Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/wBqEujdKANOmVH2-BUZHSu8LbfM.roa
File:                     wBqEujdKANOmVH2-BUZHSu8LbfM.roa (raw, json)
Hash identifier:          x6GiDxkq5EHm2DSFMa8nBONEUY4FI7IkAXPI98R7vr8=
Subject key identifier:   C0:1A:84:BA:37:4A:00:D3:A6:54:7D:BE:05:46:47:4A:EF:0B:6D:F3
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0452
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/wBqEujdKANOmVH2-BUZHSu8LbfM.roa
Signing time:             Thu 13 Apr 2023 09:57:48 +0000
ROA not before:           Thu 13 Apr 2023 09:57:48 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        219.124.156.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1106 (0x452)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:57:48 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=C01A84BA374A00D3A6547DBE0546474AEF0B6DF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:45:42:a3:3f:9e:d2:12:28:8a:6e:f2:a5:72:
                    fe:d3:07:da:48:d4:50:02:46:70:f4:4a:a4:08:22:
                    6f:30:9a:03:2a:3f:41:79:28:77:bc:b9:ad:16:f6:
                    58:c8:b6:4d:8c:71:a0:e3:96:e0:17:c3:80:77:aa:
                    f0:a9:39:9a:9c:14:6f:49:62:5b:60:fe:28:96:ad:
                    e4:6d:e2:96:75:22:af:85:d6:04:be:01:0c:3b:5a:
                    9c:86:e1:cf:d6:29:24:02:1d:b4:98:4b:cf:e6:51:
                    41:ed:73:84:e1:af:da:d8:b5:fa:0e:98:f1:3d:68:
                    ba:d8:f9:16:f9:6b:cb:df:08:e4:c6:90:70:23:d1:
                    db:1b:61:09:9b:b7:ff:0d:4e:e7:83:a5:40:38:65:
                    fd:69:90:be:7b:4a:3b:51:67:f2:1a:05:4c:11:8d:
                    7c:c6:e7:ec:4a:23:30:dd:16:1d:ed:35:06:70:96:
                    91:62:43:cd:5c:51:8f:80:28:d1:0f:f3:b9:6f:8c:
                    d2:e9:24:5a:16:a7:9e:7f:08:bb:a9:92:bf:5b:cd:
                    b7:91:bc:24:11:b5:8c:55:cc:ed:51:e3:7f:24:4d:
                    ee:b2:34:05:6a:58:e6:cc:ea:79:1c:ec:01:67:b2:
                    b9:dc:5b:2c:25:b9:94:3f:69:0b:80:6d:07:91:a3:
                    e5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:1A:84:BA:37:4A:00:D3:A6:54:7D:BE:05:46:47:4A:EF:0B:6D:F3
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/wBqEujdKANOmVH2-BUZHSu8LbfM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.124.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:b8:f3:af:14:e5:ed:a1:be:5c:64:db:86:6f:5a:28:06:54:
         de:19:01:d9:62:6f:c9:2b:26:8f:ce:cc:19:a8:3e:12:a3:4f:
         02:cf:49:e5:44:ee:5a:86:ce:31:e5:f0:27:dd:0a:0c:f8:42:
         9d:96:e6:cf:82:9b:c2:02:90:37:4d:e2:5e:69:3b:d6:af:4b:
         b0:f4:2d:b5:54:7f:07:9f:81:2d:bd:2f:36:11:67:68:cc:6d:
         e4:a7:64:28:2e:0c:16:00:4c:17:b2:d6:7d:23:bb:a7:a5:58:
         80:ee:27:b1:56:90:8d:e1:bc:65:90:ec:03:9d:5b:7a:30:c4:
         b0:1e:ee:23:70:88:ae:87:5a:99:02:b5:ec:41:9a:06:39:3d:
         ed:17:66:be:fe:5f:b4:56:c8:6c:18:00:64:6c:90:bd:11:b9:
         a3:e5:b2:94:4e:e4:a8:34:8a:35:42:30:6f:fc:5d:36:d2:5f:
         83:0f:81:27:be:b6:8f:fb:b0:f4:66:25:39:42:cf:a3:37:25:
         29:cb:91:9d:e7:e3:d5:92:b6:95:cc:44:60:72:1a:58:bc:bf:
         06:30:58:de:6a:a5:0e:33:52:67:c8:11:98:1f:1d:6c:2c:78:
         15:dc:f9:a4:4e:02:bb:72:f4:8e:3d:1d:b8:8f:e5:22:e9:42:
         b2:33:d9:a0
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBFIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yMzA0MTMw
OTU3NDhaFw0yNDAzMTQwMTMwMDJaMDMxMTAvBgNVBAMTKEMwMUE4NEJBMzc0QTAw
RDNBNjU0N0RCRTA1NDY0NzRBRUYwQjZERjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCdRUKjP57SEiiKbvKlcv7TB9pI1FACRnD0SqQIIm8wmgMqP0F5
KHe8ua0W9ljItk2McaDjluAXw4B3qvCpOZqcFG9JYltg/iiWreRt4pZ1Iq+F1gS+
AQw7WpyG4c/WKSQCHbSYS8/mUUHtc4Thr9rYtfoOmPE9aLrY+Rb5a8vfCOTGkHAj
0dsbYQmbt/8NTueDpUA4Zf1pkL57SjtRZ/IaBUwRjXzG5+xKIzDdFh3tNQZwlpFi
Q81cUY+AKNEP87lvjNLpJFoWp55/CLupkr9bzbeRvCQRtYxVzO1R438kTe6yNAVq
WObM6nkc7AFnsrncWywluZQ/aQuAbQeRo+VpAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUwBqEujdKANOmVH2+BUZHSu8LbfMwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTQ1L3dCcUV1amRLQU5PbVZIMi1CVVpIU3U4TGJmTS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAHbfJwwDQYJKoZIhvcNAQELBQADggEBAJq4868U5e2hvlxk24ZvWigGVN4Z
Adlib8krJo/OzBmoPhKjTwLPSeVE7lqGzjHl8CfdCgz4Qp2W5s+Cm8ICkDdN4l5p
O9avS7D0LbVUfwefgS29LzYRZ2jMbeSnZCguDBYATBey1n0ju6elWIDuJ7FWkI3h
vGWQ7AOdW3owxLAe7iNwiK6HWpkCtexBmgY5Pe0XZr7+X7RWyGwYAGRskL0RuaPl
spRO5Kg0ijVCMG/8XTbSX4MPgSe+to/7sPRmJTlCz6M3JSnLkZ3n49WStpXMRGBy
Gli8vwYwWN5qpQ4zUmfIEZgfHWwseBXc+aROArty9I49HbiP5SLpQrIz2aA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org