Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/c4pUOWx33ou0A-rXDJQKI8bllrM.roa
File:                     c4pUOWx33ou0A-rXDJQKI8bllrM.roa (raw, json)
Hash identifier:          P23KNxJK8hTfprdJ4Ndh30cBAPsn3F7WWwNjZDYpQmM=
Subject key identifier:   73:8A:54:39:6C:77:DE:8B:B4:03:EA:D7:0C:94:0A:23:C6:E5:96:B3
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       D7
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/c4pUOWx33ou0A-rXDJQKI8bllrM.roa
Signing time:             Mon 31 Oct 2022 01:58:05 +0000
ROA not before:           Mon 31 Oct 2022 01:58:05 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9617
IP address blocks:        122.196.0.0/15 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 215 (0xd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 31 01:58:05 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=738A54396C77DE8BB403EAD70C940A23C6E596B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2b:d5:46:08:78:1b:ff:76:6a:e6:18:fc:65:
                    0a:3c:98:cd:15:44:f7:79:56:1b:29:30:13:cf:37:
                    67:35:d7:db:29:ea:70:e3:c0:ed:2e:0a:20:c5:3f:
                    14:24:d6:f2:ab:35:5e:ee:ba:ec:32:83:f3:2a:9a:
                    97:65:65:55:b0:71:2f:df:f7:a0:d6:0f:61:17:85:
                    15:ab:7f:e4:da:1e:fc:62:99:e7:17:41:7a:1c:d5:
                    bd:b5:3a:50:cd:c8:11:a0:57:d2:f2:74:7e:5c:08:
                    36:95:09:72:e8:f7:c8:e5:c0:de:39:fa:d0:d3:2a:
                    a9:f6:c6:e8:44:d5:84:a3:6e:98:69:ab:a7:e2:4c:
                    dd:b9:5f:21:1b:c9:1a:c6:c2:a9:cc:63:65:16:7b:
                    42:9c:a8:d2:b9:0d:b0:4b:df:ac:56:88:2d:d6:7d:
                    04:de:0a:25:1f:c6:7a:60:e3:c6:60:b9:43:77:6f:
                    af:c1:08:00:47:91:22:7b:e0:6e:3e:a8:07:e6:89:
                    80:ab:b3:dc:2f:b4:34:d1:0b:6c:32:83:55:02:02:
                    8f:04:b3:5c:e4:5c:c2:d8:65:a1:cd:77:7d:3f:e1:
                    d6:d4:66:0d:8b:51:c8:a6:04:55:69:32:7b:0d:9e:
                    53:61:af:7c:74:aa:16:68:c2:d6:70:2b:6b:04:f2:
                    8e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:8A:54:39:6C:77:DE:8B:B4:03:EA:D7:0C:94:0A:23:C6:E5:96:B3
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/c4pUOWx33ou0A-rXDJQKI8bllrM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.196.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         58:35:59:73:e0:ff:ab:74:1e:81:ee:28:3f:06:3b:61:72:39:
         40:c8:cd:28:f4:b5:ab:4d:4e:e9:3e:c2:1c:2b:6f:6d:cb:6f:
         46:4b:cd:c4:60:2d:f6:ab:ad:d0:fa:54:ec:84:77:c9:6f:10:
         f8:c6:37:d0:01:08:12:96:6d:79:30:de:e7:5c:fc:a9:da:df:
         a6:a2:f5:6a:3f:f7:51:24:5f:d6:04:50:65:d7:5c:21:f8:97:
         de:90:5f:a6:43:36:08:7f:04:8b:d8:fc:a9:3f:8f:cb:db:b6:
         ea:ad:8e:5b:bd:cf:3f:0c:e5:72:50:28:6f:42:ca:fa:cb:66:
         b5:8a:57:83:7a:5d:fc:de:64:b8:f4:13:e3:a0:d7:4d:84:3b:
         15:19:b2:bd:6b:1d:c3:eb:c0:2e:14:6c:1e:1e:e0:35:7e:31:
         b7:e8:cd:48:8e:80:75:20:22:97:02:b4:ff:ac:0e:97:ec:1d:
         7e:ab:6f:2d:0d:9f:11:b7:fc:79:d9:02:7a:f2:46:7b:e0:c6:
         8f:96:db:7a:f9:2f:7c:3c:87:19:8e:0f:01:e6:d0:08:a9:b7:
         d9:60:ab:12:a9:ff:f6:71:5c:6b:ee:e0:91:47:4d:b7:c8:41:
         72:b8:bf:1b:d4:68:07:62:09:74:bf:49:9f:e0:f5:3e:e3:3d:
         19:86:99:24
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICANcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMjEwMzEw
MTU4MDVaFw0yMzEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDczOEE1NDM5NkM3N0RF
OEJCNDAzRUFENzBDOTQwQTIzQzZFNTk2QjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJK9VGCHgb/3Zq5hj8ZQo8mM0VRPd5VhspMBPPN2c119sp6nDj
wO0uCiDFPxQk1vKrNV7uuuwyg/MqmpdlZVWwcS/f96DWD2EXhRWrf+TaHvximecX
QXoc1b21OlDNyBGgV9LydH5cCDaVCXLo98jlwN45+tDTKqn2xuhE1YSjbphpq6fi
TN25XyEbyRrGwqnMY2UWe0KcqNK5DbBL36xWiC3WfQTeCiUfxnpg48ZguUN3b6/B
CABHkSJ74G4+qAfmiYCrs9wvtDTRC2wyg1UCAo8Es1zkXMLYZaHNd30/4dbUZg2L
UcimBFVpMnsNnlNhr3x0qhZowtZwK2sE8o6RAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUc4pUOWx33ou0A+rXDJQKI8bllrMwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL2M0cFVPV3gzM291MEEtclhESlFLSThibGxyTS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwF6xDANBgkqhkiG9w0BAQsFAAOCAQEAWDVZc+D/q3Qege4oPwY7YXI5QMjN
KPS1q01O6T7CHCtvbctvRkvNxGAt9qut0PpU7IR3yW8Q+MY30AEIEpZteTDe51z8
qdrfpqL1aj/3USRf1gRQZddcIfiX3pBfpkM2CH8Ei9j8qT+Py9u26q2OW73PPwzl
clAob0LK+stmtYpXg3pd/N5kuPQT46DXTYQ7FRmyvWsdw+vALhRsHh7gNX4xt+jN
SI6AdSAilwK0/6wOl+wdfqtvLQ2fEbf8edkCevJGe+DGj5bbevkvfDyHGY4PAebQ
CKm32WCrEqn/9nFca+7gkUdNt8hBcri/G9RoB2IJdL9Jn+D1PuM9GYaZJA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org