Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/881/JWO8xpMyFir5hgPlZwSHPIneWC8.roa
File:                     JWO8xpMyFir5hgPlZwSHPIneWC8.roa (raw, json)
Hash identifier:          V9zUZWwuoPXoR0WylB6ETsirvLxeirE8HxsRYmA9KjQ=
Subject key identifier:   25:63:BC:C6:93:32:16:2A:F9:86:03:E5:67:04:87:3C:89:DE:58:2F
Certificate issuer:       /CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0
Certificate serial:       25
Authority key identifier: D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/JWO8xpMyFir5hgPlZwSHPIneWC8.roa
Signing time:             Tue 01 Nov 2022 01:28:26 +0000
ROA not before:           Tue 01 Nov 2022 01:28:26 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     23805
IP address blocks:        219.100.80.0/22 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0
        Validity
            Not Before: Nov  1 01:28:26 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=2563BCC69332162AF98603E56704873C89DE582F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:da:22:36:84:89:9e:18:52:76:03:91:37:34:
                    99:0d:73:7c:cb:dd:71:1f:35:a6:29:0b:7f:33:92:
                    b6:11:e8:f3:a7:b6:5f:59:cb:bb:cb:26:83:d6:e5:
                    0f:be:33:d8:04:67:a9:9e:96:6b:a2:93:5b:ce:27:
                    d8:b7:c0:11:31:95:af:eb:de:87:53:5e:d8:7c:df:
                    9a:a6:ea:ff:00:90:e3:20:dc:55:1a:e0:9f:01:dd:
                    cf:4d:f1:89:3d:04:63:9c:22:60:dc:cf:68:b2:d3:
                    42:d4:2d:15:86:39:a6:e3:48:3c:25:29:86:26:62:
                    e7:4f:23:ff:cb:2c:a4:56:b3:83:77:55:bc:3a:84:
                    77:23:9b:36:49:be:23:32:53:7c:f4:db:95:a5:39:
                    42:6e:91:58:94:e8:06:8f:3a:54:32:71:c0:6c:fd:
                    90:dd:e3:35:f4:f9:60:1f:19:82:92:86:9c:ca:ee:
                    f7:3f:4a:ad:2d:b1:62:5a:37:16:e6:78:e6:f7:30:
                    bf:11:13:75:5a:6f:6e:aa:14:2a:b9:67:39:91:de:
                    6c:e4:c6:cc:69:4a:29:7b:bc:fa:d8:2b:90:87:62:
                    71:e0:97:e6:66:b2:49:c9:38:10:61:4e:fe:c2:71:
                    eb:cd:3d:75:c9:c2:28:17:ed:81:4a:40:3c:fb:e7:
                    95:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:63:BC:C6:93:32:16:2A:F9:86:03:E5:67:04:87:3C:89:DE:58:2F
            X509v3 Authority Key Identifier:
                keyid:D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/JWO8xpMyFir5hgPlZwSHPIneWC8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:00:1a:a2:b2:63:be:39:f5:38:9d:ed:f6:ea:fd:5b:fc:3e:
         0f:45:79:ee:6b:4e:6c:b2:8a:9c:b7:54:39:b3:8a:d7:17:00:
         c4:48:f6:b3:d5:db:e0:f7:21:d8:17:e9:34:1b:59:34:0f:31:
         2a:60:f2:74:c3:f7:94:e9:2e:95:b0:3c:81:b0:a3:b1:47:cc:
         1f:db:9c:49:c2:a4:e2:ba:2a:e9:7a:10:43:9e:2a:a8:d3:e9:
         79:69:04:1c:be:ef:94:c2:07:1b:7b:f0:18:fb:81:82:1d:29:
         99:29:51:ab:e5:25:82:b9:93:09:1d:56:53:3a:d4:71:d9:99:
         15:7f:94:32:b6:79:fe:a8:b2:67:a8:79:ab:6c:b3:72:98:5e:
         e3:f7:d5:39:91:b0:ac:73:72:17:65:0d:a7:8c:cf:10:93:76:
         42:f2:69:b9:bd:f6:24:22:6e:64:27:0e:7e:d9:75:cb:ab:54:
         c3:0c:c5:36:78:f8:45:fc:b6:8a:b8:41:b7:91:18:b8:b1:40:
         28:6c:5d:98:ed:1d:01:38:bc:42:9e:08:62:68:16:a7:cb:83:
         66:e4:f5:d4:59:02:48:53:44:32:22:6e:63:4f:05:34:5d:10:
         24:34:4e:02:66:a0:fb:78:75:ea:08:aa:bd:31:c3:92:93:e4:
         0c:40:f3:4e
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBJTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMDBF
MDgzOTM2ODhCMDQ3Mzc4NzRFQ0Q2M0REOEJFNzhFNUVGMkQwMB4XDTIyMTEwMTAx
MjgyNloXDTIzMTAxNTAxMzAwMlowMzExMC8GA1UEAxMoMjU2M0JDQzY5MzMyMTYy
QUY5ODYwM0U1NjcwNDg3M0M4OURFNTgyRjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALraIjaEiZ4YUnYDkTc0mQ1zfMvdcR81pikLfzOSthHo86e2X1nL
u8smg9blD74z2ARnqZ6Wa6KTW84n2LfAETGVr+veh1Ne2Hzfmqbq/wCQ4yDcVRrg
nwHdz03xiT0EY5wiYNzPaLLTQtQtFYY5puNIPCUphiZi508j/8sspFazg3dVvDqE
dyObNkm+IzJTfPTblaU5Qm6RWJToBo86VDJxwGz9kN3jNfT5YB8ZgpKGnMru9z9K
rS2xYlo3FuZ45vcwvxETdVpvbqoUKrlnOZHebOTGzGlKKXu8+tgrkIdiceCX5may
Sck4EGFO/sJx6809dcnCKBftgUpAPPvnlRsCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQlY7zGkzIWKvmGA+VnBIc8id5YLzAfBgNVHSMEGDAWgBTQDgg5NoiwRzeHTs1j
3Yvnjl7y0DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODgxLzBBNElPVGFJc0VjM2gwN05ZOTJMNTQ1ZTh0QS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBBNElPVGFJc0VjM2gwN05ZOTJMNTQ1
ZTh0QS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84ODEvSldPOHhwTXlGaXI1aGdQbFp3U0hQSW5lV0M4LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAttkUDANBgkqhkiG9w0BAQsFAAOCAQEAtAAaorJjvjn1OJ3t9ur9W/w+D0V5
7mtObLKKnLdUObOK1xcAxEj2s9Xb4Pch2BfpNBtZNA8xKmDydMP3lOkulbA8gbCj
sUfMH9ucScKk4roq6XoQQ54qqNPpeWkEHL7vlMIHG3vwGPuBgh0pmSlRq+UlgrmT
CR1WUzrUcdmZFX+UMrZ5/qiyZ6h5q2yzcphe4/fVOZGwrHNyF2UNp4zPEJN2QvJp
ub32JCJuZCcOftl1y6tUwwzFNnj4Rfy2irhBt5EYuLFAKGxdmO0dATi8Qp4IYmgW
p8uDZuT11FkCSFNEMiJuY08FNF0QJDROAmag+3h16giqvTHDkpPkDEDzTg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org