Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/868/1wuOEzTIE2xxENewA9T8xsGqaJQ.roa
File:                     1wuOEzTIE2xxENewA9T8xsGqaJQ.roa (raw, json)
Hash identifier:          WDLyQO6tgnMnAEr0WBCZ8myZaSbSjS/D72QlQnxec78=
Subject key identifier:   D7:0B:8E:13:34:C8:13:6C:71:10:D7:B0:03:D4:FC:C6:C1:AA:68:94
Certificate issuer:       /CN=8D0962EDE0F5E21A7E8F9E1AB006FF940E04ED46
Certificate serial:       1A
Authority key identifier: 8D:09:62:ED:E0:F5:E2:1A:7E:8F:9E:1A:B0:06:FF:94:0E:04:ED:46
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQli7eD14hp-j54asAb_lA4E7UY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/1wuOEzTIE2xxENewA9T8xsGqaJQ.roa
Signing time:             Mon 01 May 2023 01:29:55 +0000
ROA not before:           Mon 01 May 2023 01:29:55 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     24271
IP address blocks:        202.177.80.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D0962EDE0F5E21A7E8F9E1AB006FF940E04ED46
        Validity
            Not Before: May  1 01:29:55 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=D70B8E1334C8136C7110D7B003D4FCC6C1AA6894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:80:2d:e2:76:3b:09:58:5e:43:a7:b4:c2:bf:
                    36:f7:ef:39:d7:4f:24:46:cc:e6:14:03:84:51:30:
                    c6:49:f1:d0:e2:25:5d:04:41:5f:01:9a:26:e7:36:
                    ce:0f:8e:2f:63:be:a1:04:48:47:a7:fa:e9:39:e6:
                    d1:38:52:ad:4d:a1:db:1c:5e:42:fd:07:a8:78:fd:
                    14:4d:b4:2e:b7:1c:5f:1e:fa:28:30:56:1f:17:68:
                    0f:19:d0:5a:0a:b2:2b:bd:db:cd:a7:e1:2c:c0:47:
                    c5:6a:7b:40:cf:04:be:69:05:83:e6:19:96:15:87:
                    c6:63:a8:99:44:90:2e:d9:c5:a6:3c:e5:50:e5:f1:
                    59:70:3b:b0:25:18:7d:84:04:a7:71:db:67:59:e3:
                    1c:b3:18:b5:b5:66:67:8c:0f:e5:9a:9d:e7:d0:c1:
                    b3:0b:8f:90:d8:17:0c:2c:6e:65:7d:58:d2:23:96:
                    21:91:60:29:56:30:8c:fc:1d:a0:15:0c:a6:ae:f0:
                    44:d7:86:31:f3:6d:7b:5a:9e:48:23:32:3c:7b:de:
                    83:c7:b8:5b:72:ef:12:92:f3:47:b9:cd:f8:da:44:
                    ba:58:7b:89:8e:a4:1d:3f:41:db:d8:b7:a2:fc:60:
                    09:5d:d9:69:20:01:12:07:a4:17:a0:43:74:f4:8e:
                    1d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:0B:8E:13:34:C8:13:6C:71:10:D7:B0:03:D4:FC:C6:C1:AA:68:94
            X509v3 Authority Key Identifier:
                keyid:8D:09:62:ED:E0:F5:E2:1A:7E:8F:9E:1A:B0:06:FF:94:0E:04:ED:46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/jQli7eD14hp-j54asAb_lA4E7UY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQli7eD14hp-j54asAb_lA4E7UY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/1wuOEzTIE2xxENewA9T8xsGqaJQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.177.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         54:33:e3:7d:ef:fb:61:b4:d8:9a:29:7e:eb:01:8e:81:0c:a3:
         c0:fb:d5:50:6f:b8:6d:e6:9a:07:6c:94:70:73:9b:20:e2:21:
         83:d6:58:73:78:f3:d1:31:79:9b:74:3e:0b:31:69:2f:54:71:
         ea:9c:5a:a9:52:83:72:ed:48:4b:6d:48:71:5a:26:65:02:ed:
         15:3f:1f:3b:2b:c9:ad:41:84:d2:b3:c4:6a:ab:4a:dd:c4:89:
         05:cc:c3:01:84:a9:f3:7e:52:44:4a:36:f3:4a:cb:0a:eb:98:
         94:5e:de:da:66:74:ef:57:99:d0:46:ac:4f:e5:93:02:9b:ed:
         14:32:d7:39:7b:80:b9:6b:b2:1d:5d:55:41:80:d7:34:cb:36:
         f1:5d:e5:7e:89:8f:8e:c8:9a:7b:79:ac:1f:d7:8b:0c:36:8e:
         a5:72:ba:aa:30:a0:4b:b9:2f:f8:44:85:a5:ec:51:c5:d3:83:
         97:97:12:0b:8a:13:01:46:85:6d:a3:53:de:4a:db:95:54:7e:
         e6:7d:8f:4b:e1:bd:29:fb:fb:2e:ff:1a:d6:c8:5a:06:67:b9:
         73:6e:ad:86:fa:6a:e7:35:b7:e1:c6:78:2b:91:a0:9e:a9:1f:
         29:e6:a3:72:5a:a4:82:8e:06:1a:38:ab:5f:ae:21:c7:85:76:
         1d:d3:a7:ac
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBGjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDA5
NjJFREUwRjVFMjFBN0U4RjlFMUFCMDA2RkY5NDBFMDRFRDQ2MB4XDTIzMDUwMTAx
Mjk1NVoXDTI0MDQxNDAxMzAwMlowMzExMC8GA1UEAxMoRDcwQjhFMTMzNEM4MTM2
QzcxMTBEN0IwMDNENEZDQzZDMUFBNjg5NDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALKALeJ2OwlYXkOntMK/NvfvOddPJEbM5hQDhFEwxknx0OIlXQRB
XwGaJuc2zg+OL2O+oQRIR6f66Tnm0ThSrU2h2xxeQv0HqHj9FE20LrccXx76KDBW
HxdoDxnQWgqyK73bzafhLMBHxWp7QM8EvmkFg+YZlhWHxmOomUSQLtnFpjzlUOXx
WXA7sCUYfYQEp3HbZ1njHLMYtbVmZ4wP5Zqd59DBswuPkNgXDCxuZX1Y0iOWIZFg
KVYwjPwdoBUMpq7wRNeGMfNte1qeSCMyPHveg8e4W3LvEpLzR7nN+NpEulh7iY6k
HT9B29i3ovxgCV3ZaSABEgekF6BDdPSOHckCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTXC44TNMgTbHEQ17AD1PzGwapolDAfBgNVHSMEGDAWgBSNCWLt4PXiGn6Pnhqw
Bv+UDgTtRjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODY4L2pRbGk3ZUQxNGhwLWo1NGFzQWJfbEE0RTdVWS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pRbGk3ZUQxNGhwLWo1NGFzQWJfbEE0
RTdVWS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84NjgvMXd1T0V6VElFMnh4RU5ld0E5VDh4c0dxYUpRLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBMqxUDANBgkqhkiG9w0BAQsFAAOCAQEAVDPjfe/7YbTYmil+6wGOgQyjwPvV
UG+4beaaB2yUcHObIOIhg9ZYc3jz0TF5m3Q+CzFpL1Rx6pxaqVKDcu1IS21IcVom
ZQLtFT8fOyvJrUGE0rPEaqtK3cSJBczDAYSp835SREo280rLCuuYlF7e2mZ071eZ
0EasT+WTApvtFDLXOXuAuWuyHV1VQYDXNMs28V3lfomPjsiae3msH9eLDDaOpXK6
qjCgS7kv+ESFpexRxdODl5cSC4oTAUaFbaNT3krblVR+5n2PS+G9Kfv7Lv8a1sha
Bme5c26thvpq5zW34cZ4K5GgnqkfKeajclqkgo4GGjirX64hx4V2HdOnrA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org