Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/whpS_jMSjlw764uj3T2bjOioQCw.roa
File:                     whpS_jMSjlw764uj3T2bjOioQCw.roa (raw, json)
Hash identifier:          TQkQvSo99LBykBz7Io5qD/43O1JBQaqaccZJ+E6oXYk=
Subject key identifier:   C2:1A:52:FE:33:12:8E:5C:3B:EB:8B:A3:DD:3D:9B:8C:E8:A8:40:2C
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0378
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/whpS_jMSjlw764uj3T2bjOioQCw.roa
Signing time:             Sun 01 May 2022 01:29:38 +0000
ROA not before:           Sun 01 May 2022 01:29:38 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        220.216.84.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 888 (0x378)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May  1 01:29:38 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=C21A52FE33128E5C3BEB8BA3DD3D9B8CE8A8402C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:de:37:e9:35:b6:4c:84:46:d4:5d:5f:4a:d7:
                    ed:b1:50:af:10:62:29:93:01:7e:b2:7d:2d:88:43:
                    80:fd:32:be:ad:78:6a:21:85:d8:4f:72:57:aa:e6:
                    d1:7c:07:52:00:1c:41:98:70:2b:a2:b9:a1:c4:05:
                    31:eb:bd:21:cd:e0:63:e8:8d:83:0a:51:3f:d5:80:
                    45:4b:a1:9c:a8:2d:fd:aa:a0:fe:74:52:bf:f7:54:
                    c6:82:96:14:ac:ed:66:f0:f1:6e:c4:78:46:97:3c:
                    47:16:1e:aa:fc:ed:a4:64:09:72:e1:a1:c2:ee:a6:
                    fc:0f:89:8a:41:82:b8:bb:96:96:40:9c:e6:8a:df:
                    86:d3:bb:c4:d9:3f:8c:6d:08:50:a0:cf:58:51:29:
                    28:bc:fa:2b:6c:67:2e:d8:fb:66:51:f1:11:c4:3d:
                    4c:05:f3:3e:c6:e7:85:77:2a:58:d7:e3:2b:ed:89:
                    f8:42:04:b2:e2:e5:c3:18:6f:9c:42:c3:7d:84:46:
                    68:df:26:83:06:49:9f:22:b8:00:a4:e8:5f:ef:c5:
                    1d:2c:00:ff:60:71:7d:50:9a:ac:df:52:04:3c:3e:
                    64:36:35:ec:86:d6:04:37:88:d8:90:cf:de:de:5d:
                    10:19:92:f2:eb:ed:61:00:e1:c4:3d:84:a7:5a:7e:
                    47:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:1A:52:FE:33:12:8E:5C:3B:EB:8B:A3:DD:3D:9B:8C:E8:A8:40:2C
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/whpS_jMSjlw764uj3T2bjOioQCw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.216.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:24:2e:22:27:ac:46:12:af:09:50:61:97:6f:7b:d3:08:47:
         0c:34:a4:1b:f9:d6:f9:51:3b:9f:d7:9f:70:93:42:a8:5f:25:
         7f:0d:d8:d2:b7:10:90:fe:78:ab:88:c1:ef:22:e7:db:99:0d:
         28:28:7b:a1:81:b4:cf:53:26:f1:46:05:ed:a0:a9:07:d6:e6:
         64:00:d3:3e:01:58:eb:fd:01:ba:6c:43:8a:4e:0d:85:f9:f1:
         2c:22:61:9a:6f:42:ca:47:f6:49:73:41:c0:35:a6:90:e3:34:
         50:78:f0:bb:77:d3:6c:06:2d:a0:a5:74:3a:fb:21:52:90:5a:
         84:a6:d1:66:1d:b8:fe:78:71:29:df:c5:55:ce:6c:ea:93:26:
         27:7b:1a:5a:60:03:da:e6:75:f6:2b:58:e6:cf:dd:00:b3:fc:
         8a:73:8a:7c:69:8d:1c:0b:04:81:f8:3b:0f:6a:18:2a:2d:7c:
         2a:0f:f9:c0:e4:2b:3b:0c:b5:55:b5:82:f9:2b:07:74:c9:cf:
         16:29:18:8e:5b:3b:28:9d:a0:4f:2a:66:c2:0f:35:73:00:3d:
         db:e7:b5:6a:51:43:ae:46:b0:a0:b6:2c:6e:88:65:31:4e:e9:
         fa:00:14:d7:5f:d5:8f:69:7f:48:3d:65:3d:9e:ae:53:c1:a7:
         90:15:f3:ec
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA3gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yMjA1MDEw
MTI5MzhaFw0yMzA0MjcwOTUyMzRaMDMxMTAvBgNVBAMTKEMyMUE1MkZFMzMxMjhF
NUMzQkVCOEJBM0REM0Q5QjhDRThBODQwMkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC33jfpNbZMhEbUXV9K1+2xUK8QYimTAX6yfS2IQ4D9Mr6teGoh
hdhPcleq5tF8B1IAHEGYcCuiuaHEBTHrvSHN4GPojYMKUT/VgEVLoZyoLf2qoP50
Ur/3VMaClhSs7Wbw8W7EeEaXPEcWHqr87aRkCXLhocLupvwPiYpBgri7lpZAnOaK
34bTu8TZP4xtCFCgz1hRKSi8+itsZy7Y+2ZR8RHEPUwF8z7G54V3KljX4yvtifhC
BLLi5cMYb5xCw32ERmjfJoMGSZ8iuACk6F/vxR0sAP9gcX1QmqzfUgQ8PmQ2NeyG
1gQ3iNiQz97eXRAZkvLr7WEA4cQ9hKdafkezAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUwhpS/jMSjlw764uj3T2bjOioQCwwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTQ1L3docFNfak1Tamx3NzY0dWozVDJiak9pb1FDdy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBALc2FQwDQYJKoZIhvcNAQELBQADggEBABgkLiInrEYSrwlQYZdve9MIRww0
pBv51vlRO5/Xn3CTQqhfJX8N2NK3EJD+eKuIwe8i59uZDSgoe6GBtM9TJvFGBe2g
qQfW5mQA0z4BWOv9AbpsQ4pODYX58SwiYZpvQspH9klzQcA1ppDjNFB48Lt302wG
LaCldDr7IVKQWoSm0WYduP54cSnfxVXObOqTJid7GlpgA9rmdfYrWObP3QCz/Ipz
inxpjRwLBIH4Ow9qGCotfCoP+cDkKzsMtVW1gvkrB3TJzxYpGI5bOyidoE8qZsIP
NXMAPdvntWpRQ65GsKC2LG6IZTFO6foAFNdf1Y9pf0g9ZT2erlPBp5AV8+w=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:16 2023 by rpki-client on console-ams.rpki-client.org