Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/877/vklITghcXQDhC3QC9jAfGpUumLg.roa
File:                     vklITghcXQDhC3QC9jAfGpUumLg.roa (raw, json)
Hash identifier:          66BYWCdAq4VK4M2YVBrLwoALpTGeUWXz0TZ4JbIh9fs=
Subject key identifier:   BE:49:48:4E:08:5C:5D:00:E1:0B:74:02:F6:30:1F:1A:95:2E:98:B8
Certificate issuer:       /CN=1933DE3EF96450CA120C77A5EA826434DD149549
Certificate serial:       19
Authority key identifier: 19:33:DE:3E:F9:64:50:CA:12:0C:77:A5:EA:82:64:34:DD:14:95:49
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/vklITghcXQDhC3QC9jAfGpUumLg.roa
Signing time:             Wed 15 Mar 2023 00:13:56 +0000
ROA not before:           Wed 15 Mar 2023 00:13:56 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     55385
IP address blocks:        202.174.56.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1933DE3EF96450CA120C77A5EA826434DD149549
        Validity
            Not Before: Mar 15 00:13:56 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=BE49484E085C5D00E10B7402F6301F1A952E98B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:94:18:fe:97:51:55:f9:a5:cf:26:83:70:bb:
                    0d:fd:d9:da:04:05:22:90:be:c2:5b:aa:b8:74:8e:
                    58:1a:8d:e2:e1:ca:75:a6:72:a4:6d:8c:05:99:8e:
                    99:d3:ee:8c:90:16:48:ee:98:2f:61:8b:e7:f6:20:
                    f2:3e:b0:ba:2b:ff:04:04:bc:90:f6:9d:55:8a:80:
                    90:d7:1c:80:97:aa:5c:24:f5:2e:75:50:67:cb:3a:
                    79:b5:fc:75:d5:62:77:88:ca:e8:35:7b:12:48:5b:
                    19:16:1b:24:64:d2:fe:d6:1b:cb:66:59:48:76:fe:
                    96:e6:64:88:5b:b3:a3:ff:a0:bb:bc:32:fd:fb:d0:
                    fe:d6:22:e7:91:bd:05:c5:8f:c2:49:90:90:c5:e1:
                    6e:6b:f5:f4:b9:01:2b:cb:65:35:5a:b3:a0:26:17:
                    66:3d:fb:8c:e4:3c:3a:47:26:a4:b6:28:9d:ba:6c:
                    dd:ad:33:0c:45:80:8a:e2:e4:cf:8f:69:14:2d:37:
                    4d:e4:16:46:e6:b5:ef:24:5e:84:2a:14:2c:f9:07:
                    1d:5f:9d:4a:a3:1c:96:17:86:20:94:75:bc:c5:b0:
                    5d:8a:e1:f5:4b:00:b0:3e:a0:dd:b7:96:ce:23:4c:
                    20:38:b9:59:82:99:f1:a4:e5:f0:22:da:d8:86:66:
                    56:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:49:48:4E:08:5C:5D:00:E1:0B:74:02:F6:30:1F:1A:95:2E:98:B8
            X509v3 Authority Key Identifier:
                keyid:19:33:DE:3E:F9:64:50:CA:12:0C:77:A5:EA:82:64:34:DD:14:95:49

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/vklITghcXQDhC3QC9jAfGpUumLg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.174.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:6c:a4:22:89:15:f4:88:40:24:51:c2:3b:91:13:61:3f:45:
         85:ee:72:7a:ab:19:58:1d:ac:d2:75:91:ba:1a:57:dc:29:96:
         f4:51:e7:4b:ce:d5:5a:33:73:b6:d6:89:13:9d:92:58:56:21:
         ad:ae:5d:e8:a1:e6:70:44:a6:69:d3:a3:8b:ec:b9:f9:02:89:
         1f:4a:93:84:d9:31:93:a0:c2:b1:74:a3:fe:3f:09:6c:d1:d0:
         30:4b:bb:1e:b5:90:83:97:e4:ec:dd:11:cf:71:21:13:32:f1:
         80:ca:23:57:3a:a3:5c:e3:0d:dc:00:6a:a2:c6:6d:1a:1f:47:
         7f:19:12:72:9b:0b:74:f5:38:82:8e:a8:da:b5:67:8d:84:4b:
         0e:0d:9b:52:34:f7:07:3c:22:1b:40:c5:f8:34:d3:52:6a:d6:
         eb:66:cd:7e:46:ba:28:ab:e5:3c:88:f3:93:9c:9c:a5:cd:6e:
         fa:5f:54:2a:07:0a:e7:27:db:98:fa:31:e8:f2:c4:13:5c:51:
         60:80:fb:5b:da:40:dd:69:ae:36:2e:9d:fc:ab:c7:4b:a0:ed:
         f0:51:10:20:44:67:f6:ed:ad:1e:4b:91:c8:de:b5:c8:e1:a8:
         f8:a4:dc:9a:cc:b6:e7:31:03:e1:91:54:84:4d:e3:02:8c:03:
         d9:36:29:62
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBGTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxOTMz
REUzRUY5NjQ1MENBMTIwQzc3QTVFQTgyNjQzNEREMTQ5NTQ5MB4XDTIzMDMxNTAw
MTM1NloXDTI0MDIxNTAxMzAwM1owMzExMC8GA1UEAxMoQkU0OTQ4NEUwODVDNUQw
MEUxMEI3NDAyRjYzMDFGMUE5NTJFOThCODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKWUGP6XUVX5pc8mg3C7Df3Z2gQFIpC+wluquHSOWBqN4uHKdaZy
pG2MBZmOmdPujJAWSO6YL2GL5/Yg8j6wuiv/BAS8kPadVYqAkNccgJeqXCT1LnVQ
Z8s6ebX8ddVid4jK6DV7EkhbGRYbJGTS/tYby2ZZSHb+luZkiFuzo/+gu7wy/fvQ
/tYi55G9BcWPwkmQkMXhbmv19LkBK8tlNVqzoCYXZj37jOQ8OkcmpLYonbps3a0z
DEWAiuLkz49pFC03TeQWRua17yRehCoULPkHHV+dSqMclheGIJR1vMWwXYrh9UsA
sD6g3beWziNMIDi5WYKZ8aTl8CLa2IZmVjkCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBS+SUhOCFxdAOELdAL2MB8alS6YuDAfBgNVHSMEGDAWgBQZM94++WRQyhIMd6Xq
gmQ03RSVSTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODc3L0dUUGVQdmxrVU1vU0RIZWw2b0prTk4wVWxVay5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0dUUGVQdmxrVU1vU0RIZWw2b0prTk4w
VWxVay5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84NzcvdmtsSVRnaGNYUURoQzNRQzlqQWZHcFV1bUxnLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAcquODANBgkqhkiG9w0BAQsFAAOCAQEAkmykIokV9IhAJFHCO5ETYT9Fhe5y
eqsZWB2s0nWRuhpX3CmW9FHnS87VWjNzttaJE52SWFYhra5d6KHmcESmadOji+y5
+QKJH0qThNkxk6DCsXSj/j8JbNHQMEu7HrWQg5fk7N0Rz3EhEzLxgMojVzqjXOMN
3ABqosZtGh9HfxkScpsLdPU4go6o2rVnjYRLDg2bUjT3BzwiG0DF+DTTUmrW62bN
fka6KKvlPIjzk5ycpc1u+l9UKgcK5yfbmPox6PLEE1xRYID7W9pA3WmuNi6d/KvH
S6Dt8FEQIERn9u2tHkuRyN61yOGo+KTcmsy25zED4ZFUhE3jAowD2TYpYg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org