Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/SaTz3k9CCD3cIsN_BaXoJCwN3hU.roa
File:                     SaTz3k9CCD3cIsN_BaXoJCwN3hU.roa (raw, json)
Hash identifier:          OC3LDg7/p5eoSP552RrtrugwYvLALoOQIeXHr7eIPs0=
Subject key identifier:   49:A4:F3:DE:4F:42:08:3D:DC:22:C3:7F:05:A5:E8:24:2C:0D:DE:15
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       23
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/SaTz3k9CCD3cIsN_BaXoJCwN3hU.roa
Signing time:             Tue 11 Oct 2022 01:36:04 +0000
ROA not before:           Tue 11 Oct 2022 01:36:04 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     4721
IP address blocks:        223.165.20.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 11 01:36:04 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=49A4F3DE4F42083DDC22C37F05A5E8242C0DDE15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e9:4b:5d:9c:52:cf:9f:da:d6:ff:46:74:bc:
                    98:01:de:dc:d3:28:11:9f:48:c8:7b:43:14:8d:1a:
                    f8:8f:d0:d1:23:b6:1b:5c:0d:58:c4:08:fa:e4:10:
                    07:25:ae:a5:b5:ca:8a:e9:75:b3:7a:60:4e:7b:24:
                    87:a8:45:d8:84:5a:0a:9f:fa:2b:df:35:e8:db:6f:
                    5d:1d:c5:e9:d4:73:66:d7:f7:10:0b:47:cf:c6:cb:
                    02:9c:94:7e:3a:8a:31:77:ca:8c:7f:3e:b7:14:dc:
                    ea:55:dc:a0:dd:a7:d0:c5:c9:e2:4d:e3:3d:8b:a7:
                    73:61:7b:f7:9a:27:51:6a:aa:86:94:86:ed:8e:57:
                    4e:c4:be:c7:4e:4c:82:2b:9b:cb:39:66:ed:9f:1e:
                    e5:de:3d:7a:f4:0d:26:8a:f0:22:c3:b6:a7:ff:de:
                    93:eb:d8:9d:7a:c1:65:7c:0c:3b:55:71:1f:9f:49:
                    48:af:e1:16:fe:44:20:a1:51:be:5b:86:34:a4:e1:
                    1e:57:13:7e:06:73:36:bd:dd:f3:f0:bd:aa:1a:66:
                    0c:93:bd:87:a9:ed:48:8f:d6:f0:bc:65:a0:ff:25:
                    61:ed:b7:5e:61:8e:6d:a0:3d:e6:32:ed:69:22:3a:
                    c2:90:ad:ca:96:a2:14:00:3e:77:94:c6:ab:8c:34:
                    ee:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A4:F3:DE:4F:42:08:3D:DC:22:C3:7F:05:A5:E8:24:2C:0D:DE:15
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/SaTz3k9CCD3cIsN_BaXoJCwN3hU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.165.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:19:7a:b1:d0:4f:d2:6a:0d:20:b5:05:74:40:4b:f5:24:ef:
         7d:ea:09:66:0b:96:be:ee:25:e2:a4:60:6c:35:9d:62:bf:f6:
         8b:ff:d5:63:a2:ba:73:72:c1:a0:26:e1:30:3d:c5:7c:22:06:
         89:4f:fd:bf:3c:cb:b4:58:6f:a7:2d:93:ea:c0:73:d7:32:66:
         e7:f1:03:45:21:01:67:02:f8:b0:71:78:d1:0d:64:d4:cf:35:
         0d:dd:48:da:02:74:4c:01:8e:bb:bb:12:53:e3:0c:ff:52:0b:
         82:59:59:36:31:23:99:ab:9c:c8:9b:ca:92:d9:2d:ca:55:88:
         c2:90:a2:17:54:70:43:e3:64:5e:53:17:59:2c:5b:ab:a9:91:
         0f:1a:3f:1e:1b:07:3c:35:d9:5c:07:d1:c1:ed:fa:a2:a7:cd:
         c2:68:4d:c5:19:b8:2a:77:c8:3c:28:e8:f1:ee:e3:cc:fb:ae:
         9e:53:d6:2e:74:94:b7:a3:f4:28:ff:60:45:0e:d8:d4:22:6f:
         b2:75:1c:cd:c8:ca:55:6b:71:8b:f6:83:48:cc:6f:e6:f8:4e:
         9c:e2:b1:c2:86:18:9e:b9:14:4f:ea:cc:9a:de:d7:44:0e:43:
         76:9a:0b:2c:d7:d1:6b:9e:75:21:72:18:91:6b:db:2a:00:e9:
         06:7a:ef:b6
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBIzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQjA2
QjJFNEE5RDU2N0VCN0Q4MEZGNTlBNzU1RkQyODNCRkIxM0FCMB4XDTIyMTAxMTAx
MzYwNFoXDTIzMDkxNTAxMzAwM1owMzExMC8GA1UEAxMoNDlBNEYzREU0RjQyMDgz
RERDMjJDMzdGMDVBNUU4MjQyQzBEREUxNTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALLpS12cUs+f2tb/RnS8mAHe3NMoEZ9IyHtDFI0a+I/Q0SO2G1wN
WMQI+uQQByWupbXKiul1s3pgTnskh6hF2IRaCp/6K9816NtvXR3F6dRzZtf3EAtH
z8bLApyUfjqKMXfKjH8+txTc6lXcoN2n0MXJ4k3jPYunc2F795onUWqqhpSG7Y5X
TsS+x05Mgiubyzlm7Z8e5d49evQNJorwIsO2p//ek+vYnXrBZXwMO1VxH59JSK/h
Fv5EIKFRvluGNKThHlcTfgZzNr3d8/C9qhpmDJO9h6ntSI/W8LxloP8lYe23XmGO
baA95jLtaSI6wpCtypaiFAA+d5TGq4w07mUCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRJpPPeT0IIPdwiw38FpegkLA3eFTAfBgNVHSMEGDAWgBT7BrLkqdVn632A/1mn
Vf0oO/sTqzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjcxLy13YXk1S25WWi10OWdQOVpwMVg5S0R2N0U2cy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLy13YXk1S25WWi10OWdQOVpwMVg5S0R2
N0U2cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC82NzEvU2FUejNrOUNDRDNjSXNOX0JhWG9KQ3dOM2hVLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAt+lFDANBgkqhkiG9w0BAQsFAAOCAQEAaxl6sdBP0moNILUFdEBL9STvfeoJ
ZguWvu4l4qRgbDWdYr/2i//VY6K6c3LBoCbhMD3FfCIGiU/9vzzLtFhvpy2T6sBz
1zJm5/EDRSEBZwL4sHF40Q1k1M81Dd1I2gJ0TAGOu7sSU+MM/1ILgllZNjEjmauc
yJvKktktylWIwpCiF1RwQ+NkXlMXWSxbq6mRDxo/HhsHPDXZXAfRwe36oqfNwmhN
xRm4KnfIPCjo8e7jzPuunlPWLnSUt6P0KP9gRQ7Y1CJvsnUczcjKVWtxi/aDSMxv
5vhOnOKxwoYYnrkUT+rMmt7XRA5DdpoLLNfRa551IXIYkWvbKgDpBnrvtg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org