Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/958/YxDzf9S9z76oAn4-gq-F8xF0KOg.roa
File:                     YxDzf9S9z76oAn4-gq-F8xF0KOg.roa (raw, json)
Hash identifier:          UL4zzUvO+RpncuucZ4IbEzl7u8d9TZeEeQ6/ZTSAoMA=
Subject key identifier:   63:10:F3:7F:D4:BD:CF:BE:A8:02:7E:3E:82:AF:85:F3:11:74:28:E8
Certificate issuer:       /CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
Certificate serial:       48
Authority key identifier: 99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/YxDzf9S9z76oAn4-gq-F8xF0KOg.roa
Signing time:             Tue 25 May 2021 02:47:01 +0000
ROA not before:           Tue 25 May 2021 02:47:01 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     38631
IP address blocks:        119.235.236.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
        Validity
            Not Before: May 25 02:47:01 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=6310F37FD4BDCFBEA8027E3E82AF85F3117428E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:30:21:b3:c3:25:68:6f:07:e7:68:87:89:49:
                    96:9e:5e:14:9b:32:86:fa:d3:dc:bb:7c:a8:81:df:
                    c9:d4:fe:a9:2b:5c:08:6c:c1:ba:a5:16:d6:65:11:
                    af:77:f9:c5:40:95:60:ad:4a:8a:0b:29:68:16:6d:
                    4b:20:6e:b5:ba:64:e9:e2:ae:54:81:b8:24:bc:13:
                    af:ab:02:3e:83:ce:fd:1d:5e:c2:89:e1:e2:56:05:
                    39:5e:13:e5:18:73:69:a6:64:a9:86:b3:c5:e9:2c:
                    71:25:32:20:ad:89:80:17:23:a8:1e:a5:e4:94:20:
                    4f:57:3a:29:5e:ea:37:06:d2:09:15:26:73:05:44:
                    4a:cb:3c:c5:50:68:6f:a6:c2:24:a6:ae:4d:31:56:
                    4c:63:ea:0c:28:4b:6e:22:77:22:96:f1:06:08:92:
                    46:36:30:3d:79:55:ec:e3:39:c1:b7:3f:89:d9:d2:
                    cf:26:db:57:94:1f:1f:a3:a8:0f:d5:1c:a6:03:4a:
                    65:96:b7:10:fd:8e:36:9c:1f:4d:7d:a8:be:bd:8b:
                    fc:96:84:88:0f:0a:c3:19:c0:82:61:8e:c5:02:8d:
                    6e:bc:4d:84:f1:c8:ce:c0:ad:29:6c:f9:5d:a5:e1:
                    9b:54:0c:05:8f:04:9a:66:44:eb:35:1f:cc:c3:a7:
                    c2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:10:F3:7F:D4:BD:CF:BE:A8:02:7E:3E:82:AF:85:F3:11:74:28:E8
            X509v3 Authority Key Identifier:
                keyid:99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/mQTsvNhfIqLorn4fmR6DRdBqmBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/YxDzf9S9z76oAn4-gq-F8xF0KOg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.235.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:2e:b0:0d:13:86:63:37:57:96:de:a4:d2:6e:d9:97:68:9c:
         25:0a:48:50:7d:10:eb:32:e2:31:68:89:35:c2:8f:f8:0c:59:
         ef:48:e2:ed:54:d2:50:1d:78:b9:32:74:f7:b6:c8:69:51:5b:
         1e:64:ca:b4:fb:3a:40:08:40:5e:44:28:5f:62:49:91:89:64:
         1c:fa:53:1d:f2:c0:90:d6:59:09:29:5c:59:f4:62:a6:ea:ce:
         b7:c1:9c:1f:8b:0f:f2:4b:c7:a0:8b:05:85:d6:30:99:6c:92:
         c8:87:b7:02:ee:37:8e:64:da:81:09:06:fd:24:e5:a5:a6:1c:
         20:51:76:67:68:c1:e3:3e:bf:d8:c3:e1:9f:f1:19:01:cf:62:
         26:6f:b3:38:8c:c4:96:90:57:c8:2f:c6:d6:a6:24:9e:65:fc:
         de:c1:1e:23:bf:eb:b4:97:9a:ce:77:a0:c7:90:75:b6:57:6c:
         63:ce:71:5f:28:0a:9b:00:6d:1e:05:9a:8c:ea:ac:f0:00:0d:
         9b:64:70:a0:b7:01:53:85:6d:db:80:03:ae:ce:a5:84:c4:d9:
         8e:ec:0e:d9:54:7b:6a:6f:9d:91:50:37:83:0f:c1:32:17:49:
         25:ab:76:c3:47:63:37:fd:11:40:ec:9e:8f:8a:f3:e2:2f:4d:
         21:69:f2:4b
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBSDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5OTA0
RUNCQ0Q4NUYyMkEyRThBRTdFMUY5OTFFODM0NUQwNkE5ODE2MB4XDTIxMDUyNTAy
NDcwMVoXDTIyMDUxNTAxMzAwMlowMzExMC8GA1UEAxMoNjMxMEYzN0ZENEJEQ0ZC
RUE4MDI3RTNFODJBRjg1RjMxMTc0MjhFODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMAwIbPDJWhvB+doh4lJlp5eFJsyhvrT3Lt8qIHfydT+qStcCGzB
uqUW1mURr3f5xUCVYK1KigspaBZtSyButbpk6eKuVIG4JLwTr6sCPoPO/R1ewonh
4lYFOV4T5RhzaaZkqYazxekscSUyIK2JgBcjqB6l5JQgT1c6KV7qNwbSCRUmcwVE
Sss8xVBob6bCJKauTTFWTGPqDChLbiJ3IpbxBgiSRjYwPXlV7OM5wbc/idnSzybb
V5QfH6OoD9UcpgNKZZa3EP2ONpwfTX2ovr2L/JaEiA8KwxnAgmGOxQKNbrxNhPHI
zsCtKWz5XaXhm1QMBY8EmmZE6zUfzMOnwvkCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBRjEPN/1L3PvqgCfj6Cr4XzEXQo6DAfBgNVHSMEGDAWgBSZBOy82F8iouiufh+Z
HoNF0GqYFjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTU4L21RVHN2TmhmSXFMb3JuNGZtUjZEUmRCcW1CWS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL21RVHN2TmhmSXFMb3JuNGZtUjZEUmRC
cW1CWS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC85NTgvWXhEemY5Uzl6NzZvQW40LWdxLUY4eEYwS09nLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAXfr7DANBgkqhkiG9w0BAQsFAAOCAQEA
eC6wDROGYzdXlt6k0m7Zl2icJQpIUH0Q6zLiMWiJNcKP+AxZ70ji7VTSUB14uTJ0
97bIaVFbHmTKtPs6QAhAXkQoX2JJkYlkHPpTHfLAkNZZCSlcWfRipurOt8GcH4sP
8kvHoIsFhdYwmWySyIe3Au43jmTagQkG/STlpaYcIFF2Z2jB4z6/2MPhn/EZAc9i
Jm+zOIzElpBXyC/G1qYknmX83sEeI7/rtJeaznegx5B1tldsY85xXygKmwBtHgWa
jOqs8AANm2RwoLcBU4Vt24ADrs6lhMTZjuwO2VR7am+dkVA3gw/BMhdJJat2w0dj
N/0RQOyej4rz4i9NIWnySw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:19 2023 by rpki-client on console-fra.rpki-client.org