yVxikwHzvLdoA.roa (raw, json)
Hash identifier:          yRzIP9YWzi7tDsHz1YHsu1gBOdluOmZo3W/EI0XE0lU=
Subject key identifier:   AC:29:39:B4:BD:7B:48:FE:57:B3:BC:95:C6:29:30:1F:3B:CB:76:80
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       039B
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/rCk5tL17SP5Xs7yVxikwHzvLdoA.roa
Signing time:             Sun 01 May 2022 01:31:59 +0000
ROA not before:           Sun 01 May 2022 01:31:59 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        220.148.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 923 (0x39b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:31:59 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=AC2939B4BD7B48FE57B3BC95C629301F3BCB7680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d9:72:02:5b:d3:23:36:7f:9e:99:25:f3:76:
                    27:f2:cf:e6:ce:6a:4a:8c:bf:9f:ea:a9:a4:f9:27:
                    27:48:ba:b7:4d:ec:59:4b:4a:48:df:40:85:5a:80:
                    c1:67:56:97:09:fb:d6:08:fa:d2:6c:65:6b:6c:99:
                    62:bb:72:91:9e:9f:42:71:3f:40:5a:8b:c6:7b:b8:
                    5d:02:c5:e9:62:12:ea:6e:b8:5c:6f:eb:08:eb:66:
                    c4:b0:29:41:fb:d5:2b:1b:fd:9d:db:3e:f2:62:58:
                    66:e2:76:c2:3b:d4:e8:e4:17:9c:28:13:f8:fd:73:
                    c3:f2:30:70:b6:11:bc:a2:bd:35:c6:f0:07:73:60:
                    a7:99:ba:0c:9b:da:ca:96:9c:64:b0:b0:5a:78:e8:
                    0e:c0:c5:cb:8a:02:8d:05:95:2b:8d:70:1f:46:21:
                    7a:bb:5f:6a:c4:f3:18:69:d5:1e:dc:5f:8f:f7:35:
                    2e:e0:11:4d:af:df:a6:4e:85:e7:75:5a:bb:06:2d:
                    71:a5:0e:7c:b7:bc:47:13:e7:25:6b:31:ef:33:2a:
                    92:cd:e0:81:70:59:ef:45:2e:f7:bd:4e:1e:d8:fa:
                    aa:91:a0:f2:f1:33:df:6e:25:d2:b5:0d:b2:c1:45:
                    04:da:86:f2:fa:7d:39:c9:7d:36:80:7f:a8:2d:21:
                    66:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:29:39:B4:BD:7B:48:FE:57:B3:BC:95:C6:29:30:1F:3B:CB:76:80
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/rCk5tL17SP5Xs7yVxikwHzvLdoA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.148.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6b:06:61:b2:15:56:11:7f:de:54:8e:f8:6c:db:92:f1:02:76:
         53:63:7b:f0:49:bf:1b:a7:2d:27:11:64:32:0f:92:a8:d3:1d:
         3b:90:bd:d2:c0:05:12:97:a5:5e:8c:59:b1:8f:85:8a:3f:0b:
         ee:d2:b0:cd:fb:73:e4:17:f6:47:d6:ae:22:21:cb:72:81:18:
         1c:31:36:ce:bb:4f:f9:c8:ad:06:43:df:ab:9d:f2:24:75:51:
         75:12:bb:1e:ff:db:24:6a:d5:85:64:29:fa:65:83:39:99:9d:
         16:d3:8e:6a:37:50:ff:37:69:5f:25:46:68:29:d6:c5:96:7b:
         bb:8f:b3:a4:1b:6c:83:d1:84:9e:96:88:9c:a7:59:e5:c6:d0:
         ce:4b:07:fb:ec:64:e7:e7:77:93:90:31:a2:94:dc:e9:f5:b9:
         73:e3:88:95:10:98:b1:38:4f:a6:fe:ac:bb:ad:81:8f:e2:cc:
         82:0d:75:00:f8:e7:65:67:97:c8:c3:c7:9c:fd:41:18:f3:24:
         ee:56:3c:03:d3:5c:10:d8:16:17:07:c2:4b:a4:1a:ff:98:4d:
         fc:a2:fa:d0:46:77:b2:94:6c:b1:e9:fc:cc:80:20:06:76:e5:
         f6:87:6c:a2:63:f2:30:d1:70:f8:03:07:d0:79:6d:51:9a:05:
         a4:32:32:06
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICA5swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yMjA1MDEw
MTMxNTlaFw0yMzA0MjcwOTUyMzRaMDMxMTAvBgNVBAMTKEFDMjkzOUI0QkQ3QjQ4
RkU1N0IzQkM5NUM2MjkzMDFGM0JDQjc2ODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDF2XICW9MjNn+emSXzdifyz+bOakqMv5/qqaT5JydIurdN7FlL
SkjfQIVagMFnVpcJ+9YI+tJsZWtsmWK7cpGen0JxP0Bai8Z7uF0CxeliEupuuFxv
6wjrZsSwKUH71Ssb/Z3bPvJiWGbidsI71OjkF5woE/j9c8PyMHC2EbyivTXG8Adz
YKeZugyb2sqWnGSwsFp46A7AxcuKAo0FlSuNcB9GIXq7X2rE8xhp1R7cX4/3NS7g
EU2v36ZOhed1WrsGLXGlDny3vEcT5yVrMe8zKpLN4IFwWe9FLve9Th7Y+qqRoPLx
M99uJdK1DbLBRQTahvL6fTnJfTaAf6gtIWYtAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUrCk5tL17SP5Xs7yVxikwHzvLdoAwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTQ1L3JDazV0TDE3U1A1WHM3eVZ4aWt3SHp2TGRvQS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwDclDANBgkqhkiG9w0BAQsFAAOCAQEAawZhshVWEX/eVI74bNuS8QJ2U2N7
8Em/G6ctJxFkMg+SqNMdO5C90sAFEpelXoxZsY+Fij8L7tKwzftz5Bf2R9auIiHL
coEYHDE2zrtP+citBkPfq53yJHVRdRK7Hv/bJGrVhWQp+mWDOZmdFtOOajdQ/zdp
XyVGaCnWxZZ7u4+zpBtsg9GEnpaInKdZ5cbQzksH++xk5+d3k5AxopTc6fW5c+OI
lRCYsThPpv6su62Bj+LMgg11APjnZWeXyMPHnP1BGPMk7lY8A9NcENgWFwfCS6Qa
/5hN/KL60EZ3spRssen8zIAgBnbl9odsomPyMNFw+AMH0HltUZoFpDIyBg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:11 2024 by rpki-client on console-ams.rpki-client.org