Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/sDhvvDk_kl0Yc4EWWV6lUYdGcLk.roa
File:                     sDhvvDk_kl0Yc4EWWV6lUYdGcLk.roa (raw, json)
Hash identifier:          5rB3dwlNVKv4LLuLHadKdfIAj9xjYqftzM3URgKsvE8=
Subject key identifier:   B0:38:6F:BC:39:3F:92:5D:18:73:81:16:59:5E:A5:51:87:46:70:B9
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       44
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/sDhvvDk_kl0Yc4EWWV6lUYdGcLk.roa
Signing time:             Mon 17 Oct 2022 01:39:44 +0000
ROA not before:           Mon 17 Oct 2022 01:39:44 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9378
IP address blocks:        124.195.144.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 17 01:39:44 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=B0386FBC393F925D18738116595EA551874670B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:62:56:7d:01:57:c9:6c:b2:af:cb:35:56:1d:
                    62:19:36:cb:80:d4:85:e0:0b:2e:03:e6:af:19:91:
                    62:18:16:66:af:10:35:8a:1a:f5:a5:f2:9f:15:11:
                    5a:da:d2:c0:13:6e:73:34:fe:57:a6:ea:f6:cb:f4:
                    29:74:0e:69:32:eb:86:02:c8:44:6a:f0:cb:ab:92:
                    4d:c1:6b:22:47:74:93:88:f8:32:ed:e8:15:e0:39:
                    2b:1a:4d:16:d0:38:7f:e2:85:ec:ff:ab:a1:ae:a8:
                    42:d4:73:20:76:b4:4f:e8:83:a5:7b:a9:ad:ed:74:
                    a8:b2:23:0c:b3:2b:3a:30:03:88:59:85:3b:e1:88:
                    45:e4:50:11:8c:4b:54:15:f7:55:66:59:62:46:a6:
                    e4:f9:c1:99:64:0f:87:1a:2b:99:fe:c7:d5:7f:53:
                    2f:b9:26:57:31:32:5f:8a:c6:1e:ba:2d:da:d6:e8:
                    1e:0d:fa:c5:91:8e:62:bd:1c:f8:af:13:2a:8a:85:
                    78:fa:a2:0c:88:93:88:d3:97:0c:ef:bb:7b:cb:19:
                    a1:48:93:14:ec:98:c6:72:a0:60:d9:06:2d:85:bd:
                    f8:e5:93:1f:8a:4b:7a:cc:42:35:70:a3:48:4e:84:
                    bc:b6:2b:74:c7:61:f2:9a:ee:77:4e:c2:61:cb:12:
                    3c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:38:6F:BC:39:3F:92:5D:18:73:81:16:59:5E:A5:51:87:46:70:B9
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/sDhvvDk_kl0Yc4EWWV6lUYdGcLk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.195.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         cb:b9:97:b6:f0:02:56:c5:1c:86:5d:a1:06:d6:5c:31:7a:96:
         73:21:30:e1:23:56:04:17:63:a0:ed:2a:ba:f9:71:28:25:b0:
         4b:0f:49:af:40:14:8c:98:c1:98:d1:5a:dd:d0:94:72:2c:bf:
         dd:86:b4:66:6f:61:41:bc:b5:07:6b:c7:da:ce:92:04:e9:90:
         46:66:98:a1:4b:91:ea:51:7d:bb:1b:a9:fd:0f:47:1d:54:42:
         51:13:a2:b6:3e:11:58:8a:85:f4:39:65:c2:95:f1:08:52:31:
         25:ff:14:6a:87:cd:67:c0:1f:71:6b:e8:4e:4c:2f:9e:d4:06:
         d0:24:70:e0:f9:6d:81:70:9d:c2:49:b2:a9:e6:a5:96:a2:ae:
         ca:63:39:dc:3a:7e:5d:d9:54:76:90:5b:83:51:eb:e6:26:be:
         0b:99:a0:ec:fe:35:b5:06:f8:7f:c6:3e:bc:03:88:c7:16:7a:
         b0:bd:cf:89:2a:d3:63:b3:06:4f:42:71:91:34:f5:67:db:f3:
         a9:c2:18:31:75:d9:32:90:b1:80:96:8e:4c:e2:19:22:37:ef:
         78:2e:6f:ee:3a:de:46:a9:8f:73:5f:85:b8:46:d0:78:d3:e0:
         b8:f6:c1:9d:b9:38:21:40:12:de:16:56:a8:55:a8:86:d0:cb:
         d4:22:19:9a
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBRDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQjA2
QjJFNEE5RDU2N0VCN0Q4MEZGNTlBNzU1RkQyODNCRkIxM0FCMB4XDTIyMTAxNzAx
Mzk0NFoXDTIzMTAxNTAxMzAwMlowMzExMC8GA1UEAxMoQjAzODZGQkMzOTNGOTI1
RDE4NzM4MTE2NTk1RUE1NTE4NzQ2NzBCOTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL9iVn0BV8lssq/LNVYdYhk2y4DUheALLgPmrxmRYhgWZq8QNYoa
9aXynxURWtrSwBNuczT+V6bq9sv0KXQOaTLrhgLIRGrwy6uSTcFrIkd0k4j4Mu3o
FeA5KxpNFtA4f+KF7P+roa6oQtRzIHa0T+iDpXupre10qLIjDLMrOjADiFmFO+GI
ReRQEYxLVBX3VWZZYkam5PnBmWQPhxormf7H1X9TL7kmVzEyX4rGHrot2tboHg36
xZGOYr0c+K8TKoqFePqiDIiTiNOXDO+7e8sZoUiTFOyYxnKgYNkGLYW9+OWTH4pL
esxCNXCjSE6EvLYrdMdh8prud07CYcsSPA0CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSwOG+8OT+SXRhzgRZZXqVRh0ZwuTAfBgNVHSMEGDAWgBT7BrLkqdVn632A/1mn
Vf0oO/sTqzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjcxLy13YXk1S25WWi10OWdQOVpwMVg5S0R2N0U2cy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLy13YXk1S25WWi10OWdQOVpwMVg5S0R2
N0U2cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC82NzEvc0RodnZEa19rbDBZYzRFV1dWNmxVWWRHY0xrLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBHzDkDANBgkqhkiG9w0BAQsFAAOCAQEAy7mXtvACVsUchl2hBtZcMXqWcyEw
4SNWBBdjoO0quvlxKCWwSw9Jr0AUjJjBmNFa3dCUciy/3Ya0Zm9hQby1B2vH2s6S
BOmQRmaYoUuR6lF9uxup/Q9HHVRCUROitj4RWIqF9DllwpXxCFIxJf8UaofNZ8Af
cWvoTkwvntQG0CRw4PltgXCdwkmyqeallqKuymM53Dp+XdlUdpBbg1Hr5ia+C5mg
7P41tQb4f8Y+vAOIxxZ6sL3PiSrTY7MGT0JxkTT1Z9vzqcIYMXXZMpCxgJaOTOIZ
IjfveC5v7jreRqmPc1+FuEbQeNPguPbBnbk4IUAS3hZWqFWohtDL1CIZmg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org