Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/958/JSMwV4ywl8UU3tDSJgUZQ0qz5xI.roa
File:                     JSMwV4ywl8UU3tDSJgUZQ0qz5xI.roa (raw, json)
Hash identifier:          ZQSaTKOFQw0+CKX6qScVeWZTEC4M8CIumToAXkan+QM=
Subject key identifier:   25:23:30:57:8C:B0:97:C5:14:DE:D0:D2:26:05:19:43:4A:B3:E7:12
Certificate issuer:       /CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
Certificate serial:       73
Authority key identifier: 99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/JSMwV4ywl8UU3tDSJgUZQ0qz5xI.roa
Signing time:             Thu 13 Apr 2023 09:53:49 +0000
ROA not before:           Thu 13 Apr 2023 09:53:49 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     38631
IP address blocks:        203.104.152.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
        Validity
            Not Before: Apr 13 09:53:49 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=252330578CB097C514DED0D2260519434AB3E712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e9:5f:95:83:ac:6b:fd:0f:7f:fc:03:1f:4a:
                    52:4d:28:b0:61:9c:e8:14:96:20:63:f8:af:2f:2a:
                    a7:59:cf:52:9b:c3:5d:da:92:1f:32:b9:3b:cc:7a:
                    7b:b9:73:2f:7a:93:b6:81:1c:dd:bc:82:e2:60:bf:
                    e6:fa:80:64:10:49:27:1f:69:40:8d:a6:5a:c7:84:
                    89:a4:0b:57:4b:90:c1:6a:6d:ac:8a:4f:81:3c:a6:
                    53:30:9c:e5:98:aa:29:2d:72:d9:29:9f:6a:20:a2:
                    88:d2:e2:66:88:88:d1:47:74:c4:72:5a:ed:15:a9:
                    4f:73:81:43:82:f2:59:d5:b8:c9:98:78:2a:8c:2a:
                    79:4e:ae:3d:30:a1:19:44:bf:c0:66:ff:b0:00:ea:
                    5a:b6:97:64:06:8c:aa:e5:f4:f3:0f:9c:01:6c:36:
                    79:8e:c1:47:b5:70:04:fd:9f:c8:26:d4:46:68:a5:
                    53:1e:30:cc:ec:b7:88:56:cb:60:1c:9b:54:bf:9b:
                    9e:62:c5:7f:98:4f:fa:ed:21:c9:a4:3b:ba:00:39:
                    75:61:28:2c:38:73:68:63:19:a6:71:ee:61:30:3d:
                    17:2e:27:99:78:f3:1b:c5:f1:98:41:41:57:49:e0:
                    cb:4a:66:c8:9c:b2:02:8f:39:fc:38:48:0d:08:47:
                    61:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:23:30:57:8C:B0:97:C5:14:DE:D0:D2:26:05:19:43:4A:B3:E7:12
            X509v3 Authority Key Identifier:
                keyid:99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/mQTsvNhfIqLorn4fmR6DRdBqmBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/JSMwV4ywl8UU3tDSJgUZQ0qz5xI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.104.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:55:f3:f3:ce:c3:40:7a:5e:7e:bd:b8:8e:38:78:d8:e6:09:
         ef:0b:be:62:e9:98:5a:3c:e3:56:00:a1:78:6d:15:de:91:a7:
         ad:3a:d8:12:6c:28:75:a6:ad:3c:3b:a6:b4:b7:bb:42:14:84:
         c6:6a:7f:ee:bb:b7:72:7d:84:2f:1c:7d:cf:e8:80:5c:a1:6f:
         61:e3:42:60:d9:c0:03:98:97:02:6d:9e:42:79:86:ad:aa:3b:
         0c:f4:a6:36:20:9c:35:f0:38:14:dd:3c:1b:ec:33:c2:2f:06:
         13:c8:43:e3:09:9c:76:16:2b:9b:30:c7:f1:9f:3a:c3:dc:92:
         d1:f2:47:16:2a:1f:70:22:46:6b:ca:e3:94:6f:85:b5:3c:7f:
         3b:f4:4f:0a:a7:fe:07:7c:ed:c4:be:54:ff:38:95:1c:61:91:
         ce:ba:80:54:00:b9:8d:87:64:bf:4c:b5:87:fe:92:84:27:e4:
         c3:2f:e2:8d:80:d3:85:d9:41:68:8a:4d:fb:3c:7c:29:62:72:
         aa:2b:3b:d2:e9:2a:ee:f4:1d:a1:4a:08:40:5d:1d:c3:31:e5:
         82:5f:3d:f1:fb:e6:f2:e0:38:1e:4e:ae:71:de:1b:eb:58:c7:
         4a:5e:37:76:02:b4:58:f8:29:f5:40:74:bc:02:f0:73:49:a1:
         ea:4a:cb:b9
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBczANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5OTA0
RUNCQ0Q4NUYyMkEyRThBRTdFMUY5OTFFODM0NUQwNkE5ODE2MB4XDTIzMDQxMzA5
NTM0OVoXDTI0MDMxNDAxMzAwMlowMzExMC8GA1UEAxMoMjUyMzMwNTc4Q0IwOTdD
NTE0REVEMEQyMjYwNTE5NDM0QUIzRTcxMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMvpX5WDrGv9D3/8Ax9KUk0osGGc6BSWIGP4ry8qp1nPUpvDXdqS
HzK5O8x6e7lzL3qTtoEc3byC4mC/5vqAZBBJJx9pQI2mWseEiaQLV0uQwWptrIpP
gTymUzCc5ZiqKS1y2SmfaiCiiNLiZoiI0Ud0xHJa7RWpT3OBQ4LyWdW4yZh4Kowq
eU6uPTChGUS/wGb/sADqWraXZAaMquX08w+cAWw2eY7BR7VwBP2fyCbURmilUx4w
zOy3iFbLYBybVL+bnmLFf5hP+u0hyaQ7ugA5dWEoLDhzaGMZpnHuYTA9Fy4nmXjz
G8XxmEFBV0ngy0pmyJyyAo85/DhIDQhHYZ0CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQlIzBXjLCXxRTe0NImBRlDSrPnEjAfBgNVHSMEGDAWgBSZBOy82F8iouiufh+Z
HoNF0GqYFjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTU4L21RVHN2TmhmSXFMb3JuNGZtUjZEUmRCcW1CWS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL21RVHN2TmhmSXFMb3JuNGZtUjZEUmRC
cW1CWS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85NTgvSlNNd1Y0eXdsOFVVM3REU0pnVVpRMHF6NXhJLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAstomDANBgkqhkiG9w0BAQsFAAOCAQEAhlXz887DQHpefr24jjh42OYJ7wu+
YumYWjzjVgCheG0V3pGnrTrYEmwodaatPDumtLe7QhSExmp/7ru3cn2ELxx9z+iA
XKFvYeNCYNnAA5iXAm2eQnmGrao7DPSmNiCcNfA4FN08G+wzwi8GE8hD4wmcdhYr
mzDH8Z86w9yS0fJHFiofcCJGa8rjlG+FtTx/O/RPCqf+B3ztxL5U/ziVHGGRzrqA
VAC5jYdkv0y1h/6ShCfkwy/ijYDThdlBaIpN+zx8KWJyqis70ukq7vQdoUoIQF0d
wzHlgl898fvm8uA4Hk6ucd4b61jHSl43dgK0WPgp9UB0vALwc0mh6krLuQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org