Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/958/MhAY8x3y3S8GUnjA821PCkYqh7A.roa
File:                     MhAY8x3y3S8GUnjA821PCkYqh7A.roa (raw, json)
Hash identifier:          ZII3R8gIv9K5A1RQRxCNDCyu7SFTxzTrtyvvbTHAwwc=
Subject key identifier:   32:10:18:F3:1D:F2:DD:2F:06:52:78:C0:F3:6D:4F:0A:46:2A:87:B0
Certificate issuer:       /CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
Certificate serial:       60
Authority key identifier: 99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/MhAY8x3y3S8GUnjA821PCkYqh7A.roa
Signing time:             Sun 01 May 2022 01:30:54 +0000
ROA not before:           Sun 01 May 2022 01:30:54 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     38631
IP address blocks:        203.104.128.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
        Validity
            Not Before: May  1 01:30:54 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=321018F31DF2DD2F065278C0F36D4F0A462A87B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:37:1a:77:0f:21:e3:66:2a:f2:fd:31:b2:8a:
                    16:d4:7d:92:6e:7b:75:ec:d0:2a:0a:c1:ba:c0:36:
                    f2:69:98:b6:3e:46:56:b4:4c:41:0f:ef:67:b8:9c:
                    6e:a3:fc:39:db:4b:f9:81:ad:c5:d9:0f:af:96:21:
                    67:b7:3b:d0:88:be:8b:e2:46:d8:a0:e2:4e:58:2a:
                    3b:44:dd:83:16:ed:98:b7:9c:0c:58:51:2b:da:0c:
                    8b:6b:ac:63:14:11:5d:7f:82:f0:85:41:92:0b:30:
                    9d:0a:2e:81:ff:ef:61:74:b3:ee:0a:a4:66:04:47:
                    6e:53:2d:ac:29:d9:97:c6:b2:c4:7c:9b:86:f4:08:
                    34:88:7d:11:b5:b5:28:3b:67:77:23:24:dc:6e:a3:
                    01:c7:b7:9c:69:e4:c1:3c:2c:ba:51:e7:ba:30:26:
                    d5:ed:fe:d9:22:0d:be:6f:e1:15:ea:08:0b:16:48:
                    39:77:02:0f:d4:2f:8e:2e:f6:fd:86:b7:fa:c7:46:
                    03:37:cc:88:d7:91:74:9f:64:bf:f5:08:4a:12:7b:
                    1f:4c:ae:c5:e9:9f:6f:f7:d5:35:f9:01:f3:fd:17:
                    fd:ab:2b:cd:23:43:b7:ce:96:dc:2a:85:06:4c:e5:
                    81:c7:ce:4d:04:1d:71:ec:60:76:11:aa:da:7a:36:
                    63:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:10:18:F3:1D:F2:DD:2F:06:52:78:C0:F3:6D:4F:0A:46:2A:87:B0
            X509v3 Authority Key Identifier:
                keyid:99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/mQTsvNhfIqLorn4fmR6DRdBqmBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/MhAY8x3y3S8GUnjA821PCkYqh7A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.104.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ba:5e:00:bb:2b:d5:ca:72:63:5d:27:da:e0:6d:c5:b7:6c:b3:
         ca:70:48:a9:5f:a0:b6:95:f9:13:f1:30:cd:bc:05:65:a1:12:
         91:9e:0b:dc:8a:6a:a9:84:4d:a1:23:43:31:d3:19:8c:b0:22:
         9d:df:eb:7e:de:05:8e:98:c1:77:b1:2c:35:e3:00:d6:d3:13:
         53:3c:bd:5a:e4:14:d1:5d:53:30:0e:a3:54:7a:95:fe:d4:25:
         a8:21:20:52:0c:fc:6b:17:3c:b9:ba:8c:2e:f9:95:cf:a4:59:
         21:31:45:5f:f9:54:63:02:c5:47:8d:f5:ec:38:f3:55:cd:a7:
         23:2a:de:4b:ce:da:2b:3b:c9:99:42:d0:4d:28:00:38:32:b0:
         6b:9c:3d:73:90:f3:26:d2:ad:8b:84:19:cd:86:45:e9:9d:97:
         67:1d:57:6e:69:b3:b4:0a:b1:c5:af:4c:5d:62:87:f6:c2:de:
         8f:59:f3:b6:b2:25:f6:3b:65:6f:c0:91:e5:47:a9:5b:f3:a9:
         54:42:9a:78:d8:ed:ca:90:f9:ff:e8:fd:9e:45:bd:82:af:c7:
         5c:46:a8:20:9e:17:0d:cd:9a:81:ff:ed:37:b8:e3:bb:a0:a5:
         ee:bb:27:f9:95:eb:b3:92:1e:dc:28:b2:79:eb:c1:e0:13:f4:
         8e:a6:74:d3
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBYDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5OTA0
RUNCQ0Q4NUYyMkEyRThBRTdFMUY5OTFFODM0NUQwNkE5ODE2MB4XDTIyMDUwMTAx
MzA1NFoXDTIzMDQyNzA5NTIzNFowMzExMC8GA1UEAxMoMzIxMDE4RjMxREYyREQy
RjA2NTI3OEMwRjM2RDRGMEE0NjJBODdCMDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAO43GncPIeNmKvL9MbKKFtR9km57dezQKgrBusA28mmYtj5GVrRM
QQ/vZ7icbqP8OdtL+YGtxdkPr5YhZ7c70Ii+i+JG2KDiTlgqO0TdgxbtmLecDFhR
K9oMi2usYxQRXX+C8IVBkgswnQougf/vYXSz7gqkZgRHblMtrCnZl8ayxHybhvQI
NIh9EbW1KDtndyMk3G6jAce3nGnkwTwsulHnujAm1e3+2SINvm/hFeoICxZIOXcC
D9Qvji72/Ya3+sdGAzfMiNeRdJ9kv/UIShJ7H0yuxemfb/fVNfkB8/0X/asrzSND
t86W3CqFBkzlgcfOTQQdcexgdhGq2no2Y+cCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQyEBjzHfLdLwZSeMDzbU8KRiqHsDAfBgNVHSMEGDAWgBSZBOy82F8iouiufh+Z
HoNF0GqYFjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTU4L21RVHN2TmhmSXFMb3JuNGZtUjZEUmRCcW1CWS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL21RVHN2TmhmSXFMb3JuNGZtUjZEUmRC
cW1CWS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85NTgvTWhBWTh4M3kzUzhHVW5qQTgyMVBDa1lxaDdBLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBMtogDANBgkqhkiG9w0BAQsFAAOCAQEAul4AuyvVynJjXSfa4G3Ft2yzynBI
qV+gtpX5E/EwzbwFZaESkZ4L3IpqqYRNoSNDMdMZjLAind/rft4FjpjBd7EsNeMA
1tMTUzy9WuQU0V1TMA6jVHqV/tQlqCEgUgz8axc8ubqMLvmVz6RZITFFX/lUYwLF
R4317DjzVc2nIyreS87aKzvJmULQTSgAODKwa5w9c5DzJtKti4QZzYZF6Z2XZx1X
bmmztAqxxa9MXWKH9sLej1nztrIl9jtlb8CR5UepW/OpVEKaeNjtypD5/+j9nkW9
gq/HXEaoIJ4XDc2agf/tN7jju6Cl7rsn+ZXrs5Ie3CiyeevB4BP0jqZ00w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:15 2024 by rpki-client on console-ams.rpki-client.org