Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5513/v90_IE-9H589LWMCDolEFJBDB7c.roa
File:                     v90_IE-9H589LWMCDolEFJBDB7c.roa (raw, json)
Hash identifier:          p0R5PgVbkzS8TElikcaKpoYLIT5NDunwIop8YF4TCn0=
Subject key identifier:   BF:DD:3F:20:4F:BD:1F:9F:3D:2D:63:02:0E:89:44:14:90:43:07:B7
Certificate issuer:       /CN=9A03D5C2FEA03F682897FD23715C7F1FD512D1F1
Certificate serial:       04
Authority key identifier: 9A:03:D5:C2:FE:A0:3F:68:28:97:FD:23:71:5C:7F:1F:D5:12:D1:F1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mgPVwv6gP2gol_0jcVx_H9US0fE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5513/v90_IE-9H589LWMCDolEFJBDB7c.roa
Signing time:             Thu 16 Mar 2023 05:20:54 +0000
ROA not before:           Thu 16 Mar 2023 05:20:54 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     0
IP address blocks:        103.177.65.0/25 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A03D5C2FEA03F682897FD23715C7F1FD512D1F1
        Validity
            Not Before: Mar 16 05:20:54 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=BFDD3F204FBD1F9F3D2D63020E894414904307B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:76:c5:01:a2:92:80:00:f9:66:6d:90:39:42:
                    6b:0e:8e:fb:53:69:f6:1b:29:7c:4d:7b:a8:c9:b6:
                    90:16:55:02:40:33:6c:8a:e3:60:2f:d5:08:29:42:
                    d0:fa:ad:00:d3:58:8c:33:8a:aa:b5:0e:7b:04:5e:
                    d4:59:b3:56:3b:1c:7a:8c:ab:80:86:30:fa:9b:7b:
                    c1:9e:a0:11:46:6e:a0:e0:46:d6:67:ad:33:f7:99:
                    c4:75:6f:b4:2a:31:4d:df:7e:41:bd:d8:74:e5:9a:
                    47:7a:70:1f:88:5f:70:f6:83:96:f9:5f:f6:01:f6:
                    bf:c9:86:fe:ef:d4:77:d7:40:ec:31:d1:49:80:3d:
                    46:ca:97:2c:0a:04:8c:af:78:63:a9:8d:72:c9:b0:
                    91:0d:6e:bc:8a:4f:e8:f0:cf:f2:81:c8:43:3f:84:
                    3b:83:18:e0:9b:56:bc:c3:c2:10:97:6e:96:fa:1c:
                    8b:08:fe:61:ff:39:e2:63:f4:0f:66:c6:b8:9d:2e:
                    73:c3:ba:b4:8e:76:78:34:d2:7c:a3:e1:8c:8c:39:
                    20:0a:4d:22:e3:5b:e0:bd:2a:5f:ba:c2:85:a1:76:
                    23:c3:3b:13:88:9d:03:ae:31:62:d0:67:24:74:90:
                    44:27:9b:78:09:12:f8:44:df:a6:dc:2b:e0:5d:27:
                    5c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:DD:3F:20:4F:BD:1F:9F:3D:2D:63:02:0E:89:44:14:90:43:07:B7
            X509v3 Authority Key Identifier:
                keyid:9A:03:D5:C2:FE:A0:3F:68:28:97:FD:23:71:5C:7F:1F:D5:12:D1:F1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5513/mgPVwv6gP2gol_0jcVx_H9US0fE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mgPVwv6gP2gol_0jcVx_H9US0fE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5513/v90_IE-9H589LWMCDolEFJBDB7c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.65.0/25

    Signature Algorithm: sha256WithRSAEncryption
         33:72:5e:fe:9b:a6:c6:6c:58:19:4c:68:40:0b:5e:73:2f:ed:
         29:ad:70:fd:7b:b5:d9:65:0a:40:70:15:15:d5:d2:63:10:76:
         7d:4d:71:f4:87:fb:e1:fc:a3:15:83:bb:ca:78:d8:37:84:1f:
         ab:b4:6b:1a:07:71:90:09:3f:d3:99:2f:8c:db:f0:c5:1e:0a:
         0e:43:8e:66:98:fc:f3:69:c6:45:47:48:4d:e9:ac:bb:b4:9a:
         bc:14:e8:b4:6e:a4:ee:85:79:1b:73:40:1d:2f:38:bb:52:61:
         c3:b0:7a:c9:2c:96:9d:4b:5f:f6:fe:7d:23:7b:2a:5a:1b:14:
         f5:7b:de:4a:ca:fc:79:d1:cd:b9:d4:70:54:e6:d1:58:37:70:
         cf:2c:2c:ab:fb:06:1f:a0:64:5a:a6:13:e1:46:61:6b:da:93:
         b0:f7:7e:11:62:fd:af:76:10:f8:90:c6:59:de:6a:85:ab:16:
         c8:3a:12:84:bd:21:56:b5:52:4a:2b:01:43:a9:cf:8a:40:bc:
         56:bc:1c:05:17:e1:17:27:b1:dc:64:d9:c9:20:ce:a6:56:90:
         ac:40:6d:4c:80:c9:4f:d2:a3:ac:b1:90:d5:fc:e1:29:c0:7c:
         40:be:f7:b5:3b:49:eb:63:c4:7f:df:7e:f3:b8:76:68:6b:10:
         d0:23:d8:a9
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIBBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5QTAz
RDVDMkZFQTAzRjY4Mjg5N0ZEMjM3MTVDN0YxRkQ1MTJEMUYxMB4XDTIzMDMxNjA1
MjA1NFoXDTI0MDMxNDAxMzAwMlowMzExMC8GA1UEAxMoQkZERDNGMjA0RkJEMUY5
RjNEMkQ2MzAyMEU4OTQ0MTQ5MDQzMDdCNzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANJ2xQGikoAA+WZtkDlCaw6O+1Np9hspfE17qMm2kBZVAkAzbIrj
YC/VCClC0PqtANNYjDOKqrUOewRe1FmzVjsceoyrgIYw+pt7wZ6gEUZuoOBG1met
M/eZxHVvtCoxTd9+Qb3YdOWaR3pwH4hfcPaDlvlf9gH2v8mG/u/Ud9dA7DHRSYA9
RsqXLAoEjK94Y6mNcsmwkQ1uvIpP6PDP8oHIQz+EO4MY4JtWvMPCEJdulvociwj+
Yf854mP0D2bGuJ0uc8O6tI52eDTSfKPhjIw5IApNIuNb4L0qX7rChaF2I8M7E4id
A64xYtBnJHSQRCebeAkS+ETfptwr4F0nXNsCAwEAAaOCAicwggIjMB0GA1UdDgQW
BBS/3T8gT70fnz0tYwIOiUQUkEMHtzAfBgNVHSMEGDAWgBSaA9XC/qA/aCiX/SNx
XH8f1RLR8TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTUxMy9tZ1BWd3Y2Z1AyZ29sXzBqY1Z4X0g5VVMwZkUuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9tZ1BWd3Y2Z1AyZ29sXzBqY1Z4X0g5
VVMwZkUuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI
KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTUxMy92OTBfSUUtOUg1ODlMV01DRG9sRUZKQkRCN2Mucm9h
MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv
cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIA
ATAHAwUHZ7FBADANBgkqhkiG9w0BAQsFAAOCAQEAM3Je/pumxmxYGUxoQAtecy/t
Ka1w/Xu12WUKQHAVFdXSYxB2fU1x9If74fyjFYO7ynjYN4Qfq7RrGgdxkAk/05kv
jNvwxR4KDkOOZpj882nGRUdITemsu7SavBTotG6k7oV5G3NAHS84u1Jhw7B6ySyW
nUtf9v59I3sqWhsU9XveSsr8edHNudRwVObRWDdwzywsq/sGH6BkWqYT4UZha9qT
sPd+EWL9r3YQ+JDGWd5qhasWyDoShL0hVrVSSisBQ6nPikC8VrwcBRfhFyex3GTZ
ySDOplaQrEBtTIDJT9KjrLGQ1fzhKcB8QL73tTtJ62PEf99+87h2aGsQ0CPYqQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org