Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/984/PzZHEF8JxyONFDU_3Lj-JTt64So.roa
File:                     PzZHEF8JxyONFDU_3Lj-JTt64So.roa (raw, json)
Hash identifier:          PNvLoO9hMtXh3NIzeIA7qCoaHxPwxkKwSUH2Y0kB+8c=
Subject key identifier:   3F:36:47:10:5F:09:C7:23:8D:14:35:3F:DC:B8:FE:25:3B:7A:E1:2A
Certificate issuer:       /CN=07192C8FA38FFFCDB1CF5024ABCAD2220DF7AE15
Certificate serial:       05
Authority key identifier: 07:19:2C:8F:A3:8F:FF:CD:B1:CF:50:24:AB:CA:D2:22:0D:F7:AE:15
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Bxksj6OP_82xz1Akq8rSIg33rhU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/PzZHEF8JxyONFDU_3Lj-JTt64So.roa
Signing time:             Mon 03 Oct 2022 07:45:55 +0000
ROA not before:           Mon 03 Oct 2022 07:45:55 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     45677
IP address blocks:        192.92.248.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07192C8FA38FFFCDB1CF5024ABCAD2220DF7AE15
        Validity
            Not Before: Oct  3 07:45:55 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=3F3647105F09C7238D14353FDCB8FE253B7AE12A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c0:aa:31:1b:dc:61:66:2f:c7:f6:85:db:ff:
                    4a:7f:99:69:0c:4a:fd:dc:a6:96:25:55:33:a1:88:
                    11:58:a8:04:77:81:e7:3d:1a:ea:dc:f1:53:b2:53:
                    cb:e5:77:77:d4:15:33:0a:10:9e:36:c6:14:69:d9:
                    34:c4:6c:a2:16:60:3d:1f:de:51:9d:9d:5d:31:9a:
                    f0:7a:f2:08:80:00:ce:d4:f8:40:00:6c:4b:8f:b8:
                    7f:64:f1:da:80:b2:b0:87:6e:6d:94:71:82:c9:05:
                    8c:c0:35:9b:ef:40:6d:b8:96:fe:a5:34:83:f7:b4:
                    e7:ce:e4:67:b6:a6:45:7f:7a:44:42:29:ba:a4:38:
                    4e:54:1b:56:5c:3e:7a:13:48:bf:1a:d1:a4:59:c8:
                    cb:40:3e:77:f6:66:c4:4b:44:75:3b:bc:fc:fd:14:
                    15:46:9b:6b:86:62:cf:1e:85:fc:8a:2e:6b:91:7d:
                    a0:30:36:70:cf:8e:38:00:8f:44:4d:63:08:93:87:
                    09:2e:97:d4:5b:ea:86:ab:57:0a:76:ef:ee:2d:77:
                    32:10:4f:94:5e:6f:03:4a:87:2e:39:c6:a4:c4:09:
                    95:80:d2:c4:65:b9:05:a0:5b:63:5b:b4:96:97:37:
                    f6:77:69:98:cf:b6:18:5b:8d:8c:47:bc:43:66:a7:
                    33:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:36:47:10:5F:09:C7:23:8D:14:35:3F:DC:B8:FE:25:3B:7A:E1:2A
            X509v3 Authority Key Identifier:
                keyid:07:19:2C:8F:A3:8F:FF:CD:B1:CF:50:24:AB:CA:D2:22:0D:F7:AE:15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/Bxksj6OP_82xz1Akq8rSIg33rhU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Bxksj6OP_82xz1Akq8rSIg33rhU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/PzZHEF8JxyONFDU_3Lj-JTt64So.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.92.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a5:e2:c2:cc:98:de:94:70:8a:8a:71:86:c8:7c:e3:56:17:34:
         ae:fd:2d:b7:58:79:0e:cc:8b:b2:c3:b3:28:9b:da:e6:1c:84:
         66:ea:92:b7:9a:5f:1c:e9:4c:d3:d9:f0:c2:22:42:47:3a:ae:
         fd:38:48:e1:b2:10:57:e1:ea:fc:f9:67:e0:ee:78:7a:46:6f:
         99:b1:0e:a3:8e:68:8b:92:a1:80:34:3a:ae:79:04:de:51:ec:
         3e:ba:ef:b2:f4:dd:af:e8:9c:ea:56:0a:c7:52:8a:ab:ba:27:
         f6:04:3b:f7:18:55:49:9b:40:38:54:d6:69:4a:71:fe:34:e0:
         d3:e2:b1:69:3c:a6:73:fb:c5:1d:35:de:78:a9:9f:f4:98:57:
         24:16:8e:d8:ba:15:de:8e:c6:8c:f8:f6:96:d1:bf:aa:e2:b3:
         ae:8e:56:d3:67:1b:8b:2c:7a:1c:4c:d8:fa:b7:4f:db:cc:e8:
         d2:52:80:11:81:69:ad:56:1f:2b:5f:3e:c8:6b:bd:7d:4f:dd:
         81:52:9a:98:42:b2:ad:d5:72:94:a1:c1:6b:5f:1e:bb:db:3d:
         a3:77:03:cd:99:95:b0:fd:d5:3a:d5:14:ce:17:1a:f8:e7:04:
         a1:90:da:1c:4d:be:4f:8d:d2:e3:f6:02:12:cd:40:1a:d1:11:
         55:14:c2:36
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBBTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwNzE5
MkM4RkEzOEZGRkNEQjFDRjUwMjRBQkNBRDIyMjBERjdBRTE1MB4XDTIyMTAwMzA3
NDU1NVoXDTIzMDkxNTAxMzAwM1owMzExMC8GA1UEAxMoM0YzNjQ3MTA1RjA5Qzcy
MzhEMTQzNTNGRENCOEZFMjUzQjdBRTEyQTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMHAqjEb3GFmL8f2hdv/Sn+ZaQxK/dymliVVM6GIEVioBHeB5z0a
6tzxU7JTy+V3d9QVMwoQnjbGFGnZNMRsohZgPR/eUZ2dXTGa8HryCIAAztT4QABs
S4+4f2Tx2oCysIdubZRxgskFjMA1m+9AbbiW/qU0g/e0587kZ7amRX96REIpuqQ4
TlQbVlw+ehNIvxrRpFnIy0A+d/ZmxEtEdTu8/P0UFUaba4Zizx6F/Ioua5F9oDA2
cM+OOACPRE1jCJOHCS6X1FvqhqtXCnbv7i13MhBPlF5vA0qHLjnGpMQJlYDSxGW5
BaBbY1u0lpc39ndpmM+2GFuNjEe8Q2anM4kCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQ/NkcQXwnHI40UNT/cuP4lO3rhKjAfBgNVHSMEGDAWgBQHGSyPo4//zbHPUCSr
ytIiDfeuFTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTg0L0J4a3NqNk9QXzgyeHoxQWtxOHJTSWczM3JoVS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0J4a3NqNk9QXzgyeHoxQWtxOHJTSWcz
M3JoVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85ODQvUHpaSEVGOEp4eU9ORkRVXzNMai1KVHQ2NFNvLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA8Bc+DANBgkqhkiG9w0BAQsFAAOCAQEApeLCzJjelHCKinGGyHzjVhc0rv0t
t1h5DsyLssOzKJva5hyEZuqSt5pfHOlM09nwwiJCRzqu/ThI4bIQV+Hq/Pln4O54
ekZvmbEOo45oi5KhgDQ6rnkE3lHsPrrvsvTdr+ic6lYKx1KKq7on9gQ79xhVSZtA
OFTWaUpx/jTg0+KxaTymc/vFHTXeeKmf9JhXJBaO2LoV3o7GjPj2ltG/quKzro5W
02cbiyx6HEzY+rdP28zo0lKAEYFprVYfK18+yGu9fU/dgVKamEKyrdVylKHBa18e
u9s9o3cDzZmVsP3VOtUUzhca+OcEoZDaHE2+T43S4/YCEs1AGtERVRTCNg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:15 2024 by rpki-client on console-ams.rpki-client.org