Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/942/mINolO1cPMHS9M0Yfcn_KRshWlw.roa
File:                     mINolO1cPMHS9M0Yfcn_KRshWlw.roa (raw, json)
Hash identifier:          hvRVQbIn9ZDzdfnwRBsFWDEeNpA/LfFyYYtu/1bbarM=
Subject key identifier:   98:83:68:94:ED:5C:3C:C1:D2:F4:CD:18:7D:C9:FF:29:1B:21:5A:5C
Certificate issuer:       /CN=8A1E725176BFD9ABDA5CCB7B21A10B8F8DB7D578
Certificate serial:       17
Authority key identifier: 8A:1E:72:51:76:BF:D9:AB:DA:5C:CB:7B:21:A1:0B:8F:8D:B7:D5:78
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/mINolO1cPMHS9M0Yfcn_KRshWlw.roa
Signing time:             Thu 06 Apr 2023 02:52:53 +0000
ROA not before:           Thu 06 Apr 2023 02:52:53 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     37908
IP address blocks:        202.254.111.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A1E725176BFD9ABDA5CCB7B21A10B8F8DB7D578
        Validity
            Not Before: Apr  6 02:52:53 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=98836894ED5C3CC1D2F4CD187DC9FF291B215A5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:0c:cc:f3:6c:14:77:aa:26:1c:01:3f:d2:01:
                    90:2f:62:9a:11:35:eb:5a:fc:b2:94:0e:ce:29:c3:
                    b9:02:1c:09:3f:be:30:ff:3e:20:f7:66:d0:25:79:
                    9e:d6:0a:c0:d3:c1:7d:a5:42:db:ce:4a:34:61:b3:
                    6c:ad:fb:d4:4c:4f:72:4c:8b:8d:05:b2:c2:ba:fd:
                    ef:ab:a5:f4:00:ea:55:70:ac:93:67:16:8a:53:c7:
                    28:fd:19:5f:17:c0:ff:c5:fb:e8:26:dc:4f:32:e6:
                    2a:b1:09:6f:5b:91:b7:ab:7f:25:e0:12:98:83:26:
                    f8:b0:27:85:5d:c9:06:4e:f0:64:cc:5e:3e:cf:4f:
                    38:39:2c:13:4b:e3:89:73:1e:d8:a7:f1:e6:23:10:
                    9e:0d:01:09:e1:3a:7d:fc:d1:b8:22:2b:f4:04:9a:
                    e7:cf:11:24:2a:19:68:4f:0c:09:c1:82:97:ff:42:
                    80:16:5c:c3:1d:73:07:64:b4:06:e1:fc:6b:8e:f2:
                    70:2d:91:f5:0f:0f:ff:18:0e:1a:7a:0c:37:de:d6:
                    59:1a:2b:68:a7:1e:55:d6:9d:09:de:d1:e5:52:9c:
                    c6:24:39:8b:fb:5c:2b:a0:a4:0a:d9:9d:d0:29:43:
                    87:7f:45:f4:f0:1f:c3:6a:f3:ce:d6:d5:54:4a:3d:
                    45:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:83:68:94:ED:5C:3C:C1:D2:F4:CD:18:7D:C9:FF:29:1B:21:5A:5C
            X509v3 Authority Key Identifier:
                keyid:8A:1E:72:51:76:BF:D9:AB:DA:5C:CB:7B:21:A1:0B:8F:8D:B7:D5:78

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/mINolO1cPMHS9M0Yfcn_KRshWlw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.254.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:ee:ff:0b:d7:fa:3c:e2:04:19:06:5d:04:7b:ba:73:56:f4:
         8e:8e:d9:a3:0d:e4:6b:46:3b:bc:fe:60:bc:46:c7:2e:e6:59:
         57:af:96:2e:71:39:9a:79:01:99:16:9c:40:cc:b5:a7:7b:19:
         23:e8:b5:62:d7:48:18:bf:8c:3b:28:93:c5:0f:49:d6:f5:3c:
         37:8f:68:3a:48:4e:7a:2d:87:1f:24:46:db:fc:92:67:a8:9c:
         e2:64:db:38:b3:66:64:4b:20:c7:cc:ca:08:a0:07:7f:2c:21:
         a3:54:cf:72:93:fc:e5:f8:57:37:bd:e3:06:67:88:3f:13:1a:
         47:a0:20:f3:be:52:0e:31:48:01:d9:e6:62:ee:b9:67:cc:fb:
         4e:09:ec:a2:5f:e6:8e:27:d9:43:22:f6:35:c3:49:28:3b:ba:
         a7:26:d8:eb:00:07:bf:46:1c:5e:d6:fa:57:b7:3b:52:1c:e8:
         ac:7a:80:3b:09:05:bd:16:9a:e7:90:ba:b6:a1:88:2b:d3:32:
         70:ec:9e:ff:30:17:83:da:09:1d:3a:fe:64:58:32:99:04:e5:
         93:a1:b8:c3:07:83:01:bb:c0:25:ce:6d:d6:09:c7:1d:98:ab:
         58:cb:e4:9b:d5:6e:92:f6:b1:32:72:77:fb:ba:06:b5:fa:8d:
         4b:9c:34:47
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4QTFF
NzI1MTc2QkZEOUFCREE1Q0NCN0IyMUExMEI4RjhEQjdENTc4MB4XDTIzMDQwNjAy
NTI1M1oXDTI0MDMxNDAxMzAwMlowMzExMC8GA1UEAxMoOTg4MzY4OTRFRDVDM0ND
MUQyRjRDRDE4N0RDOUZGMjkxQjIxNUE1QzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPUMzPNsFHeqJhwBP9IBkC9imhE161r8spQOzinDuQIcCT++MP8+
IPdm0CV5ntYKwNPBfaVC285KNGGzbK371ExPckyLjQWywrr976ul9ADqVXCsk2cW
ilPHKP0ZXxfA/8X76CbcTzLmKrEJb1uRt6t/JeASmIMm+LAnhV3JBk7wZMxePs9P
ODksE0vjiXMe2Kfx5iMQng0BCeE6ffzRuCIr9ASa588RJCoZaE8MCcGCl/9CgBZc
wx1zB2S0BuH8a47ycC2R9Q8P/xgOGnoMN97WWRoraKceVdadCd7R5VKcxiQ5i/tc
K6CkCtmd0ClDh39F9PAfw2rzztbVVEo9RVECAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSYg2iU7Vw8wdL0zRh9yf8pGyFaXDAfBgNVHSMEGDAWgBSKHnJRdr/Zq9pcy3sh
oQuPjbfVeDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTQyL2loNXlVWGFfMmF2YVhNdDdJYUVMajQyMzFYZy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2loNXlVWGFfMmF2YVhNdDdJYUVMajQy
MzFYZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85NDIvbUlOb2xPMWNQTUhTOU0wWWZjbl9LUnNoV2x3LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAMr+bzANBgkqhkiG9w0BAQsFAAOCAQEAZO7/C9f6POIEGQZdBHu6c1b0jo7Z
ow3ka0Y7vP5gvEbHLuZZV6+WLnE5mnkBmRacQMy1p3sZI+i1YtdIGL+MOyiTxQ9J
1vU8N49oOkhOei2HHyRG2/ySZ6ic4mTbOLNmZEsgx8zKCKAHfywho1TPcpP85fhX
N73jBmeIPxMaR6Ag875SDjFIAdnmYu65Z8z7Tgnsol/mjifZQyL2NcNJKDu6pybY
6wAHv0YcXtb6V7c7UhzorHqAOwkFvRaa55C6tqGIK9MycOye/zAXg9oJHTr+ZFgy
mQTlk6G4wweDAbvAJc5t1gnHHZirWMvkm9VukvaxMnJ3+7oGtfqNS5w0Rw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org