Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/iEllLIAwWMeN6VM3N1vzuXdxkHY.roa
File:                     iEllLIAwWMeN6VM3N1vzuXdxkHY.roa (raw, json)
Hash identifier:          OhTVrnCRI77YWij4TKnbMaVOkPeWhWB5gchsm/GY9C0=
Subject key identifier:   88:49:65:2C:80:30:58:C7:8D:E9:53:37:37:5B:F3:B9:77:71:90:76
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       81
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/iEllLIAwWMeN6VM3N1vzuXdxkHY.roa
Signing time:             Mon 24 Oct 2022 02:28:42 +0000
ROA not before:           Mon 24 Oct 2022 02:28:42 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     4721
IP address blocks:        110.92.80.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 24 02:28:42 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=8849652C803058C78DE95337375BF3B977719076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ee:75:37:99:53:bf:83:70:3e:2c:59:6e:9a:
                    94:20:b8:83:18:e8:11:43:d6:d3:d5:47:e8:00:64:
                    f6:11:09:4a:36:f9:6e:21:0a:c0:2e:97:3d:e6:a5:
                    f3:6c:9d:b6:02:5e:61:29:db:20:31:e4:38:82:88:
                    c3:a4:70:0a:ee:7c:a7:06:59:83:73:f5:bd:64:d1:
                    bf:74:42:96:f0:2e:4b:3b:3f:c2:69:5e:e7:a0:aa:
                    d2:9e:9d:52:70:69:d6:60:b3:d3:5b:36:69:97:92:
                    2c:3b:43:8d:cf:3b:3f:90:76:5e:0a:34:ba:8a:db:
                    b5:82:01:6c:11:e8:59:0f:82:27:a4:ba:ac:a1:85:
                    c1:b9:a7:5e:ad:41:98:92:78:dc:2c:6a:3b:fb:fb:
                    8c:d0:29:1b:2c:3e:fc:db:c2:07:54:1a:0a:a2:35:
                    f0:34:ff:4a:3d:6d:dd:04:20:87:f4:e7:3f:fe:c0:
                    5a:32:7d:af:da:92:c2:fe:81:9e:4b:66:87:31:1a:
                    4a:06:0e:a1:be:4f:c9:cc:34:66:d6:0d:a4:8b:ee:
                    33:81:cf:cb:e4:2e:fa:1c:77:59:d7:aa:54:d8:23:
                    1b:19:b7:f1:6f:80:6b:22:c4:85:49:f1:5b:02:20:
                    64:ed:d9:1c:e1:f1:cb:9d:6e:2d:55:57:ec:83:52:
                    12:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:49:65:2C:80:30:58:C7:8D:E9:53:37:37:5B:F3:B9:77:71:90:76
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/iEllLIAwWMeN6VM3N1vzuXdxkHY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.92.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         35:a4:5f:57:d4:1d:85:b6:3c:45:ac:92:a3:c2:bd:1f:5f:80:
         88:cd:9b:9d:08:34:44:92:1d:4d:29:35:bb:b5:4b:3a:ed:99:
         69:e0:dd:82:37:5d:f9:ea:b2:b9:8e:24:be:82:5d:98:ec:ee:
         49:3d:ac:bc:ea:43:59:96:d1:62:8f:e6:84:27:4e:2b:fd:54:
         1d:97:ef:84:f3:ce:6a:70:5e:d3:86:cd:58:b7:65:32:8e:06:
         3e:23:43:5a:7b:c7:c2:54:04:56:25:be:97:23:6f:c8:6d:71:
         1a:b2:7a:8e:16:1b:07:6a:f3:33:ed:d5:50:03:dd:85:a4:23:
         06:5f:d3:71:fb:a8:8d:69:ec:17:80:e6:31:fb:8e:af:0b:d4:
         a3:60:d6:84:e3:3d:85:13:1f:05:10:04:41:ba:16:af:2a:4c:
         3a:a3:5d:c0:92:7a:e0:a8:37:5e:7f:a7:f7:e8:8a:9e:b5:e6:
         19:20:f9:fd:10:bd:7c:ca:ed:f5:02:92:df:05:7c:11:55:e2:
         2f:69:3f:d6:2b:f1:5e:61:d6:3b:c4:9d:76:6f:1a:c5:09:03:
         f4:8e:91:3d:5a:89:4a:2c:b5:e1:70:65:c9:f4:66:f2:5b:d9:
         7c:ae:76:87:59:fb:39:67:96:6b:d1:2d:43:cb:38:15:cd:16:
         cb:86:ec:e6
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMjEwMjQw
MjI4NDJaFw0yMzEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDg4NDk2NTJDODAzMDU4
Qzc4REU5NTMzNzM3NUJGM0I5Nzc3MTkwNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC87nU3mVO/g3A+LFlumpQguIMY6BFD1tPVR+gAZPYRCUo2+W4h
CsAulz3mpfNsnbYCXmEp2yAx5DiCiMOkcArufKcGWYNz9b1k0b90QpbwLks7P8Jp
XuegqtKenVJwadZgs9NbNmmXkiw7Q43POz+Qdl4KNLqK27WCAWwR6FkPgiekuqyh
hcG5p16tQZiSeNwsajv7+4zQKRssPvzbwgdUGgqiNfA0/0o9bd0EIIf05z/+wFoy
fa/aksL+gZ5LZocxGkoGDqG+T8nMNGbWDaSL7jOBz8vkLvocd1nXqlTYIxsZt/Fv
gGsixIVJ8VsCIGTt2Rzh8cudbi1VV+yDUhIrAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUiEllLIAwWMeN6VM3N1vzuXdxkHYwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL2lFbGxMSUF3V01lTjZWTTNOMXZ6dVhkeGtIWS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBARuXFAwDQYJKoZIhvcNAQELBQADggEBADWkX1fUHYW2PEWskqPCvR9fgIjN
m50INESSHU0pNbu1SzrtmWng3YI3XfnqsrmOJL6CXZjs7kk9rLzqQ1mW0WKP5oQn
Tiv9VB2X74TzzmpwXtOGzVi3ZTKOBj4jQ1p7x8JUBFYlvpcjb8htcRqyeo4WGwdq
8zPt1VAD3YWkIwZf03H7qI1p7BeA5jH7jq8L1KNg1oTjPYUTHwUQBEG6Fq8qTDqj
XcCSeuCoN15/p/foip615hkg+f0QvXzK7fUCkt8FfBFV4i9pP9Yr8V5h1jvEnXZv
GsUJA/SOkT1aiUosteFwZcn0ZvJb2XyudodZ+zlnlmvRLUPLOBXNFsuG7OY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org