Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/MrX9O6yyA_nOwy0F1VJbz_mh7Lw.roa
File:                     MrX9O6yyA_nOwy0F1VJbz_mh7Lw.roa (raw, json)
Hash identifier:          ZMV2POiBnh4BY92cR8J4nVWlTiN96ocg1kS7JRx+3L8=
Subject key identifier:   32:B5:FD:3B:AC:B2:03:F9:CE:C3:2D:05:D5:52:5B:CF:F9:A1:EC:BC
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       19
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/MrX9O6yyA_nOwy0F1VJbz_mh7Lw.roa
Signing time:             Tue 11 Oct 2022 01:10:07 +0000
ROA not before:           Tue 11 Oct 2022 01:10:07 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     4721
IP address blocks:        114.142.128.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 11 01:10:07 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=32B5FD3BACB203F9CEC32D05D5525BCFF9A1ECBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9c:10:8f:d1:95:46:13:0d:4d:96:23:60:99:
                    57:72:97:5f:96:68:f8:68:da:18:25:d4:79:dc:85:
                    57:0c:5d:3f:1c:d8:08:85:fa:82:f7:ed:90:98:6c:
                    50:85:e0:90:94:ab:0c:83:1c:24:81:37:ce:b7:53:
                    ab:1a:24:2c:60:be:42:7f:78:bd:c7:cd:e3:7f:85:
                    06:a9:4d:3c:94:8a:e8:70:d2:f9:a1:4e:eb:92:4f:
                    80:ea:11:f7:11:c8:06:af:b7:c0:69:98:a4:04:99:
                    6e:d4:d5:9c:77:5b:16:a6:cd:2e:f4:29:c7:e9:56:
                    46:e3:38:77:3a:5b:63:4e:70:63:77:62:07:52:ae:
                    33:2d:59:f0:45:f3:28:81:65:1c:e5:cf:1d:b6:33:
                    9b:70:85:89:98:ef:35:68:b7:e1:76:fd:6d:df:d7:
                    2b:66:91:bf:98:63:85:80:46:f5:4d:cc:48:cc:18:
                    de:5a:e0:bb:7b:e8:43:0c:b2:9c:86:c0:ab:c5:89:
                    ba:ec:41:41:6b:68:4d:c3:d4:b2:0c:3b:1b:21:a7:
                    0e:46:1f:f3:b6:46:9c:65:c0:9c:da:06:aa:6e:85:
                    ff:fb:c7:4d:af:35:17:2d:5d:2e:69:2f:94:fa:c9:
                    2d:ad:ea:af:6f:b2:d4:6e:df:06:0c:6f:5f:e2:3f:
                    01:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B5:FD:3B:AC:B2:03:F9:CE:C3:2D:05:D5:52:5B:CF:F9:A1:EC:BC
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/MrX9O6yyA_nOwy0F1VJbz_mh7Lw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.142.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         77:0c:35:74:40:e2:fc:69:f7:85:d9:90:e1:48:97:b1:a6:63:
         6b:3a:4b:95:90:e2:22:a3:3b:e9:da:dc:54:f9:20:75:1a:f4:
         8d:9c:1e:f2:92:cb:4b:4b:5a:5f:76:56:39:8d:b3:c7:ae:89:
         a2:ba:51:b2:18:73:a8:d3:15:d5:85:98:a8:47:b7:9f:93:ca:
         95:91:32:e0:7c:b0:3a:78:e0:71:7b:0c:d2:2a:e8:76:f4:d5:
         b5:8f:37:79:a1:42:e0:45:6c:11:f1:3e:cb:6b:16:5f:16:a3:
         6f:c7:61:88:10:62:2e:20:3c:46:dc:8b:a8:fb:4d:5b:86:1b:
         4d:ba:23:61:a0:9d:fb:da:80:92:c3:23:27:ae:36:df:62:75:
         7f:a0:69:96:2e:c4:d7:34:ae:23:d4:c5:44:e9:1e:ae:33:c7:
         d7:1b:d1:75:de:6a:c5:a5:fa:61:62:25:6c:54:c9:4a:2d:71:
         ab:cc:4f:74:27:6c:2b:1e:5d:31:6e:88:c7:f2:5d:47:ac:7e:
         f2:b1:1b:96:79:f3:08:07:42:49:5a:f9:3b:f6:f9:5d:93:6b:
         a9:92:7a:8f:4f:db:f9:0a:ea:15:11:9a:24:4e:9b:1c:91:32:
         18:22:4d:09:c7:8c:35:11:a3:9e:5f:b5:3b:14:d9:8b:69:84:
         d9:19:b3:69
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBGTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQjA2
QjJFNEE5RDU2N0VCN0Q4MEZGNTlBNzU1RkQyODNCRkIxM0FCMB4XDTIyMTAxMTAx
MTAwN1oXDTIzMDkxNTAxMzAwM1owMzExMC8GA1UEAxMoMzJCNUZEM0JBQ0IyMDNG
OUNFQzMyRDA1RDU1MjVCQ0ZGOUExRUNCQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALqcEI/RlUYTDU2WI2CZV3KXX5Zo+GjaGCXUedyFVwxdPxzYCIX6
gvftkJhsUIXgkJSrDIMcJIE3zrdTqxokLGC+Qn94vcfN43+FBqlNPJSK6HDS+aFO
65JPgOoR9xHIBq+3wGmYpASZbtTVnHdbFqbNLvQpx+lWRuM4dzpbY05wY3diB1Ku
My1Z8EXzKIFlHOXPHbYzm3CFiZjvNWi34Xb9bd/XK2aRv5hjhYBG9U3MSMwY3lrg
u3voQwyynIbAq8WJuuxBQWtoTcPUsgw7GyGnDkYf87ZGnGXAnNoGqm6F//vHTa81
Fy1dLmkvlPrJLa3qr2+y1G7fBgxvX+I/AVMCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQytf07rLID+c7DLQXVUlvP+aHsvDAfBgNVHSMEGDAWgBT7BrLkqdVn632A/1mn
Vf0oO/sTqzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjcxLy13YXk1S25WWi10OWdQOVpwMVg5S0R2N0U2cy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLy13YXk1S25WWi10OWdQOVpwMVg5S0R2
N0U2cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC82NzEvTXJYOU82eXlBX25Pd3kwRjFWSmJ6X21oN0x3LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA3KOgDANBgkqhkiG9w0BAQsFAAOCAQEAdww1dEDi/Gn3hdmQ4UiXsaZjazpL
lZDiIqM76drcVPkgdRr0jZwe8pLLS0taX3ZWOY2zx66JorpRshhzqNMV1YWYqEe3
n5PKlZEy4HywOnjgcXsM0irodvTVtY83eaFC4EVsEfE+y2sWXxajb8dhiBBiLiA8
RtyLqPtNW4YbTbojYaCd+9qAksMjJ64232J1f6Bpli7E1zSuI9TFROkerjPH1xvR
dd5qxaX6YWIlbFTJSi1xq8xPdCdsKx5dMW6Ix/JdR6x+8rEblnnzCAdCSVr5O/b5
XZNrqZJ6j0/b+QrqFRGaJE6bHJEyGCJNCceMNRGjnl+1OxTZi2mE2RmzaQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:13 2024 by rpki-client on console-ams.rpki-client.org