Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/958/jBgPxS-jd30arVYjzw4gVxMRsDE.roa
File:                     jBgPxS-jd30arVYjzw4gVxMRsDE.roa (raw, json)
Hash identifier:          PFDz1HiUodZ9j946b4ICLPNXRsKJe7yyQ9J13huXYtE=
Subject key identifier:   8C:18:0F:C5:2F:A3:77:7D:1A:AD:56:23:CF:0E:20:57:13:11:B0:31
Certificate issuer:       /CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
Certificate serial:       5B
Authority key identifier: 99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/jBgPxS-jd30arVYjzw4gVxMRsDE.roa
Signing time:             Sun 01 May 2022 01:30:53 +0000
ROA not before:           Sun 01 May 2022 01:30:53 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     38631
IP address blocks:        203.104.152.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
        Validity
            Not Before: May  1 01:30:53 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=8C180FC52FA3777D1AAD5623CF0E20571311B031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:58:5d:ce:00:b2:28:ac:f7:bb:e4:21:8a:32:
                    0b:62:32:dd:62:1f:50:34:f9:9e:20:93:42:b2:f3:
                    bc:f3:3f:2d:49:71:f3:52:c0:b7:6c:0a:77:31:9c:
                    e4:29:ff:71:fb:14:62:a1:46:75:b9:74:54:73:77:
                    7c:4b:a3:b1:1f:af:83:92:1f:24:99:75:2e:fe:76:
                    0b:d8:10:72:e9:66:71:bf:12:00:36:65:d1:f4:54:
                    45:22:c6:43:ba:15:8a:11:26:ad:12:2d:ff:50:aa:
                    9d:28:70:9c:5b:56:c4:52:09:0a:32:0e:6d:c1:75:
                    e7:cd:d9:8f:64:e1:15:ae:fe:d4:f3:12:de:cd:f9:
                    a6:ec:f6:17:91:45:92:83:25:b2:be:a1:95:dc:68:
                    6c:53:3a:09:f9:01:f5:7e:e1:65:47:7e:17:cd:a5:
                    e3:b2:36:02:b3:41:90:44:3d:63:83:bb:c7:97:80:
                    b5:60:1f:a7:ea:a2:be:a9:f0:cd:1a:be:cd:99:d4:
                    46:51:5c:fa:7a:8d:08:2b:e7:6f:04:cb:43:00:0d:
                    5d:f8:f6:a6:ec:d4:e4:b0:cc:8b:08:a1:d0:7a:70:
                    bb:b8:a5:41:e6:68:93:b6:86:8c:5b:3e:a9:05:6c:
                    a5:a3:90:79:03:6d:3d:77:c5:6d:b7:fa:b9:8a:38:
                    78:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:18:0F:C5:2F:A3:77:7D:1A:AD:56:23:CF:0E:20:57:13:11:B0:31
            X509v3 Authority Key Identifier:
                keyid:99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/mQTsvNhfIqLorn4fmR6DRdBqmBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/jBgPxS-jd30arVYjzw4gVxMRsDE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.104.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:37:24:56:a2:04:f2:e1:b1:72:db:fc:2d:2c:59:82:a8:6e:
         f3:ba:89:1f:ef:28:5b:25:10:cd:b0:9c:1a:fa:18:e7:65:af:
         c5:68:d6:64:5e:73:3b:a4:7e:75:74:7e:2e:85:59:5c:cb:b2:
         b4:28:b0:e7:22:5d:78:b6:75:5e:a3:6f:2a:55:d4:d4:36:3f:
         e8:dd:48:8e:ac:71:9d:91:5e:c6:6c:09:ad:27:0c:05:14:2c:
         08:44:1a:bb:20:b0:93:a4:bd:4e:4b:20:bd:2d:20:3c:8e:32:
         17:e0:79:fa:28:74:ac:b0:3d:0c:c3:dc:c4:13:a5:4c:90:9c:
         7f:dd:30:72:05:ce:e9:9c:31:b9:a4:0d:44:ed:ef:f1:04:94:
         fd:a9:e6:65:e4:c5:62:0b:eb:19:25:ba:b0:f0:d0:32:2b:53:
         64:99:f0:fb:77:e8:55:6c:48:db:3b:be:78:b4:8f:a8:f3:05:
         f1:19:70:a6:c7:b8:02:f8:53:26:8a:ca:ea:4b:a3:32:a9:17:
         8c:8a:46:df:29:c7:02:f6:3f:a0:eb:b8:47:d9:a6:c6:dc:b0:
         f8:aa:5a:59:79:28:87:ce:c8:9f:93:9d:5e:bd:86:d3:31:66:
         df:9f:81:27:2d:e2:c5:51:4b:de:b1:14:2b:84:5b:c1:ea:bb:
         ff:6b:52:4f
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBWzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5OTA0
RUNCQ0Q4NUYyMkEyRThBRTdFMUY5OTFFODM0NUQwNkE5ODE2MB4XDTIyMDUwMTAx
MzA1M1oXDTIzMDQyNzA5NTIzNFowMzExMC8GA1UEAxMoOEMxODBGQzUyRkEzNzc3
RDFBQUQ1NjIzQ0YwRTIwNTcxMzExQjAzMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAO5YXc4Asiis97vkIYoyC2Iy3WIfUDT5niCTQrLzvPM/LUlx81LA
t2wKdzGc5Cn/cfsUYqFGdbl0VHN3fEujsR+vg5IfJJl1Lv52C9gQculmcb8SADZl
0fRURSLGQ7oVihEmrRIt/1CqnShwnFtWxFIJCjIObcF1583Zj2ThFa7+1PMS3s35
puz2F5FFkoMlsr6hldxobFM6CfkB9X7hZUd+F82l47I2ArNBkEQ9Y4O7x5eAtWAf
p+qivqnwzRq+zZnURlFc+nqNCCvnbwTLQwANXfj2puzU5LDMiwih0Hpwu7ilQeZo
k7aGjFs+qQVspaOQeQNtPXfFbbf6uYo4eJECAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSMGA/FL6N3fRqtViPPDiBXExGwMTAfBgNVHSMEGDAWgBSZBOy82F8iouiufh+Z
HoNF0GqYFjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTU4L21RVHN2TmhmSXFMb3JuNGZtUjZEUmRCcW1CWS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL21RVHN2TmhmSXFMb3JuNGZtUjZEUmRC
cW1CWS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85NTgvakJnUHhTLWpkMzBhclZZanp3NGdWeE1Sc0RFLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAstomDANBgkqhkiG9w0BAQsFAAOCAQEAYDckVqIE8uGxctv8LSxZgqhu87qJ
H+8oWyUQzbCcGvoY52WvxWjWZF5zO6R+dXR+LoVZXMuytCiw5yJdeLZ1XqNvKlXU
1DY/6N1IjqxxnZFexmwJrScMBRQsCEQauyCwk6S9TksgvS0gPI4yF+B5+ih0rLA9
DMPcxBOlTJCcf90wcgXO6ZwxuaQNRO3v8QSU/anmZeTFYgvrGSW6sPDQMitTZJnw
+3foVWxI2zu+eLSPqPMF8Rlwpse4AvhTJorK6kujMqkXjIpG3ynHAvY/oOu4R9mm
xtyw+KpaWXkoh87In5OdXr2G0zFm35+BJy3ixVFL3rEUK4Rbweq7/2tSTw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:15 2024 by rpki-client on console-ams.rpki-client.org