Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5515/mZWKmQkCwADm-s16vWQ6m-H3c_A.roa
File:                     mZWKmQkCwADm-s16vWQ6m-H3c_A.roa (raw, json)
Hash identifier:          EwQ/dnSiR8kW/Mah135zOEq6mMx8Jl2P0R0J4Z/1QkQ=
Subject key identifier:   99:95:8A:99:09:02:C0:00:E6:FA:CD:7A:BD:64:3A:9B:E1:F7:73:F0
Certificate issuer:       /CN=522EDDC4FC26DE2699771BB10731C8B0BC9C1790
Certificate serial:       0E
Authority key identifier: 52:2E:DD:C4:FC:26:DE:26:99:77:1B:B1:07:31:C8:B0:BC:9C:17:90
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ui7dxPwm3iaZdxuxBzHIsLycF5A.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5515/mZWKmQkCwADm-s16vWQ6m-H3c_A.roa
Signing time:             Tue 06 Jun 2023 00:42:42 +0000
ROA not before:           Tue 06 Jun 2023 00:42:42 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     131948
IP address blocks:        103.177.117.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522EDDC4FC26DE2699771BB10731C8B0BC9C1790
        Validity
            Not Before: Jun  6 00:42:42 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=99958A990902C000E6FACD7ABD643A9BE1F773F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ed:c8:ab:ae:a1:cc:63:07:e5:06:ec:b3:e4:
                    9d:cb:ff:94:3d:71:d6:9c:51:4d:cd:23:9a:2f:22:
                    17:72:c8:3b:78:98:cc:bb:1d:1d:70:de:72:ce:aa:
                    19:db:22:b7:3a:74:c8:44:1a:99:14:9a:d8:11:02:
                    cf:0f:c0:ac:ba:31:1d:f4:5e:f3:a0:0d:d8:ae:a4:
                    25:2b:20:89:f1:45:72:a5:03:fd:8e:28:f2:01:ec:
                    ef:a1:16:88:5c:16:84:7f:7e:57:de:bb:f4:cd:e0:
                    3e:c6:12:88:cc:4f:ab:62:78:01:40:dd:66:e8:42:
                    26:d6:06:ae:82:ec:29:5b:8e:3d:aa:40:68:41:06:
                    b1:7b:da:32:27:76:00:45:8a:03:34:02:4d:5d:e1:
                    4f:8b:61:97:82:de:2c:92:3f:54:80:17:24:92:15:
                    99:ac:5c:63:78:b9:05:f0:a9:72:fd:46:0b:b7:62:
                    f2:16:f7:79:28:35:8f:6c:e7:f4:44:32:9c:f3:b1:
                    1b:68:a7:66:40:7f:ae:0e:95:73:c9:e5:2c:1c:7f:
                    cd:11:55:5b:fb:44:fc:8e:bd:a0:e9:47:6c:47:38:
                    74:5d:29:0e:53:73:a8:f4:a5:bc:a6:54:82:67:dc:
                    3f:c7:11:c9:8a:6b:93:44:97:e6:ea:82:72:19:cf:
                    9b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:95:8A:99:09:02:C0:00:E6:FA:CD:7A:BD:64:3A:9B:E1:F7:73:F0
            X509v3 Authority Key Identifier:
                keyid:52:2E:DD:C4:FC:26:DE:26:99:77:1B:B1:07:31:C8:B0:BC:9C:17:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5515/Ui7dxPwm3iaZdxuxBzHIsLycF5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ui7dxPwm3iaZdxuxBzHIsLycF5A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5515/mZWKmQkCwADm-s16vWQ6m-H3c_A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:6f:61:d1:31:23:a1:ff:82:61:8a:ea:41:da:04:25:c2:1f:
         24:7d:a7:fe:e6:bd:37:1a:fd:37:09:59:03:4a:f2:fd:39:b2:
         da:fc:3a:e0:ac:54:bd:f3:3b:dd:de:75:6a:62:34:fa:c7:2c:
         cc:a9:e0:a4:4d:ac:b5:ce:28:99:8b:7a:5b:00:08:ee:aa:c4:
         9e:9c:a2:66:d3:95:18:dc:2b:80:43:27:d1:a7:b0:0a:a2:40:
         ea:94:9b:c4:da:42:72:02:3c:2c:ae:8f:f9:c9:66:07:0b:39:
         1d:e3:2f:ec:7a:15:1f:a4:4e:25:f3:37:5c:a0:15:5b:da:76:
         10:5d:ed:22:55:36:05:ca:94:91:40:2a:f0:25:f9:68:26:fb:
         e9:bb:a3:0d:ab:d7:ba:92:c3:0f:75:75:1b:53:de:82:02:bb:
         8e:3b:f1:f2:13:4e:aa:bc:53:41:8a:62:54:eb:de:07:06:53:
         20:e3:d2:55:57:24:e8:5f:85:8b:f6:34:65:33:d1:c7:52:e3:
         6e:a1:9f:a8:3c:ba:41:3c:93:7f:d9:db:a5:4f:fd:f8:3a:64:
         ce:11:f3:f9:3c:f5:57:09:53:39:42:eb:8c:1e:ee:ce:e7:6b:
         eb:35:99:76:06:af:98:7d:15:05:bd:7e:1a:bd:d5:6e:5d:ae:
         a4:a0:ee:46
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIBDjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1MjJF
RERDNEZDMjZERTI2OTk3NzFCQjEwNzMxQzhCMEJDOUMxNzkwMB4XDTIzMDYwNjAw
NDI0MloXDTI0MDUxNDAxMzAwMlowMzExMC8GA1UEAxMoOTk5NThBOTkwOTAyQzAw
MEU2RkFDRDdBQkQ2NDNBOUJFMUY3NzNGMDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANntyKuuocxjB+UG7LPkncv/lD1x1pxRTc0jmi8iF3LIO3iYzLsd
HXDecs6qGdsitzp0yEQamRSa2BECzw/ArLoxHfRe86AN2K6kJSsgifFFcqUD/Y4o
8gHs76EWiFwWhH9+V9679M3gPsYSiMxPq2J4AUDdZuhCJtYGroLsKVuOPapAaEEG
sXvaMid2AEWKAzQCTV3hT4thl4LeLJI/VIAXJJIVmaxcY3i5BfCpcv1GC7di8hb3
eSg1j2zn9EQynPOxG2inZkB/rg6Vc8nlLBx/zRFVW/tE/I69oOlHbEc4dF0pDlNz
qPSlvKZUgmfcP8cRyYprk0SX5uqCchnPm1sCAwEAAaOCAiYwggIiMB0GA1UdDgQW
BBSZlYqZCQLAAOb6zXq9ZDqb4fdz8DAfBgNVHSMEGDAWgBRSLt3E/CbeJpl3G7EH
MciwvJwXkDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTUxNS9VaTdkeFB3bTNpYVpkeHV4QnpISXNMeWNGNUEuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9VaTdkeFB3bTNpYVpkeHV4QnpISXNM
eWNGNUEuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI
KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTUxNS9tWldLbVFrQ3dBRG0tczE2dldRNm0tSDNjX0Eucm9h
MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv
cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQAZ7F1MA0GCSqGSIb3DQEBCwUAA4IBAQBjb2HRMSOh/4JhiupB2gQlwh8k
faf+5r03Gv03CVkDSvL9ObLa/DrgrFS98zvd3nVqYjT6xyzMqeCkTay1ziiZi3pb
AAjuqsSenKJm05UY3CuAQyfRp7AKokDqlJvE2kJyAjwsro/5yWYHCzkd4y/sehUf
pE4l8zdcoBVb2nYQXe0iVTYFypSRQCrwJfloJvvpu6MNq9e6ksMPdXUbU96CAruO
O/HyE06qvFNBimJU694HBlMg49JVVyToX4WL9jRlM9HHUuNuoZ+oPLpBPJN/2dul
T/34OmTOEfP5PPVXCVM5QuuMHu7O52vrNZl2Bq+YfRUFvX4avdVuXa6koO5G
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org