Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/Ov3B0q3WFskQ5iSApUq06074P6c.roa
File:                     Ov3B0q3WFskQ5iSApUq06074P6c.roa (raw, json)
Hash identifier:          ffJzMmMaheVRfw/cz97p00ybLr6uu+A5WsEcXV8fgRA=
Subject key identifier:   3A:FD:C1:D2:AD:D6:16:C9:10:E6:24:80:A5:4A:B4:EB:4E:F8:3F:A7
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       6C
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/Ov3B0q3WFskQ5iSApUq06074P6c.roa
Signing time:             Mon 01 Aug 2022 01:29:10 +0000
ROA not before:           Mon 01 Aug 2022 01:29:10 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     2518
IP address blocks:        202.247.0.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: Aug  1 01:29:10 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=3AFDC1D2ADD616C910E62480A54AB4EB4EF83FA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:85:38:07:d1:15:dd:7f:26:71:1d:e9:8e:e5:
                    ec:ea:99:75:83:f4:a3:ad:c9:82:8f:04:0b:f5:9d:
                    c9:fd:b3:40:c9:b4:b2:75:72:7f:09:0f:b2:c1:4e:
                    df:5c:a0:82:d8:0e:9e:25:1f:ad:52:e9:e8:70:e4:
                    0f:d6:44:6d:bf:19:28:35:a2:b7:32:8c:1e:71:cc:
                    45:41:08:52:09:58:06:6e:ea:40:53:91:d0:f5:d9:
                    65:83:30:62:49:ba:2e:01:de:56:4b:b7:37:fe:f0:
                    00:2b:d1:93:17:67:44:c3:1b:90:a6:b8:5c:20:3f:
                    d1:f2:96:60:42:2a:8f:fa:93:f5:96:6f:52:3d:6d:
                    62:e1:e8:e7:5f:9a:25:87:4b:f4:a9:cc:f8:95:0b:
                    82:0e:fd:de:75:b8:ec:cf:65:c5:15:b9:8b:3c:df:
                    53:5c:98:f0:22:b0:3e:29:bb:15:55:78:d1:20:79:
                    b4:a3:35:67:a0:3b:ff:21:39:6c:09:d9:d4:fa:95:
                    84:d2:59:ed:84:38:04:58:94:f9:32:b9:60:9c:0c:
                    fc:f2:48:eb:74:d3:af:24:39:75:ae:6a:6b:54:d8:
                    63:b7:1f:3b:04:17:96:b2:49:39:f4:42:a7:36:11:
                    53:5c:67:de:aa:31:75:c7:45:dd:9e:ad:4c:5e:5a:
                    81:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:FD:C1:D2:AD:D6:16:C9:10:E6:24:80:A5:4A:B4:EB:4E:F8:3F:A7
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/Ov3B0q3WFskQ5iSApUq06074P6c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.247.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         9d:9f:d5:f3:d7:46:37:b2:fb:e7:7c:8a:99:e6:22:d3:02:58:
         6e:b3:a7:74:db:d4:d9:62:fe:2b:e3:e6:d7:b0:82:ef:ed:99:
         00:45:cb:34:01:6e:15:0a:e3:09:06:02:87:97:5b:b9:ac:4b:
         50:df:2b:3c:4a:c0:20:66:29:b6:90:2a:f2:46:3d:aa:dc:6f:
         1b:86:02:d0:e4:e8:25:20:7a:d3:a0:ec:59:cd:e4:8f:08:d9:
         31:53:68:5f:e4:96:bb:77:65:eb:f4:5d:94:a6:e4:87:99:09:
         0c:19:00:4f:74:e8:8e:5d:c4:36:0c:aa:ae:84:1b:50:13:7a:
         57:93:0d:d2:63:a8:e4:19:81:8f:cb:37:16:ad:b4:e6:63:94:
         4b:3f:cc:f9:43:16:45:0d:27:78:03:79:a4:b6:3e:b9:cc:f1:
         55:03:8f:6e:ca:e3:eb:75:56:02:9d:4b:d2:9b:fa:25:25:a5:
         da:b9:01:cf:4b:5d:e1:99:cf:39:e7:8a:87:08:b1:67:44:42:
         27:fb:3b:84:60:76:6a:32:3a:55:b4:76:49:ac:09:c6:e2:1e:
         84:22:d7:17:71:91:e9:b5:35:a0:56:45:5c:d5:58:d2:e3:ae:
         91:b7:e6:2a:0d:1d:5f:fd:fd:a9:45:3b:33:e4:44:0d:90:8a:
         b3:34:a0:cd
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBbDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3QzYw
Mjk1Qzg1RkYzN0UyRENGNzVBRjAxNEQ0NEFEM0JGOEMzM0E0MB4XDTIyMDgwMTAx
MjkxMFoXDTIzMDcxNTAxMzAwM1owMzExMC8GA1UEAxMoM0FGREMxRDJBREQ2MTZD
OTEwRTYyNDgwQTU0QUI0RUI0RUY4M0ZBNzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK+FOAfRFd1/JnEd6Y7l7OqZdYP0o63Jgo8EC/Wdyf2zQMm0snVy
fwkPssFO31yggtgOniUfrVLp6HDkD9ZEbb8ZKDWitzKMHnHMRUEIUglYBm7qQFOR
0PXZZYMwYkm6LgHeVku3N/7wACvRkxdnRMMbkKa4XCA/0fKWYEIqj/qT9ZZvUj1t
YuHo51+aJYdL9KnM+JULgg793nW47M9lxRW5izzfU1yY8CKwPim7FVV40SB5tKM1
Z6A7/yE5bAnZ1PqVhNJZ7YQ4BFiU+TK5YJwM/PJI63TTryQ5da5qa1TYY7cfOwQX
lrJJOfRCpzYRU1xn3qoxdcdF3Z6tTF5agRkCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQ6/cHSrdYWyRDmJIClSrTrTvg/pzAfBgNVHSMEGDAWgBR8YClchf834tz3WvAU
1ErTv4wzpDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTM5L2ZHQXBYSVhfTi1MYzkxcndGTlJLMDctTU02US5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2ZHQXBYSVhfTi1MYzkxcndGTlJLMDct
TU02US5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85MzkvT3YzQjBxM1dGc2tRNWlTQXBVcTA2MDc0UDZjLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEB8r3ADANBgkqhkiG9w0BAQsFAAOCAQEAnZ/V89dGN7L753yKmeYi0wJYbrOn
dNvU2WL+K+Pm17CC7+2ZAEXLNAFuFQrjCQYCh5dbuaxLUN8rPErAIGYptpAq8kY9
qtxvG4YC0OToJSB606DsWc3kjwjZMVNoX+SWu3dl6/RdlKbkh5kJDBkAT3Tojl3E
NgyqroQbUBN6V5MN0mOo5BmBj8s3Fq205mOUSz/M+UMWRQ0neAN5pLY+uczxVQOP
bsrj63VWAp1L0pv6JSWl2rkBz0td4ZnPOeeKhwixZ0RCJ/s7hGB2ajI6VbR2SawJ
xuIehCLXF3GR6bU1oFZFXNVY0uOukbfmKg0dX/39qUU7M+REDZCKszSgzQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org