Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/718/T8jztlb86mBn3ro4ShGAYsOvt3w.roa
File:                     T8jztlb86mBn3ro4ShGAYsOvt3w.roa (raw, json)
Hash identifier:          r7g+iTX96+aN5INeOHvAi1BMp0+vH5vQcTed88A4JCE=
Subject key identifier:   4F:C8:F3:B6:56:FC:EA:60:67:DE:BA:38:4A:11:80:62:C3:AF:B7:7C
Certificate issuer:       /CN=70124EAB896039E137736AA7022F934D797F5684
Certificate serial:       17
Authority key identifier: 70:12:4E:AB:89:60:39:E1:37:73:6A:A7:02:2F:93:4D:79:7F:56:84
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/T8jztlb86mBn3ro4ShGAYsOvt3w.roa
Signing time:             Fri 31 Mar 2023 08:15:59 +0000
ROA not before:           Fri 31 Mar 2023 08:15:59 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     18094
IP address blocks:        219.109.192.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70124EAB896039E137736AA7022F934D797F5684
        Validity
            Not Before: Mar 31 08:15:59 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=4FC8F3B656FCEA6067DEBA384A118062C3AFB77C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:dd:55:d2:3e:06:d3:4c:07:d4:db:76:49:44:
                    92:c0:59:de:53:1a:fd:1d:a0:be:03:fd:5e:67:79:
                    d1:27:f3:98:bc:07:4c:99:ad:13:9b:0e:cc:f0:a1:
                    0d:68:52:43:30:97:82:e6:3e:9f:72:e2:b7:92:e2:
                    39:2c:87:54:c7:4a:2e:e3:49:65:53:4e:15:31:d9:
                    9a:d7:57:0a:5f:d7:af:f1:41:4c:f2:cb:e8:18:f2:
                    d3:73:8e:ef:c0:9a:a1:d4:d5:98:6a:bc:0e:ab:8d:
                    e8:55:40:6e:45:93:88:53:63:ce:e5:b1:13:e5:dc:
                    8e:d7:0d:1e:97:50:04:c8:74:72:8a:df:cf:ec:6a:
                    ab:b1:6f:e3:76:ed:21:0a:13:9f:64:1e:40:0d:ee:
                    e3:17:d1:3c:45:29:49:ce:df:dc:6e:dd:67:95:f2:
                    06:ec:e3:bf:4b:ca:0e:0c:1b:3d:56:c5:63:94:d6:
                    f3:7b:35:46:0f:6e:e8:f7:96:c8:ae:18:a6:49:b6:
                    f0:83:86:60:f0:f0:ac:04:67:32:e1:6d:f7:75:43:
                    e1:7f:e6:27:fd:28:cd:82:bc:52:e3:1f:5e:64:b8:
                    8a:08:70:f9:de:76:9f:32:c8:a6:1b:32:d9:bd:30:
                    dc:af:46:54:01:9d:f2:b1:99:1d:cf:08:cc:08:d4:
                    62:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:C8:F3:B6:56:FC:EA:60:67:DE:BA:38:4A:11:80:62:C3:AF:B7:7C
            X509v3 Authority Key Identifier:
                keyid:70:12:4E:AB:89:60:39:E1:37:73:6A:A7:02:2F:93:4D:79:7F:56:84

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/T8jztlb86mBn3ro4ShGAYsOvt3w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.109.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         81:ef:22:ea:0e:d3:1d:61:fd:30:1e:18:ad:54:c2:08:5a:2e:
         dc:ff:8b:26:74:c4:b0:b2:71:f6:0f:65:ca:da:9b:12:97:a6:
         ed:cc:1d:a6:a6:83:ab:58:1a:1c:dd:05:cb:fd:b6:29:57:57:
         36:9b:ae:be:94:80:ca:fe:e4:2d:89:1f:8e:5a:7c:0c:3d:d8:
         3f:de:33:61:83:ae:ca:58:8f:b0:c8:c5:61:68:fe:56:6f:dc:
         7e:4f:c2:1e:c4:22:89:b9:60:46:34:0d:d2:63:0e:9e:0d:08:
         0a:a3:d1:45:f0:42:ad:98:43:ea:96:58:17:b8:35:f3:7d:9b:
         77:c8:f9:e3:4b:a6:a5:3e:b5:1f:44:a7:8e:eb:c8:d7:0d:84:
         49:2d:b0:3e:4f:c4:4f:64:ea:82:d9:f0:49:0b:f0:26:3e:bf:
         fb:b4:00:b8:b7:c5:a5:a0:c9:8f:ff:77:96:b3:fe:1e:5d:6a:
         9b:c4:ae:68:b9:72:9b:b8:43:da:3f:ff:70:29:17:7a:96:1e:
         18:8f:d7:03:b9:74:3a:5d:9f:5c:09:70:90:73:00:2d:f1:d4:
         29:1e:7f:a9:49:9a:bb:e7:4e:9c:5e:1e:bf:97:ca:7a:18:ff:
         f0:f4:f0:ff:9c:d2:b7:cc:6e:ab:e5:3d:27:cd:eb:2a:d0:cb:
         39:12:16:a2
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3MDEy
NEVBQjg5NjAzOUUxMzc3MzZBQTcwMjJGOTM0RDc5N0Y1Njg0MB4XDTIzMDMzMTA4
MTU1OVoXDTI0MDMxNDAxMzAwMlowMzExMC8GA1UEAxMoNEZDOEYzQjY1NkZDRUE2
MDY3REVCQTM4NEExMTgwNjJDM0FGQjc3QzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOTdVdI+BtNMB9TbdklEksBZ3lMa/R2gvgP9Xmd50SfzmLwHTJmt
E5sOzPChDWhSQzCXguY+n3Lit5LiOSyHVMdKLuNJZVNOFTHZmtdXCl/Xr/FBTPLL
6Bjy03OO78CaodTVmGq8DquN6FVAbkWTiFNjzuWxE+XcjtcNHpdQBMh0corfz+xq
q7Fv43btIQoTn2QeQA3u4xfRPEUpSc7f3G7dZ5XyBuzjv0vKDgwbPVbFY5TW83s1
Rg9u6PeWyK4Ypkm28IOGYPDwrARnMuFt93VD4X/mJ/0ozYK8UuMfXmS4ighw+d52
nzLIphsy2b0w3K9GVAGd8rGZHc8IzAjUYqUCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRPyPO2VvzqYGfeujhKEYBiw6+3fDAfBgNVHSMEGDAWgBRwEk6riWA54TdzaqcC
L5NNeX9WhDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNzE4L2NCSk9xNGxnT2VFM2MycW5BaS1UVFhsX1ZvUS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2NCSk9xNGxnT2VFM2MycW5BaS1UVFhs
X1ZvUS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC83MTgvVDhqenRsYjg2bUJuM3JvNFNoR0FZc092dDN3LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBNttwDANBgkqhkiG9w0BAQsFAAOCAQEAge8i6g7THWH9MB4YrVTCCFou3P+L
JnTEsLJx9g9lytqbEpem7cwdpqaDq1gaHN0Fy/22KVdXNpuuvpSAyv7kLYkfjlp8
DD3YP94zYYOuyliPsMjFYWj+Vm/cfk/CHsQiiblgRjQN0mMOng0ICqPRRfBCrZhD
6pZYF7g1832bd8j540umpT61H0SnjuvI1w2ESS2wPk/ET2TqgtnwSQvwJj6/+7QA
uLfFpaDJj/93lrP+Hl1qm8SuaLlym7hD2j//cCkXepYeGI/XA7l0Ol2fXAlwkHMA
LfHUKR5/qUmau+dOnF4ev5fKehj/8PTw/5zSt8xuq+U9J83rKtDLORIWog==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org