Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/hVd-Ur_UhFzsgg3sjdcwRqfPvbc.roa
File:                     hVd-Ur_UhFzsgg3sjdcwRqfPvbc.roa (raw, json)
Hash identifier:          xcb8/h2UhaRcYO8W/W/+3NSCmlNi33LMpwR0gPw9elY=
Subject key identifier:   85:57:7E:52:BF:D4:84:5C:EC:82:0D:EC:8D:D7:30:46:A7:CF:BD:B7
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       8F
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/hVd-Ur_UhFzsgg3sjdcwRqfPvbc.roa
Signing time:             Mon 24 Oct 2022 02:46:45 +0000
ROA not before:           Mon 24 Oct 2022 02:46:45 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     4721
IP address blocks:        114.134.192.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143 (0x8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 24 02:46:45 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=85577E52BFD4845CEC820DEC8DD73046A7CFBDB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ae:27:86:7e:e7:6c:1e:70:01:6b:5b:4f:e6:
                    d0:57:f2:be:c7:68:d4:c9:ce:8c:1d:69:0b:40:22:
                    92:69:c4:c9:5f:9e:b5:28:90:20:bd:01:73:11:a3:
                    f9:dc:53:79:09:4f:93:e4:41:15:b1:25:c5:a2:15:
                    ff:12:ec:4e:af:53:71:1e:83:8e:ae:9b:6b:51:41:
                    55:e1:1d:b3:8e:e5:5d:4e:16:98:ff:c6:95:79:33:
                    95:82:4a:90:9d:84:cc:a5:ab:d0:c4:2c:53:71:ab:
                    53:fb:7b:45:22:b9:5d:80:be:a2:8e:20:e0:7f:0a:
                    87:91:76:5d:5d:79:cd:3f:a5:a8:e1:2d:c3:7a:c6:
                    af:b2:ea:30:f1:86:06:e8:60:23:2f:e0:6a:8f:ab:
                    77:d3:1c:5f:3b:d5:29:36:99:8e:49:cb:ac:cc:4d:
                    63:0a:09:f8:38:44:a4:04:ed:85:fd:2c:a8:3e:02:
                    31:d6:95:c3:57:8b:88:b0:5f:ca:7f:01:99:20:12:
                    30:98:ef:93:94:02:bb:ca:20:7b:bf:39:ad:ba:6f:
                    e1:e9:73:fc:b1:f6:cd:a1:96:57:0e:43:80:65:71:
                    13:be:20:32:0f:20:53:61:96:3b:a0:f5:c4:94:e1:
                    6e:6c:5d:56:2d:df:aa:29:2b:77:87:53:d8:5b:28:
                    87:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:57:7E:52:BF:D4:84:5C:EC:82:0D:EC:8D:D7:30:46:A7:CF:BD:B7
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/hVd-Ur_UhFzsgg3sjdcwRqfPvbc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.134.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         71:9c:69:3a:b3:b7:1c:99:b2:7d:e0:73:15:2a:49:67:e5:bd:
         88:49:c5:3b:a4:01:b9:48:ea:eb:e3:98:34:c8:b8:64:01:61:
         11:33:a5:63:45:5b:f5:bf:37:c5:c2:b2:44:50:2b:d9:d9:d4:
         c4:27:a4:03:77:ba:e9:54:51:db:e4:26:7c:38:e4:c5:52:e3:
         bf:7a:6a:df:21:93:cb:18:6f:10:ca:95:a6:d4:91:40:a7:ec:
         4c:02:b8:15:bd:87:ec:f1:b0:e4:03:55:7f:4d:b8:d4:1a:cf:
         b8:b5:87:c2:f9:f1:cc:28:c1:0e:52:6a:93:10:ca:16:1f:5f:
         73:9e:0c:fd:1b:22:7f:9e:70:35:fb:d9:91:11:70:49:ea:0a:
         3e:b2:9b:a5:76:cd:cb:4c:78:a3:ca:5a:8e:79:57:99:2e:5f:
         dc:1e:31:a3:64:97:76:bb:36:c2:ce:15:f1:dc:7f:41:86:b5:
         67:bc:33:3b:dc:c8:cb:e0:cf:f9:ca:d8:30:e8:6e:09:32:32:
         3d:6c:19:01:dc:a3:0d:31:ee:55:89:b1:e5:fc:5e:cf:67:ad:
         ad:0a:8f:2b:b1:a7:d5:d3:24:53:a0:7e:77:05:33:47:3f:ce:
         5c:86:28:2a:fa:d6:69:f4:75:ef:95:8b:ce:98:02:b0:b2:5d:
         ca:97:c5:84
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMjEwMjQw
MjQ2NDVaFw0yMzEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDg1NTc3RTUyQkZENDg0
NUNFQzgyMERFQzhERDczMDQ2QTdDRkJEQjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCkrieGfudsHnABa1tP5tBX8r7HaNTJzowdaQtAIpJpxMlfnrUo
kCC9AXMRo/ncU3kJT5PkQRWxJcWiFf8S7E6vU3Eeg46um2tRQVXhHbOO5V1OFpj/
xpV5M5WCSpCdhMylq9DELFNxq1P7e0UiuV2AvqKOIOB/CoeRdl1dec0/pajhLcN6
xq+y6jDxhgboYCMv4GqPq3fTHF871Sk2mY5Jy6zMTWMKCfg4RKQE7YX9LKg+AjHW
lcNXi4iwX8p/AZkgEjCY75OUArvKIHu/Oa26b+Hpc/yx9s2hllcOQ4BlcRO+IDIP
IFNhljug9cSU4W5sXVYt36opK3eHU9hbKIcxAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUhVd+Ur/UhFzsgg3sjdcwRqfPvbcwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL2hWZC1Vcl9VaEZ6c2dnM3NqZGN3UnFmUHZiYy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAZyhsAwDQYJKoZIhvcNAQELBQADggEBAHGcaTqztxyZsn3gcxUqSWflvYhJ
xTukAblI6uvjmDTIuGQBYREzpWNFW/W/N8XCskRQK9nZ1MQnpAN3uulUUdvkJnw4
5MVS4796at8hk8sYbxDKlabUkUCn7EwCuBW9h+zxsOQDVX9NuNQaz7i1h8L58cwo
wQ5SapMQyhYfX3OeDP0bIn+ecDX72ZERcEnqCj6ym6V2zctMeKPKWo55V5kuX9we
MaNkl3a7NsLOFfHcf0GGtWe8MzvcyMvgz/nK2DDobgkyMj1sGQHcow0x7lWJseX8
Xs9nra0Kjyuxp9XTJFOgfncFM0c/zlyGKCr61mn0de+Vi86YArCyXcqXxYQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:13 2024 by rpki-client on console-ams.rpki-client.org