Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/nQ7lhh-KRl1LYsOql7tFA44kQlw.roa
File:                     nQ7lhh-KRl1LYsOql7tFA44kQlw.roa (raw, json)
Hash identifier:          3HDMynyGhVBOn7W8wKHfRQR5GMR+elrPe1pkFQjZwww=
Subject key identifier:   9D:0E:E5:86:1F:8A:46:5D:4B:62:C3:AA:97:BB:45:03:8E:24:42:5C
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       11
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/nQ7lhh-KRl1LYsOql7tFA44kQlw.roa
Signing time:             Thu 01 Sep 2022 01:22:52 +0000
ROA not before:           Thu 01 Sep 2022 01:22:52 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     9824
IP address blocks:        203.114.248.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Sep  1 01:22:52 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=9D0EE5861F8A465D4B62C3AA97BB45038E24425C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c5:b0:1f:64:b3:5e:4e:f0:0c:93:cd:ed:ec:
                    3f:13:f6:9f:26:28:27:00:4b:a3:6c:92:d6:f1:35:
                    a6:b9:3a:42:e0:d2:cc:c8:5c:13:0e:e7:66:3c:e7:
                    9c:38:5c:ae:6b:dd:1f:3e:98:25:66:2d:fe:ae:64:
                    dc:d8:c6:3a:33:5d:d0:37:ce:9e:85:bf:8f:f5:96:
                    a3:54:bd:52:3f:08:8e:2f:d2:99:06:60:7a:9b:5e:
                    88:62:3e:2a:44:91:d2:80:d5:85:c9:73:0f:c3:4f:
                    31:40:a0:e3:7c:5c:97:33:5f:08:78:6f:7b:9b:26:
                    24:2c:7b:1a:a2:80:c1:93:30:6d:6d:07:c2:de:7c:
                    85:72:67:aa:6b:28:42:54:f6:cc:e6:cc:29:6c:b6:
                    f4:14:0e:0a:81:d3:f0:3f:99:fd:11:ab:a7:dc:2b:
                    dd:53:19:58:84:59:48:c4:1d:6e:7c:b6:40:63:a0:
                    e1:88:14:a9:b1:4d:8f:1f:08:6a:6e:08:b9:37:e6:
                    30:22:c3:ed:93:0a:01:03:f7:da:f8:d7:8b:0f:98:
                    dc:1f:93:15:96:c7:ec:b9:a6:80:a3:8e:be:dd:79:
                    bf:2e:1c:57:39:ef:ea:41:c5:b6:90:2b:a4:3f:43:
                    68:14:51:88:a9:1d:8d:93:ee:c0:20:58:0d:6a:9b:
                    42:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:0E:E5:86:1F:8A:46:5D:4B:62:C3:AA:97:BB:45:03:8E:24:42:5C
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/nQ7lhh-KRl1LYsOql7tFA44kQlw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.114.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d7:c2:c3:91:d5:ed:17:f1:43:a3:c2:0c:f6:5d:2c:a2:06:55:
         b9:2b:60:b8:84:6d:96:5a:f3:e7:56:23:a0:c1:71:d3:dc:c6:
         db:00:f0:04:bc:9d:5f:80:80:df:65:44:48:38:0f:16:0d:f3:
         ae:f9:49:b8:80:d3:40:95:fe:0d:87:bf:68:e5:e9:e7:27:8e:
         2f:12:03:54:fd:97:52:a0:1e:87:1d:5d:50:6c:24:ff:2a:12:
         97:4d:ef:70:87:94:62:e2:0c:72:41:f3:3d:2c:a9:dd:fa:25:
         88:2f:bf:ac:5a:a7:cf:84:75:64:3c:91:39:60:60:2b:d0:57:
         da:eb:e0:00:c9:3c:43:4b:5b:62:b4:30:85:e1:85:08:53:7c:
         a5:8f:46:e0:38:3f:8a:d3:e5:7a:4c:7c:5d:5d:bd:66:01:47:
         74:c6:e6:37:ef:62:b0:bd:64:25:09:2a:2c:88:d9:c3:13:fe:
         47:5a:ba:41:a9:3b:79:e1:10:80:5f:af:e5:0b:ff:3a:52:1a:
         6e:35:11:73:f8:f0:0b:ec:fd:da:a1:67:0e:72:71:07:e8:1f:
         37:42:5c:9a:00:0c:61:1a:a4:3a:5c:72:6d:13:c9:67:f7:e2:
         e6:b4:e8:7a:ab:7f:5a:f6:da:87:e1:86:79:5c:fa:fd:06:75:
         d6:ed:b4:84
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBETANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQjA2
QjJFNEE5RDU2N0VCN0Q4MEZGNTlBNzU1RkQyODNCRkIxM0FCMB4XDTIyMDkwMTAx
MjI1MloXDTIzMDgxNTAxMzAwM1owMzExMC8GA1UEAxMoOUQwRUU1ODYxRjhBNDY1
RDRCNjJDM0FBOTdCQjQ1MDM4RTI0NDI1QzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMvFsB9ks15O8AyTze3sPxP2nyYoJwBLo2yS1vE1prk6QuDSzMhc
Ew7nZjznnDhcrmvdHz6YJWYt/q5k3NjGOjNd0DfOnoW/j/WWo1S9Uj8Iji/SmQZg
epteiGI+KkSR0oDVhclzD8NPMUCg43xclzNfCHhve5smJCx7GqKAwZMwbW0Hwt58
hXJnqmsoQlT2zObMKWy29BQOCoHT8D+Z/RGrp9wr3VMZWIRZSMQdbny2QGOg4YgU
qbFNjx8Iam4IuTfmMCLD7ZMKAQP32vjXiw+Y3B+TFZbH7LmmgKOOvt15vy4cVznv
6kHFtpArpD9DaBRRiKkdjZPuwCBYDWqbQjECAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSdDuWGH4pGXUtiw6qXu0UDjiRCXDAfBgNVHSMEGDAWgBT7BrLkqdVn632A/1mn
Vf0oO/sTqzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjcxLy13YXk1S25WWi10OWdQOVpwMVg5S0R2N0U2cy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLy13YXk1S25WWi10OWdQOVpwMVg5S0R2
N0U2cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC82NzEvblE3bGhoLUtSbDFMWXNPcWw3dEZBNDRrUWx3LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEActy+DANBgkqhkiG9w0BAQsFAAOCAQEA18LDkdXtF/FDo8IM9l0sogZVuStg
uIRtllrz51YjoMFx09zG2wDwBLydX4CA32VESDgPFg3zrvlJuIDTQJX+DYe/aOXp
5yeOLxIDVP2XUqAehx1dUGwk/yoSl03vcIeUYuIMckHzPSyp3foliC+/rFqnz4R1
ZDyROWBgK9BX2uvgAMk8Q0tbYrQwheGFCFN8pY9G4Dg/itPlekx8XV29ZgFHdMbm
N+9isL1kJQkqLIjZwxP+R1q6Qak7eeEQgF+v5Qv/OlIabjURc/jwC+z92qFnDnJx
B+gfN0JcmgAMYRqkOlxybRPJZ/fi5rToeqt/Wvbah+GGeVz6/QZ11u20hA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org