Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/954/SIQoZkeSq0Yq2e96nGDBx6GuqFk.roa
File:                     SIQoZkeSq0Yq2e96nGDBx6GuqFk.roa (raw, json)
Hash identifier:          +WV9FJYImL7L2VayA6urpEt24aC69SCS7CdZzGBl13I=
Subject key identifier:   48:84:28:66:47:92:AB:46:2A:D9:EF:7A:9C:60:C1:C7:A1:AE:A8:59
Certificate issuer:       /CN=1678DD6B61CB673BA4423C81BF63A61DD724E840
Certificate serial:       03
Authority key identifier: 16:78:DD:6B:61:CB:67:3B:A4:42:3C:81:BF:63:A6:1D:D7:24:E8:40
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/SIQoZkeSq0Yq2e96nGDBx6GuqFk.roa
Signing time:             Thu 12 May 2022 01:07:05 +0000
ROA not before:           Thu 12 May 2022 01:07:05 +0000
ROA not after:            Fri 12 May 2023 00:42:17 +0000
asID:                     131954
IP address blocks:        202.226.12.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1678DD6B61CB673BA4423C81BF63A61DD724E840
        Validity
            Not Before: May 12 01:07:05 2022 GMT
            Not After : May 12 00:42:17 2023 GMT
        Subject: CN=488428664792AB462AD9EF7A9C60C1C7A1AEA859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ee:1d:6c:0c:29:9e:81:40:72:79:23:c1:b8:
                    12:ef:e4:f6:c1:00:bf:09:b1:2f:5e:96:1d:e3:f6:
                    2f:6b:07:60:89:87:c2:0d:fa:be:1f:d1:35:c2:9f:
                    69:5e:8b:74:db:a7:74:95:96:0c:5e:47:3b:4e:09:
                    df:44:36:f7:cd:af:1b:cd:4a:9f:cb:a2:d2:6c:93:
                    26:da:f5:2d:10:2f:60:ba:db:40:4b:30:58:71:03:
                    ae:45:17:52:0a:81:d3:0d:d7:ac:e4:df:71:12:07:
                    c2:93:30:42:b2:a8:87:9b:f5:bb:7d:6d:b8:7c:e8:
                    25:7b:e7:1e:67:9f:c6:6f:b0:f5:06:d4:b9:f2:87:
                    08:c4:9d:a0:cc:bf:3d:77:86:9a:82:61:55:7a:fe:
                    56:42:01:48:e5:5f:e9:e9:f1:83:78:8f:b2:42:ba:
                    9e:6b:fe:09:ec:a3:15:a9:fb:48:6b:b6:75:c2:8d:
                    8a:05:a1:09:11:52:8a:f7:b0:b5:30:26:0c:2f:57:
                    48:4e:ee:e1:f1:b0:08:a1:64:f3:18:d5:52:5a:34:
                    96:9c:34:02:89:30:d1:89:0f:86:e0:b5:2c:9f:d7:
                    94:fd:11:89:39:f9:1f:19:77:fb:b0:69:7f:db:fe:
                    29:f5:94:29:87:48:46:c8:d2:2b:49:36:47:98:19:
                    e9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:84:28:66:47:92:AB:46:2A:D9:EF:7A:9C:60:C1:C7:A1:AE:A8:59
            X509v3 Authority Key Identifier:
                keyid:16:78:DD:6B:61:CB:67:3B:A4:42:3C:81:BF:63:A6:1D:D7:24:E8:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/SIQoZkeSq0Yq2e96nGDBx6GuqFk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.226.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:ba:f6:0c:78:5c:53:2f:90:ce:64:11:e6:09:04:d1:7e:c5:
         8c:86:c2:77:77:d1:20:36:89:86:31:69:28:8f:5c:11:6e:dc:
         6b:da:4d:b7:16:bd:48:c9:b0:3d:27:0d:b8:dd:df:23:23:11:
         a9:bf:66:35:bd:b2:45:89:d0:6b:f7:fb:cc:86:08:de:fc:42:
         f2:3b:ec:49:9e:e5:bf:17:54:c1:0e:c1:ee:ad:98:e4:28:2d:
         8c:64:8b:8c:a8:11:f1:e0:7d:bf:bc:da:be:14:5c:71:1a:eb:
         13:a1:98:d9:9a:f6:a2:59:b3:05:fb:ae:35:36:63:2e:0a:48:
         e8:ef:81:81:c7:9e:65:00:5a:48:31:7c:24:36:95:4e:db:11:
         c1:a7:74:28:0d:9d:2c:bf:be:ab:43:da:43:49:38:b9:7d:12:
         7b:05:8e:a1:69:4b:ae:b2:5e:ca:65:15:ee:d2:3a:a6:d6:f1:
         c0:b2:c7:ba:de:ce:88:c0:b1:2b:60:29:0d:1a:58:da:32:9e:
         81:c5:78:88:68:c7:fb:0b:9c:10:27:8e:1d:f7:f0:5d:3a:a3:
         1e:5e:ad:57:07:d8:6f:fc:d1:90:42:e7:83:46:d0:3f:7d:25:
         47:65:89:4a:d1:ce:a9:06:10:d5:4a:d4:ae:45:ea:05:78:1a:
         ec:67:77:a6
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNjc4
REQ2QjYxQ0I2NzNCQTQ0MjNDODFCRjYzQTYxREQ3MjRFODQwMB4XDTIyMDUxMjAx
MDcwNVoXDTIzMDUxMjAwNDIxN1owMzExMC8GA1UEAxMoNDg4NDI4NjY0NzkyQUI0
NjJBRDlFRjdBOUM2MEMxQzdBMUFFQTg1OTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJ7uHWwMKZ6BQHJ5I8G4Eu/k9sEAvwmxL16WHeP2L2sHYImHwg36
vh/RNcKfaV6LdNundJWWDF5HO04J30Q2982vG81Kn8ui0myTJtr1LRAvYLrbQEsw
WHEDrkUXUgqB0w3XrOTfcRIHwpMwQrKoh5v1u31tuHzoJXvnHmefxm+w9QbUufKH
CMSdoMy/PXeGmoJhVXr+VkIBSOVf6enxg3iPskK6nmv+CeyjFan7SGu2dcKNigWh
CRFSivewtTAmDC9XSE7u4fGwCKFk8xjVUlo0lpw0Aokw0YkPhuC1LJ/XlP0RiTn5
Hxl3+7Bpf9v+KfWUKYdIRsjSK0k2R5gZ6WcCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRIhChmR5KrRirZ73qcYMHHoa6oWTAfBgNVHSMEGDAWgBQWeN1rYctnO6RCPIG/
Y6Yd1yToQDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTU0L0ZuamRhMkhMWnp1a1FqeUJ2Mk9tSGRjazZFQS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZuamRhMkhMWnp1a1FqeUJ2Mk9tSGRj
azZFQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85NTQvU0lRb1prZVNxMFlxMmU5Nm5HREJ4Nkd1cUZrLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAsriDDANBgkqhkiG9w0BAQsFAAOCAQEASLr2DHhcUy+QzmQR5gkE0X7FjIbC
d3fRIDaJhjFpKI9cEW7ca9pNtxa9SMmwPScNuN3fIyMRqb9mNb2yRYnQa/f7zIYI
3vxC8jvsSZ7lvxdUwQ7B7q2Y5CgtjGSLjKgR8eB9v7zavhRccRrrE6GY2Zr2olmz
BfuuNTZjLgpI6O+BgceeZQBaSDF8JDaVTtsRwad0KA2dLL++q0PaQ0k4uX0SewWO
oWlLrrJeymUV7tI6ptbxwLLHut7OiMCxK2ApDRpY2jKegcV4iGjH+wucECeOHffw
XTqjHl6tVwfYb/zRkELng0bQP30lR2WJStHOqQYQ1UrUrkXqBXga7Gd3pg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:15 2024 by rpki-client on console-ams.rpki-client.org