Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/c5QWzuBXukv5T2WM596AlR44YTk.roa
File:                     c5QWzuBXukv5T2WM596AlR44YTk.roa (raw, json)
Hash identifier:          YfvGa0JQnb3EvjSvX1LBjVLDrRpR1DrX9nvdwm+EsoY=
Subject key identifier:   73:94:16:CE:E0:57:BA:4B:F9:4F:65:8C:E7:DE:80:95:1E:38:61:39
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       A3
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/c5QWzuBXukv5T2WM596AlR44YTk.roa
Signing time:             Mon 24 Oct 2022 04:14:55 +0000
ROA not before:           Mon 24 Oct 2022 04:14:55 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     4721
IP address blocks:        202.43.16.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163 (0xa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 24 04:14:55 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=739416CEE057BA4BF94F658CE7DE80951E386139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d5:f6:cb:73:fd:03:ab:4f:43:0e:94:3c:f1:
                    d2:88:57:30:26:65:53:36:04:72:7f:41:41:98:48:
                    b5:b8:cd:bf:4e:a3:00:b7:b5:dd:c5:bb:a6:3c:84:
                    11:88:da:6a:b8:88:93:3e:af:63:8c:1b:56:78:44:
                    cf:3a:89:32:23:b2:e3:8a:c9:55:22:50:48:d8:bb:
                    2c:08:5e:01:87:41:fd:4b:06:be:9c:44:d5:5f:9e:
                    5a:4c:53:1f:aa:94:f5:49:12:07:e7:7a:a4:bb:f8:
                    d7:73:8c:bd:93:26:b0:02:a3:1c:0a:a7:c4:01:8d:
                    34:49:a1:9d:25:02:92:3e:b1:52:6f:e5:06:8a:d8:
                    63:52:40:90:2c:48:b9:05:2f:82:2b:ea:2c:7a:9a:
                    6c:7f:c0:f4:b4:03:7f:bc:96:d5:b0:ca:34:26:fd:
                    8b:41:c8:f4:97:6c:43:df:2a:b5:8a:ce:c8:6f:44:
                    3a:01:12:ae:b6:d3:cf:8a:de:31:79:41:07:c0:dd:
                    45:ec:d6:c3:f9:e4:b3:de:1e:59:8c:ae:1b:a2:90:
                    9e:f7:f2:dc:36:fe:20:93:1e:fa:ce:f2:df:35:ab:
                    e6:d2:47:4e:23:e8:b4:0a:1c:ef:7c:09:c6:74:3d:
                    0a:4f:a4:41:6f:bb:d6:f4:23:4a:61:32:67:f5:be:
                    d9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:94:16:CE:E0:57:BA:4B:F9:4F:65:8C:E7:DE:80:95:1E:38:61:39
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/c5QWzuBXukv5T2WM596AlR44YTk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.43.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1e:a1:1b:2e:ec:af:9b:e9:38:2a:12:09:23:97:c9:9c:39:8d:
         88:79:1b:72:25:46:f9:86:76:1e:cf:81:43:cb:b7:eb:4a:10:
         a9:fc:5c:d4:8a:fd:53:cf:cc:37:c6:d3:c9:36:a2:00:2a:46:
         e5:1d:d8:60:77:50:d7:e7:3a:3d:8e:2c:c4:92:2c:f0:b8:a7:
         d6:3b:01:0a:bc:12:9b:6f:16:a0:e7:66:39:44:28:de:38:4b:
         c9:09:dd:e1:94:67:67:60:a7:5b:ff:25:69:ad:1a:27:62:34:
         7e:18:9f:da:99:d5:e4:91:7d:a1:a6:47:79:58:e7:04:e4:16:
         34:25:2f:67:cc:0a:1a:9f:1a:47:56:a6:4f:0d:de:a7:1a:2a:
         a6:1a:e3:25:d1:6e:1f:8a:68:5b:e6:09:29:09:94:4a:8f:24:
         d0:7c:f8:a2:f2:e7:f5:5c:c2:4e:4e:d9:b8:23:c3:3a:ae:78:
         21:df:ff:5c:89:7d:39:8e:5a:6e:69:9a:b8:b7:81:ed:44:84:
         69:0a:17:a5:d0:41:a1:07:22:52:44:3d:87:b0:5f:4c:4d:b1:
         a8:69:35:53:e7:61:81:09:ff:c6:6f:25:8a:00:f4:f8:0b:02:
         2b:e3:2c:a9:c2:b8:8f:cf:6a:37:da:91:f4:8d:b1:eb:75:11:
         ff:fa:e7:6e
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMjEwMjQw
NDE0NTVaFw0yMzEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDczOTQxNkNFRTA1N0JB
NEJGOTRGNjU4Q0U3REU4MDk1MUUzODYxMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCq1fbLc/0Dq09DDpQ88dKIVzAmZVM2BHJ/QUGYSLW4zb9OowC3
td3Fu6Y8hBGI2mq4iJM+r2OMG1Z4RM86iTIjsuOKyVUiUEjYuywIXgGHQf1LBr6c
RNVfnlpMUx+qlPVJEgfneqS7+NdzjL2TJrACoxwKp8QBjTRJoZ0lApI+sVJv5QaK
2GNSQJAsSLkFL4Ir6ix6mmx/wPS0A3+8ltWwyjQm/YtByPSXbEPfKrWKzshvRDoB
Eq6208+K3jF5QQfA3UXs1sP55LPeHlmMrhuikJ738tw2/iCTHvrO8t81q+bSR04j
6LQKHO98CcZ0PQpPpEFvu9b0I0phMmf1vtnrAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUc5QWzuBXukv5T2WM596AlR44YTkwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL2M1UVd6dUJYdWt2NVQyV001OTZBbFI0NFlUay5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBATKKxAwDQYJKoZIhvcNAQELBQADggEBAB6hGy7sr5vpOCoSCSOXyZw5jYh5
G3IlRvmGdh7PgUPLt+tKEKn8XNSK/VPPzDfG08k2ogAqRuUd2GB3UNfnOj2OLMSS
LPC4p9Y7AQq8EptvFqDnZjlEKN44S8kJ3eGUZ2dgp1v/JWmtGidiNH4Yn9qZ1eSR
faGmR3lY5wTkFjQlL2fMChqfGkdWpk8N3qcaKqYa4yXRbh+KaFvmCSkJlEqPJNB8
+KLy5/Vcwk5O2bgjwzqueCHf/1yJfTmOWm5pmri3ge1EhGkKF6XQQaEHIlJEPYew
X0xNsahpNVPnYYEJ/8ZvJYoA9PgLAivjLKnCuI/PajfakfSNset1Ef/6524=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:13 2024 by rpki-client on console-ams.rpki-client.org