Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/602/5i3hMz4EoX5Y0naKf0I_UWnt7Ls.roa
File:                     5i3hMz4EoX5Y0naKf0I_UWnt7Ls.roa (raw, json)
Hash identifier:          hnwYmciogqbM5A/D6IqQN3lN2PZQNjt2L4LAw25RrzM=
Subject key identifier:   E6:2D:E1:33:3E:04:A1:7E:58:D2:76:8A:7F:42:3F:51:69:ED:EC:BB
Certificate issuer:       /CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Certificate serial:       3F
Authority key identifier: 4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/5i3hMz4EoX5Y0naKf0I_UWnt7Ls.roa
Signing time:             Thu 30 Mar 2023 04:16:28 +0000
ROA not before:           Thu 30 Mar 2023 04:16:28 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     32787
IP address blocks:        210.193.113.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
        Validity
            Not Before: Mar 30 04:16:28 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=E62DE1333E04A17E58D2768A7F423F5169EDECBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:48:17:3d:b9:fb:1f:50:e8:92:40:64:58:c1:
                    15:f4:f1:cf:d2:d3:2a:f0:33:30:6a:37:d7:9b:7a:
                    dc:d5:ff:c3:75:fa:85:ab:fe:0f:29:4f:ac:94:fb:
                    06:5e:7a:d3:02:7a:53:c9:2d:b0:ef:88:77:e4:4b:
                    12:76:bf:d3:69:56:6a:2b:cd:df:09:b5:e6:43:ab:
                    e1:42:fd:39:14:7d:70:e2:c3:b5:15:fa:ac:c6:58:
                    28:34:fc:19:c5:2c:70:04:38:de:b2:71:75:a8:15:
                    eb:59:8d:15:7b:d5:2a:34:a5:dd:c1:19:ab:a6:80:
                    8d:65:b3:e3:b3:6c:f6:12:fb:ee:64:7d:5e:2e:3b:
                    64:8e:f2:0b:6c:e2:72:43:b3:d7:a4:2b:6c:5f:bb:
                    ed:0f:c8:49:9e:be:79:03:47:1e:4a:8a:87:f0:80:
                    f7:b0:3d:42:87:b8:f9:d3:90:46:b5:e5:99:29:80:
                    cc:fc:48:77:07:b2:40:9f:ee:2a:2f:41:83:7a:0f:
                    c3:03:ef:8e:f6:c4:08:bd:a1:2a:8f:ac:27:7d:4e:
                    2b:fb:e9:0e:24:92:1c:b7:15:dc:43:0e:64:48:d1:
                    9e:8b:b0:9b:98:45:40:c8:70:30:a4:c5:06:ae:95:
                    b6:fc:34:82:e1:f6:f6:7f:b2:4d:8e:b5:57:ea:2b:
                    c8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:2D:E1:33:3E:04:A1:7E:58:D2:76:8A:7F:42:3F:51:69:ED:EC:BB
            X509v3 Authority Key Identifier:
                keyid:4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/5i3hMz4EoX5Y0naKf0I_UWnt7Ls.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.193.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:7f:60:41:b7:dc:cc:71:06:36:51:9c:3d:e9:76:03:a5:8c:
         c5:16:39:24:6b:b0:37:4a:83:f0:06:ea:5e:60:13:da:49:f8:
         4d:79:55:f4:d8:e1:b2:d6:4c:15:7c:52:bd:d9:aa:fe:b3:75:
         0f:c4:1c:84:13:fa:3c:a5:ff:9e:77:77:14:44:5e:eb:8c:6d:
         41:0c:eb:6d:3f:c7:b1:a9:c1:2e:ad:c1:9e:2a:14:90:b5:15:
         4f:ee:1e:ba:b4:b0:73:82:25:06:9b:fb:d7:79:d2:11:8c:a3:
         6a:e5:e1:ea:04:ad:0d:be:41:19:45:90:8f:f6:12:a1:b5:05:
         06:bd:17:55:20:4c:3a:9e:a5:7b:88:52:7e:5e:57:ba:fb:35:
         9c:4f:e9:d9:c0:85:ac:ab:d2:df:23:34:1f:9e:d5:90:3e:c4:
         9a:6c:3d:84:38:c7:50:92:8c:6b:af:8c:e4:e3:76:e0:c2:a2:
         b2:ed:66:c4:0a:89:e9:0b:3a:d2:ba:2b:57:df:9b:d1:dc:de:
         c5:89:f8:88:15:1b:dd:96:d8:38:77:cc:2e:1c:95:d9:2d:7a:
         7a:d8:06:b4:2a:3f:40:4e:a7:eb:4a:77:e2:aa:15:46:a5:12:
         70:f3:7d:cd:c6:a8:65:41:eb:84:3b:33:82:cc:e6:c9:60:b0:
         c1:a1:15:e3
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBPzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0RUZG
MUFCNkVBREEyNzNCQTA2NkRCMEY3N0I3OUQ2QTBEOTAxNTQyMB4XDTIzMDMzMDA0
MTYyOFoXDTI0MDMxNDAxMzAwMlowMzExMC8GA1UEAxMoRTYyREUxMzMzRTA0QTE3
RTU4RDI3NjhBN0Y0MjNGNTE2OUVERUNCQjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJ5IFz25+x9Q6JJAZFjBFfTxz9LTKvAzMGo315t63NX/w3X6hav+
DylPrJT7Bl560wJ6U8ktsO+Id+RLEna/02lWaivN3wm15kOr4UL9ORR9cOLDtRX6
rMZYKDT8GcUscAQ43rJxdagV61mNFXvVKjSl3cEZq6aAjWWz47Ns9hL77mR9Xi47
ZI7yC2zickOz16QrbF+77Q/ISZ6+eQNHHkqKh/CA97A9Qoe4+dOQRrXlmSmAzPxI
dweyQJ/uKi9Bg3oPwwPvjvbECL2hKo+sJ31OK/vpDiSSHLcV3EMOZEjRnouwm5hF
QMhwMKTFBq6Vtvw0guH29n+yTY61V+oryNUCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTmLeEzPgShfljSdop/Qj9Rae3suzAfBgNVHSMEGDAWgBRO/xq26tonO6Bm2w93
t51qDZAVQjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjAyL1R2OGF0dXJhSnp1Z1p0c1BkN2VkYWcyUUZVSS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1R2OGF0dXJhSnp1Z1p0c1BkN2VkYWcy
UUZVSS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC82MDIvNWkzaE16NEVvWDVZMG5hS2YwSV9VV250N0xzLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEANLBcTANBgkqhkiG9w0BAQsFAAOCAQEAxH9gQbfczHEGNlGcPel2A6WMxRY5
JGuwN0qD8AbqXmAT2kn4TXlV9NjhstZMFXxSvdmq/rN1D8QchBP6PKX/nnd3FERe
64xtQQzrbT/HsanBLq3BnioUkLUVT+4eurSwc4IlBpv713nSEYyjauXh6gStDb5B
GUWQj/YSobUFBr0XVSBMOp6le4hSfl5Xuvs1nE/p2cCFrKvS3yM0H57VkD7Emmw9
hDjHUJKMa6+M5ON24MKisu1mxAqJ6Qs60rorV9+b0dzexYn4iBUb3ZbYOHfMLhyV
2S16etgGtCo/QE6n60p34qoVRqUScPN9zcaoZUHrhDszgszmyWCwwaEV4w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:12 2024 by rpki-client on console-ams.rpki-client.org