Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/nwZHnSzE0MNYmjMXWQXt15hX_8k.roa
File:                     nwZHnSzE0MNYmjMXWQXt15hX_8k.roa (raw, json)
Hash identifier:          P/iVKdtZa+6XXqQDy+UIe6J1e19qmgUkOVdPPDghyiU=
Subject key identifier:   9F:06:47:9D:2C:C4:D0:C3:58:9A:33:17:59:05:ED:D7:98:57:FF:C9
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       20
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/nwZHnSzE0MNYmjMXWQXt15hX_8k.roa
Signing time:             Tue 11 Oct 2022 01:31:56 +0000
ROA not before:           Tue 11 Oct 2022 01:31:56 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     9824
IP address blocks:        203.114.248.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 11 01:31:56 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=9F06479D2CC4D0C3589A33175905EDD79857FFC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a6:75:d2:a5:9f:a6:9f:6a:b5:17:3f:43:25:
                    de:b1:c4:01:b3:7d:cc:62:48:bb:39:60:d7:41:77:
                    09:b3:8c:9b:64:6e:89:fd:d4:61:30:2b:33:37:5e:
                    6d:1f:66:f8:67:52:1a:1a:56:c5:7e:13:d6:a8:10:
                    6a:5b:ef:9d:72:49:42:71:86:5e:e7:b4:03:ca:2d:
                    3f:ec:61:4b:de:47:4b:69:09:ac:7a:7e:61:74:0e:
                    48:88:a3:fd:86:a6:72:ee:86:25:9a:42:42:bf:a0:
                    85:f9:a0:b4:e6:1e:73:75:9f:e1:fb:64:30:19:2e:
                    e5:8c:de:d5:d2:10:7d:9a:97:c8:53:6f:47:3a:30:
                    2f:9e:11:55:02:08:9e:0b:16:43:bc:46:b7:91:85:
                    b5:c2:9a:3e:7d:1d:ba:32:e2:98:86:81:1d:f4:c1:
                    35:85:a7:d4:b6:f4:34:6a:d6:c8:98:a0:fb:0d:88:
                    e3:6b:38:60:b7:64:f7:9f:db:30:5a:7f:70:f7:d1:
                    f6:0b:07:09:00:11:72:f7:22:fe:b5:3d:13:48:95:
                    bd:07:f4:52:f2:27:60:d7:10:f9:37:34:a6:5a:58:
                    39:66:d1:48:bd:b1:62:05:82:8f:79:0e:fd:a2:bb:
                    9d:52:a8:96:85:ee:94:fe:6f:ce:ac:a5:40:b9:ba:
                    83:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:06:47:9D:2C:C4:D0:C3:58:9A:33:17:59:05:ED:D7:98:57:FF:C9
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/nwZHnSzE0MNYmjMXWQXt15hX_8k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.114.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:f2:d2:67:72:9b:e4:55:e1:c1:15:ba:29:3d:a9:3f:e2:b1:
         6b:8b:67:33:31:e7:0e:de:23:54:63:07:7f:ae:b1:3f:d8:61:
         f4:4e:e8:6d:57:68:42:9f:e6:35:b3:e8:c5:16:b2:0e:68:b2:
         00:12:94:65:66:b3:95:03:3b:63:ba:81:05:94:9e:53:f0:c8:
         be:3e:14:f6:7e:88:f9:df:d4:b1:c4:fe:7f:a5:24:23:17:7e:
         5d:a4:fb:e6:1c:f6:7e:8d:5e:ca:3a:4d:38:2e:a5:be:94:0c:
         94:1d:b1:64:10:79:24:fe:95:ad:ae:7b:12:ad:48:23:6c:97:
         82:26:df:e6:39:07:7b:c7:ef:20:1c:d1:a6:75:13:f4:3f:18:
         c2:bd:98:07:16:8f:87:b2:c2:9a:88:4b:1c:73:b0:e2:36:cd:
         f9:d7:7f:c0:82:00:66:82:01:14:1d:56:bc:06:3e:2e:7b:8f:
         e3:3e:76:68:d0:1c:77:9a:a8:55:46:8a:31:6f:b9:db:f2:19:
         3c:e1:8c:12:58:5a:be:50:24:c3:b8:fe:c9:5a:c5:f1:e6:80:
         b5:9c:a4:1a:ec:59:91:61:d4:5e:a7:30:4b:0e:d2:be:71:68:
         ce:35:6e:a9:00:35:f0:7a:50:50:9c:58:d5:96:0c:7f:93:5b:
         58:da:a3:c9
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBIDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQjA2
QjJFNEE5RDU2N0VCN0Q4MEZGNTlBNzU1RkQyODNCRkIxM0FCMB4XDTIyMTAxMTAx
MzE1NloXDTIzMDkxNTAxMzAwM1owMzExMC8GA1UEAxMoOUYwNjQ3OUQyQ0M0RDBD
MzU4OUEzMzE3NTkwNUVERDc5ODU3RkZDOTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL2mddKln6afarUXP0Ml3rHEAbN9zGJIuzlg10F3CbOMm2Ruif3U
YTArMzdebR9m+GdSGhpWxX4T1qgQalvvnXJJQnGGXue0A8otP+xhS95HS2kJrHp+
YXQOSIij/Yamcu6GJZpCQr+ghfmgtOYec3Wf4ftkMBku5Yze1dIQfZqXyFNvRzow
L54RVQIIngsWQ7xGt5GFtcKaPn0dujLimIaBHfTBNYWn1Lb0NGrWyJig+w2I42s4
YLdk95/bMFp/cPfR9gsHCQARcvci/rU9E0iVvQf0UvInYNcQ+Tc0plpYOWbRSL2x
YgWCj3kO/aK7nVKoloXulP5vzqylQLm6g0MCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSfBkedLMTQw1iaMxdZBe3XmFf/yTAfBgNVHSMEGDAWgBT7BrLkqdVn632A/1mn
Vf0oO/sTqzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjcxLy13YXk1S25WWi10OWdQOVpwMVg5S0R2N0U2cy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLy13YXk1S25WWi10OWdQOVpwMVg5S0R2
N0U2cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC82NzEvbndaSG5TekUwTU5ZbWpNWFdRWHQxNWhYXzhrLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAsty+DANBgkqhkiG9w0BAQsFAAOCAQEAGPLSZ3Kb5FXhwRW6KT2pP+Kxa4tn
MzHnDt4jVGMHf66xP9hh9E7obVdoQp/mNbPoxRayDmiyABKUZWazlQM7Y7qBBZSe
U/DIvj4U9n6I+d/UscT+f6UkIxd+XaT75hz2fo1eyjpNOC6lvpQMlB2xZBB5JP6V
ra57Eq1II2yXgibf5jkHe8fvIBzRpnUT9D8Ywr2YBxaPh7LCmohLHHOw4jbN+dd/
wIIAZoIBFB1WvAY+LnuP4z52aNAcd5qoVUaKMW+52/IZPOGMElhavlAkw7j+yVrF
8eaAtZykGuxZkWHUXqcwSw7SvnFozjVuqQA18HpQUJxY1ZYMf5NbWNqjyQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org