Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/mEzA3ExVSiEOlctTd_VX7vVwxrk.roa
File:                     mEzA3ExVSiEOlctTd_VX7vVwxrk.roa (raw, json)
Hash identifier:          ICe95prayXPOfwuVRJZM2gLc5aWlyjlj+2E50RwROIg=
Subject key identifier:   98:4C:C0:DC:4C:55:4A:21:0E:95:CB:53:77:F5:57:EE:F5:70:C6:B9
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       05
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/mEzA3ExVSiEOlctTd_VX7vVwxrk.roa
Signing time:             Thu 20 Oct 2022 06:18:21 +0000
ROA not before:           Thu 20 Oct 2022 06:18:21 +0000
ROA not after:            Fri 20 Oct 2023 06:07:19 +0000
asID:                     9374
IP address blocks:        116.89.208.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Oct 20 06:18:21 2022 GMT
            Not After : Oct 20 06:07:19 2023 GMT
        Subject: CN=984CC0DC4C554A210E95CB5377F557EEF570C6B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e8:ec:ad:aa:23:7d:37:16:90:19:19:a2:75:
                    68:7c:03:b9:7b:cf:b2:2a:20:75:4a:b9:88:05:54:
                    07:70:8a:65:ad:f0:71:93:0e:54:7c:33:1d:9a:5e:
                    4a:fa:fd:2e:6b:16:f5:79:6b:6d:c9:4f:51:05:c8:
                    0b:11:0e:27:03:e2:15:57:d2:01:57:b5:98:98:a9:
                    78:9a:00:b9:b9:60:c3:f9:66:67:a5:72:fa:31:03:
                    68:35:91:31:ec:4d:54:58:02:ee:7e:fb:bb:81:ed:
                    4b:8e:19:67:77:dd:3b:3c:f9:57:74:6f:eb:aa:25:
                    90:4f:13:fc:fa:72:61:58:bb:3a:9b:6a:e5:75:cf:
                    73:75:96:34:e2:ae:b9:9d:ec:95:b7:d0:a9:d7:67:
                    ce:b0:fb:46:56:b0:f2:08:20:21:96:58:36:aa:90:
                    9b:98:10:63:18:88:0c:4b:1d:49:f1:fd:21:cc:0a:
                    1a:5f:d8:67:53:a4:f5:94:a2:e1:78:74:dc:d3:fa:
                    01:5e:9d:dc:f7:1d:b5:9a:4a:1f:7e:61:29:3f:bb:
                    5a:29:1f:8b:32:85:6e:ca:47:b9:7d:3b:76:07:16:
                    f4:45:18:7f:e7:e4:94:e2:40:44:84:35:74:32:70:
                    78:75:c2:a2:bb:58:5d:62:50:ef:be:25:64:42:4c:
                    ab:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:4C:C0:DC:4C:55:4A:21:0E:95:CB:53:77:F5:57:EE:F5:70:C6:B9
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/mEzA3ExVSiEOlctTd_VX7vVwxrk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.89.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0b:ea:7b:9b:b0:43:19:17:78:c2:d8:d2:90:0b:2d:6b:43:9f:
         45:e3:e6:bc:60:23:7a:ff:20:d1:60:c6:6c:8c:51:21:ee:eb:
         a4:2d:54:15:ea:30:ee:71:92:29:56:b5:40:3e:6c:47:3d:1f:
         94:8e:b2:0f:45:15:86:cf:c5:56:ad:8e:69:68:4e:4d:f5:ff:
         ea:db:0b:2e:cc:85:13:85:83:36:f2:90:89:b6:45:82:69:56:
         3f:06:8d:e3:1b:95:4d:19:48:dc:59:f5:26:6d:fd:d1:59:e3:
         75:bf:40:1c:5c:d7:de:2e:f2:a3:f8:81:18:4c:a3:16:e3:02:
         c7:13:47:f6:97:76:a5:0b:8c:af:68:3b:c6:b2:eb:35:4d:4c:
         de:7d:1e:58:b9:db:98:5f:bf:fc:ea:23:8a:08:72:15:7d:ff:
         54:18:f1:a4:d3:74:96:27:1f:53:7e:cc:6e:6a:78:f5:4b:4e:
         b1:5f:48:43:55:ed:4e:94:36:47:bc:1b:0b:ba:d0:e5:51:24:
         75:60:5d:3c:19:cd:f1:e1:17:5b:f0:93:bc:8a:7d:92:0d:4c:
         df:06:7d:03:0c:7b:44:d3:26:58:82:94:c5:34:53:ce:a0:51:
         e0:12:6b:2b:4b:b6:7d:a3:56:84:7d:e5:b5:85:57:2d:4e:88:
         4a:2f:3d:1e
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIBBTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2NURF
NTJFNjRCRTQzRTMyOEFBNjlGM0FCMkQzNDdGODgzM0VDNjM3MB4XDTIyMTAyMDA2
MTgyMVoXDTIzMTAyMDA2MDcxOVowMzExMC8GA1UEAxMoOTg0Q0MwREM0QzU1NEEy
MTBFOTVDQjUzNzdGNTU3RUVGNTcwQzZCOTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMTo7K2qI303FpAZGaJ1aHwDuXvPsiogdUq5iAVUB3CKZa3wcZMO
VHwzHZpeSvr9LmsW9XlrbclPUQXICxEOJwPiFVfSAVe1mJipeJoAublgw/lmZ6Vy
+jEDaDWRMexNVFgC7n77u4HtS44ZZ3fdOzz5V3Rv66olkE8T/PpyYVi7Optq5XXP
c3WWNOKuuZ3slbfQqddnzrD7Rlaw8gggIZZYNqqQm5gQYxiIDEsdSfH9IcwKGl/Y
Z1Ok9ZSi4Xh03NP6AV6d3PcdtZpKH35hKT+7WikfizKFbspHuX07dgcW9EUYf+fk
lOJARIQ1dDJweHXCortYXWJQ774lZEJMq0UCAwEAAaOCAiIwggIeMB0GA1UdDgQW
BBSYTMDcTFVKIQ6Vy1N39Vfu9XDGuTAfBgNVHSMEGDAWgBRl3lLmS+Q+Moqmnzqy
00f4gz7GNzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjgvWmQ1UzVrdmtQaktLcHA4NnN0TkgtSU0teGpjLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWmQ1UzVrdmtQaktLcHA4NnN0TkgtSU0t
eGpjLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzY4L21FekEzRXhWU2lFT2xjdFRkX1ZYN3ZWd3hyay5yb2EwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAR0WdAwDQYJKoZIhvcNAQELBQADggEBAAvqe5uwQxkXeMLY0pALLWtDn0Xj5rxg
I3r/INFgxmyMUSHu66QtVBXqMO5xkilWtUA+bEc9H5SOsg9FFYbPxVatjmloTk31
/+rbCy7MhROFgzbykIm2RYJpVj8GjeMblU0ZSNxZ9SZt/dFZ43W/QBxc194u8qP4
gRhMoxbjAscTR/aXdqULjK9oO8ay6zVNTN59Hli525hfv/zqI4oIchV9/1QY8aTT
dJYnH1N+zG5qePVLTrFfSENV7U6UNke8Gwu60OVRJHVgXTwZzfHhF1vwk7yKfZIN
TN8GfQMMe0TTJliClMU0U86gUeASaytLtn2jVoR95bWFVy1OiEovPR4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org