Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/699/l3a9PPoW-MA1esbD6VLgZv1xm1k.roa
File:                     l3a9PPoW-MA1esbD6VLgZv1xm1k.roa (raw, json)
Hash identifier:          e0s24KSIB7KjOP3SQYJbvccDaA5RpWUPsX38kOb34FU=
Subject key identifier:   97:76:BD:3C:FA:16:F8:C0:35:7A:C6:C3:E9:52:E0:66:FD:71:9B:59
Certificate issuer:       /CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130
Certificate serial:       3211
Authority key identifier: 65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/l3a9PPoW-MA1esbD6VLgZv1xm1k.roa
Signing time:             Sun 01 May 2022 01:30:25 +0000
ROA not before:           Sun 01 May 2022 01:30:25 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     7671
IP address blocks:        202.62.176.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12817 (0x3211)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130
        Validity
            Not Before: May  1 01:30:25 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=9776BD3CFA16F8C0357AC6C3E952E066FD719B59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b2:3e:a9:c1:84:c7:26:3a:53:18:73:f9:9d:
                    47:1d:7e:0e:39:db:5d:d2:e4:f4:ad:6b:eb:b0:de:
                    f4:be:bd:3c:20:e6:d1:dd:5b:76:5c:5f:eb:0d:f5:
                    a7:1b:1a:ac:d5:75:12:b7:15:b3:5a:6a:17:5e:a4:
                    6f:9e:4b:7c:56:0b:93:59:03:65:cc:24:5e:66:1a:
                    fa:fe:27:3e:d6:5d:90:cd:2d:c9:19:9b:34:2c:9c:
                    3c:e8:5e:3f:0f:b5:3d:a8:52:e2:f7:c3:44:cc:dd:
                    e7:ea:05:66:93:87:e3:8a:0b:cc:56:4a:1a:31:d9:
                    ed:66:e3:3b:13:01:79:0b:8e:f1:71:f2:43:52:34:
                    a9:24:21:26:03:e9:58:25:ba:d4:c9:ca:aa:1c:d1:
                    aa:7d:59:55:f1:9a:e4:fa:e9:a8:22:aa:7d:13:42:
                    db:0c:de:4b:2a:12:b6:5d:f3:f6:a2:a3:73:32:d4:
                    ae:a6:06:61:b2:7e:de:d3:f5:08:a4:79:38:aa:f3:
                    70:5c:7e:d2:30:15:da:4a:17:43:ac:13:e0:3a:64:
                    63:7a:27:77:0b:3c:d0:b1:d6:cb:fb:54:d3:9b:ce:
                    87:9b:fe:d8:1c:4e:5e:40:5e:68:e6:20:44:e1:64:
                    08:ee:c6:0c:02:2e:5d:d0:d6:7d:43:82:f0:01:bd:
                    c3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:76:BD:3C:FA:16:F8:C0:35:7A:C6:C3:E9:52:E0:66:FD:71:9B:59
            X509v3 Authority Key Identifier:
                keyid:65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/l3a9PPoW-MA1esbD6VLgZv1xm1k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.62.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         33:d7:33:5e:d2:4a:99:0a:31:05:40:49:7a:ab:f7:05:32:d5:
         4e:32:d1:20:82:dc:62:1e:eb:83:2f:db:7c:7e:33:e2:22:ce:
         da:95:b1:a0:47:2f:66:3f:d0:35:cb:e0:1c:41:f5:34:c0:47:
         28:58:85:a0:85:71:2a:d2:c5:71:38:ca:37:f8:56:33:7e:58:
         48:9a:27:a3:a9:54:17:81:7e:ce:2c:04:6a:fc:85:c6:18:86:
         c1:9e:1d:1c:13:17:d9:f9:07:a2:72:d8:86:bf:7f:93:15:7a:
         6c:16:6d:69:72:c8:43:9e:6d:6d:ab:6b:07:e5:ae:96:2d:c8:
         44:4a:93:0d:f8:c7:5d:03:ce:ea:c2:cb:1a:db:99:20:e7:3c:
         7a:60:a3:bf:3b:a9:aa:76:f2:f8:8b:de:9d:f6:05:37:64:b2:
         f2:5b:f5:1e:a7:e5:10:c3:67:ab:7b:1b:8d:ba:77:68:f5:d8:
         d8:91:a1:fc:6a:8a:d3:9f:ff:c2:90:b5:e1:cb:6d:d6:5f:fa:
         f7:5a:91:3e:75:e3:bb:b4:4f:6d:41:65:db:e2:15:ef:77:93:
         ac:95:cb:c8:3b:91:e5:27:e2:83:ee:8b:26:64:30:57:2e:2f:
         95:7e:13:df:cb:ae:3f:62:57:30:a0:e9:d8:e9:77:1a:98:18:
         49:8e:8d:c9
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICMhEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjUy
MkUyQzNFRjREOTNGMTNFNzU4QTgwN0E0MEE4RTFCRjlBQjEzMDAeFw0yMjA1MDEw
MTMwMjVaFw0yMzA0MjcwOTUyMzRaMDMxMTAvBgNVBAMTKDk3NzZCRDNDRkExNkY4
QzAzNTdBQzZDM0U5NTJFMDY2RkQ3MTlCNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzsj6pwYTHJjpTGHP5nUcdfg45213S5PSta+uw3vS+vTwg5tHd
W3ZcX+sN9acbGqzVdRK3FbNaahdepG+eS3xWC5NZA2XMJF5mGvr+Jz7WXZDNLckZ
mzQsnDzoXj8PtT2oUuL3w0TM3efqBWaTh+OKC8xWShox2e1m4zsTAXkLjvFx8kNS
NKkkISYD6VglutTJyqoc0ap9WVXxmuT66agiqn0TQtsM3ksqErZd8/aio3My1K6m
BmGyft7T9QikeTiq83BcftIwFdpKF0OsE+A6ZGN6J3cLPNCx1sv7VNObzoeb/tgc
Tl5AXmjmIEThZAjuxgwCLl3Q1n1DgvABvcNTAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUl3a9PPoW+MA1esbD6VLgZv1xm1kwHwYDVR0jBBgwFoAUZSLiw+9Nk/E+dYqA
ekCo4b+asTAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY5OS9aU0xpdy05TmtfRS1kWXFBZWtDbzRiLWFzVEEuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9aU0xpdy05TmtfRS1kWXFBZWtDbzRi
LWFzVEEuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjk5L2wzYTlQUG9XLU1BMWVzYkQ2VkxnWnYxeG0xay5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBATKPrAwDQYJKoZIhvcNAQELBQADggEBADPXM17SSpkKMQVASXqr9wUy1U4y
0SCC3GIe64Mv23x+M+IiztqVsaBHL2Y/0DXL4BxB9TTARyhYhaCFcSrSxXE4yjf4
VjN+WEiaJ6OpVBeBfs4sBGr8hcYYhsGeHRwTF9n5B6Jy2Ia/f5MVemwWbWlyyEOe
bW2rawflrpYtyERKkw34x10DzurCyxrbmSDnPHpgo787qap28viL3p32BTdksvJb
9R6n5RDDZ6t7G426d2j12NiRofxqitOf/8KQteHLbdZf+vdakT5147u0T21BZdvi
Fe93k6yVy8g7keUn4oPuiyZkMFcuL5V+E9/Lrj9iVzCg6djpdxqYGEmOjck=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org