Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/954/W3VxewJ83QBMfXptuKGRHuQezqY.roa
File:                     W3VxewJ83QBMfXptuKGRHuQezqY.roa (raw, json)
Hash identifier:          BUa6r5j9VOCDuX/ETF0pzHi1tG7tLqcVw7WMVO798u8=
Subject key identifier:   5B:75:71:7B:02:7C:DD:00:4C:7D:7A:6D:B8:A1:91:1E:E4:1E:CE:A6
Certificate issuer:       /CN=1678DD6B61CB673BA4423C81BF63A61DD724E840
Certificate serial:       04
Authority key identifier: 16:78:DD:6B:61:CB:67:3B:A4:42:3C:81:BF:63:A6:1D:D7:24:E8:40
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/W3VxewJ83QBMfXptuKGRHuQezqY.roa
Signing time:             Thu 12 May 2022 01:09:06 +0000
ROA not before:           Thu 12 May 2022 01:09:06 +0000
ROA not after:            Fri 12 May 2023 00:42:17 +0000
asID:                     131954
IP address blocks:        113.59.228.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1678DD6B61CB673BA4423C81BF63A61DD724E840
        Validity
            Not Before: May 12 01:09:06 2022 GMT
            Not After : May 12 00:42:17 2023 GMT
        Subject: CN=5B75717B027CDD004C7D7A6DB8A1911EE41ECEA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1c:f0:f6:fd:e5:c6:8f:58:3e:26:cf:8f:df:
                    af:19:17:23:df:6b:62:b2:64:a6:e7:6d:b3:d8:13:
                    93:0f:cd:43:e8:95:18:3f:a9:f1:9a:f9:ad:81:1f:
                    ce:9f:d2:a5:e6:79:d4:85:8e:0a:01:5e:31:19:84:
                    98:3a:50:e8:53:e5:d7:00:d3:e0:40:40:db:c6:5e:
                    13:59:12:0e:7a:6b:d3:71:38:27:b2:32:ea:04:da:
                    2d:d6:04:f7:75:71:82:35:05:af:d4:48:41:96:b8:
                    ec:4c:c3:95:23:b2:a7:6d:7e:67:e0:0e:34:38:1e:
                    d8:00:95:6a:f6:ef:11:68:0b:c7:f3:1a:b4:02:9e:
                    c7:8f:42:2e:c0:5e:86:eb:0d:bc:e2:e8:d9:88:cc:
                    e2:4f:26:ae:be:74:c1:93:dd:94:38:b6:92:27:f6:
                    98:f2:b0:9b:78:5e:28:8a:4d:af:dc:2b:c0:74:77:
                    e1:e2:33:c4:de:b0:59:75:fb:d4:15:2b:c3:6c:88:
                    96:f0:3a:9c:58:53:12:b6:b8:02:0a:21:23:91:76:
                    6c:7b:43:80:10:13:54:46:83:66:e3:cc:89:1e:18:
                    ff:1b:6d:c7:91:1f:75:41:dd:a6:2f:d4:69:57:a9:
                    55:6a:59:1b:eb:b7:27:ce:90:c4:33:c1:7f:12:03:
                    32:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:75:71:7B:02:7C:DD:00:4C:7D:7A:6D:B8:A1:91:1E:E4:1E:CE:A6
            X509v3 Authority Key Identifier:
                keyid:16:78:DD:6B:61:CB:67:3B:A4:42:3C:81:BF:63:A6:1D:D7:24:E8:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/W3VxewJ83QBMfXptuKGRHuQezqY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.59.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:62:9d:91:d4:27:8e:2c:20:f7:e5:21:d3:44:e7:fa:cc:12:
         18:53:9d:e0:06:eb:31:62:b9:ed:e0:71:13:98:c4:31:43:87:
         1c:3c:e7:e4:bd:98:c5:d0:ee:ab:17:fe:d4:28:a4:f7:29:89:
         f3:33:92:64:e6:2d:26:f3:69:be:c1:8f:ae:e5:22:b6:d7:6f:
         95:11:ee:b9:05:61:21:41:3c:9c:bf:b4:8c:c0:68:e4:79:88:
         63:db:0e:eb:91:76:84:26:d5:e2:44:58:95:89:c1:b7:27:45:
         2d:15:6a:ad:a1:36:54:dc:82:b5:6b:fd:71:cc:81:98:2f:33:
         99:96:e7:be:c1:b3:8b:3e:04:69:62:76:ee:86:97:15:0b:c1:
         45:30:f0:76:89:f6:b7:f0:35:4d:7c:89:2f:5a:90:7b:4c:db:
         bd:c2:c2:cf:8d:33:c9:7d:15:12:61:e6:da:99:33:1f:b6:b8:
         cc:85:14:87:9f:c9:05:f9:81:30:39:b3:fc:6f:47:12:13:ab:
         b7:09:25:60:42:69:59:92:3d:84:bc:fb:d8:c2:0a:c5:3f:6a:
         1b:6f:05:14:8e:ff:ab:33:53:fe:9a:3e:51:9b:eb:fb:eb:fd:
         ff:4e:df:4b:29:13:e2:19:9f:e9:b6:91:fa:fd:c4:50:09:ea:
         d5:a9:77:d7
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNjc4
REQ2QjYxQ0I2NzNCQTQ0MjNDODFCRjYzQTYxREQ3MjRFODQwMB4XDTIyMDUxMjAx
MDkwNloXDTIzMDUxMjAwNDIxN1owMzExMC8GA1UEAxMoNUI3NTcxN0IwMjdDREQw
MDRDN0Q3QTZEQjhBMTkxMUVFNDFFQ0VBNjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOIc8Pb95caPWD4mz4/frxkXI99rYrJkpudts9gTkw/NQ+iVGD+p
8Zr5rYEfzp/SpeZ51IWOCgFeMRmEmDpQ6FPl1wDT4EBA28ZeE1kSDnpr03E4J7Iy
6gTaLdYE93VxgjUFr9RIQZa47EzDlSOyp21+Z+AONDge2ACVavbvEWgLx/MatAKe
x49CLsBehusNvOLo2YjM4k8mrr50wZPdlDi2kif2mPKwm3heKIpNr9wrwHR34eIz
xN6wWXX71BUrw2yIlvA6nFhTEra4AgohI5F2bHtDgBATVEaDZuPMiR4Y/xttx5Ef
dUHdpi/UaVepVWpZG+u3J86QxDPBfxIDMp8CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRbdXF7AnzdAEx9em24oZEe5B7OpjAfBgNVHSMEGDAWgBQWeN1rYctnO6RCPIG/
Y6Yd1yToQDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTU0L0ZuamRhMkhMWnp1a1FqeUJ2Mk9tSGRjazZFQS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZuamRhMkhMWnp1a1FqeUJ2Mk9tSGRj
azZFQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85NTQvVzNWeGV3SjgzUUJNZlhwdHVLR1JIdVFlenFZLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAnE75DANBgkqhkiG9w0BAQsFAAOCAQEABWKdkdQnjiwg9+Uh00Tn+swSGFOd
4AbrMWK57eBxE5jEMUOHHDzn5L2YxdDuqxf+1Cik9ymJ8zOSZOYtJvNpvsGPruUi
ttdvlRHuuQVhIUE8nL+0jMBo5HmIY9sO65F2hCbV4kRYlYnBtydFLRVqraE2VNyC
tWv9ccyBmC8zmZbnvsGziz4EaWJ27oaXFQvBRTDwdon2t/A1TXyJL1qQe0zbvcLC
z40zyX0VEmHm2pkzH7a4zIUUh5/JBfmBMDmz/G9HEhOrtwklYEJpWZI9hLz72MIK
xT9qG28FFI7/qzNT/po+UZvr++v9/07fSykT4hmf6baR+v3EUAnq1al31w==
-----END CERTIFICATE-----