Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/x2cFfYEBlfIZHkJfudZrCySnrnY.roa
File:                     x2cFfYEBlfIZHkJfudZrCySnrnY.roa (raw, json)
Hash identifier:          GYh/kE3GAs5ubbHdE5clR6rcMq1RlOTaYEG9TL2tfxw=
Subject key identifier:   C7:67:05:7D:81:01:95:F2:19:1E:42:5F:B9:D6:6B:0B:24:A7:AE:76
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0478
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/x2cFfYEBlfIZHkJfudZrCySnrnY.roa
Signing time:             Thu 13 Apr 2023 09:59:51 +0000
ROA not before:           Thu 13 Apr 2023 09:59:51 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        124.47.193.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1144 (0x478)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Apr 13 09:59:51 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=C767057D810195F2191E425FB9D66B0B24A7AE76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:42:d1:6c:b8:f1:c0:a9:8e:b1:ba:8f:7a:60:
                    1d:81:90:8f:f0:8b:0a:32:c8:4b:e6:cd:34:69:ab:
                    7d:c2:5e:65:3b:7c:f9:82:a4:92:7d:0d:2e:d5:ec:
                    8a:be:da:12:da:69:3f:aa:90:ec:e2:80:81:46:cf:
                    c7:a4:fc:05:4e:dd:6d:8d:1b:62:de:ec:88:37:86:
                    aa:6a:4f:57:d5:cd:6a:d4:00:7a:19:4e:13:20:53:
                    b3:e2:1d:a2:72:2d:54:7c:6b:18:d2:21:11:c7:48:
                    dd:3d:89:7b:dc:1f:7c:08:af:0e:12:1d:d2:2a:87:
                    8b:ba:b3:54:65:10:a6:6b:04:53:2a:88:4a:fc:10:
                    bd:4b:80:9a:17:5e:49:ed:cd:f7:ec:ca:13:ff:74:
                    47:23:e4:d6:d0:21:4b:5b:12:25:e5:d3:d2:ac:fc:
                    63:51:75:b4:03:ec:72:a9:e4:f7:54:2b:70:6d:26:
                    11:ab:8d:d1:d1:8a:43:a9:ef:0d:cf:e6:b0:a2:ae:
                    48:ca:45:6d:7e:41:bd:17:6b:67:66:20:8f:c6:94:
                    d2:bf:06:06:11:37:4d:03:61:43:c8:55:1f:d5:71:
                    98:a7:5a:99:db:b2:cd:f2:52:c3:3d:53:b5:f1:27:
                    00:ef:e9:5e:ed:8f:49:f6:8f:2c:be:54:2d:f4:80:
                    b8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:67:05:7D:81:01:95:F2:19:1E:42:5F:B9:D6:6B:0B:24:A7:AE:76
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/x2cFfYEBlfIZHkJfudZrCySnrnY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.47.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:d5:7b:ac:b6:14:fd:0b:d5:6c:2e:1c:e1:8a:78:5e:58:6d:
         0c:e2:00:30:c7:04:f5:b2:45:a1:45:d6:7f:1c:8c:51:38:59:
         d8:32:73:e7:66:1b:a8:4d:de:dc:be:d5:c7:7f:40:96:74:0f:
         38:c1:af:05:f5:82:0f:69:fb:e4:f8:0c:5a:d4:e9:08:a2:f0:
         2e:9c:a5:55:f4:d1:3f:6c:b4:4d:eb:6f:d9:5e:11:5f:de:6c:
         49:28:86:1e:8f:c1:a0:72:1f:d4:66:58:03:70:8f:f3:8a:29:
         83:a7:a6:d9:8b:7c:89:3c:db:45:0c:fe:de:23:13:85:38:35:
         1e:af:3c:99:43:4f:1d:6e:2f:87:8c:90:14:4e:79:bd:f0:74:
         ea:f2:29:0b:46:ca:d5:e0:25:21:97:f6:3b:03:06:c5:26:de:
         2b:ae:89:f6:3a:a1:8f:22:4d:4b:7e:e5:fe:72:82:d0:55:b2:
         85:2d:99:b4:3a:43:af:9f:f8:3b:90:ae:db:53:de:5c:24:d0:
         af:9a:d7:ba:fc:8c:f7:cc:2d:bf:b3:dd:02:c0:1b:c7:33:dc:
         92:a7:a7:d1:2f:d1:1a:36:cf:f7:ae:23:4e:75:8e:b0:fc:88:
         dd:73:35:3e:47:aa:ec:7b:fe:33:0f:5a:fd:e7:d3:24:07:10:
         09:2b:7d:71
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBHgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yMzA0MTMw
OTU5NTFaFw0yNDAzMTQwMTMwMDJaMDMxMTAvBgNVBAMTKEM3NjcwNTdEODEwMTk1
RjIxOTFFNDI1RkI5RDY2QjBCMjRBN0FFNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDfQtFsuPHAqY6xuo96YB2BkI/wiwoyyEvmzTRpq33CXmU7fPmC
pJJ9DS7V7Iq+2hLaaT+qkOzigIFGz8ek/AVO3W2NG2Le7Ig3hqpqT1fVzWrUAHoZ
ThMgU7PiHaJyLVR8axjSIRHHSN09iXvcH3wIrw4SHdIqh4u6s1RlEKZrBFMqiEr8
EL1LgJoXXkntzffsyhP/dEcj5NbQIUtbEiXl09Ks/GNRdbQD7HKp5PdUK3BtJhGr
jdHRikOp7w3P5rCirkjKRW1+Qb0Xa2dmII/GlNK/BgYRN00DYUPIVR/VcZinWpnb
ss3yUsM9U7XxJwDv6V7tj0n2jyy+VC30gLgZAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUx2cFfYEBlfIZHkJfudZrCySnrnYwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTQ1L3gyY0ZmWUVCbGZJWkhrSmZ1ZFpyQ3lTbnJuWS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAB8L8EwDQYJKoZIhvcNAQELBQADggEBAI3Ve6y2FP0L1WwuHOGKeF5YbQzi
ADDHBPWyRaFF1n8cjFE4Wdgyc+dmG6hN3ty+1cd/QJZ0DzjBrwX1gg9p++T4DFrU
6Qii8C6cpVX00T9stE3rb9leEV/ebEkohh6PwaByH9RmWANwj/OKKYOnptmLfIk8
20UM/t4jE4U4NR6vPJlDTx1uL4eMkBROeb3wdOryKQtGytXgJSGX9jsDBsUm3iuu
ifY6oY8iTUt+5f5ygtBVsoUtmbQ6Q6+f+DuQrttT3lwk0K+a17r8jPfMLb+z3QLA
G8cz3JKnp9Ev0Ro2z/euI051jrD8iN1zNT5Hqux7/jMPWv3n0yQHEAkrfXE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org