Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/989/PA4xTHNiLJPgIOHSyjZ4O8Pqztw.roa
File:                     PA4xTHNiLJPgIOHSyjZ4O8Pqztw.roa (raw, json)
Hash identifier:          +i5CwJuEr/+JRIN/ZmML+8d3nLxImcPUsjNH7W6LqNk=
Subject key identifier:   3C:0E:31:4C:73:62:2C:93:E0:20:E1:D2:CA:36:78:3B:C3:EA:CE:DC
Certificate issuer:       /CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
Certificate serial:       3D
Authority key identifier: 8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/PA4xTHNiLJPgIOHSyjZ4O8Pqztw.roa
Signing time:             Sun 01 May 2022 01:30:43 +0000
ROA not before:           Sun 01 May 2022 01:30:42 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     45680
IP address blocks:        103.235.40.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
        Validity
            Not Before: May  1 01:30:42 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=3C0E314C73622C93E020E1D2CA36783BC3EACEDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:23:c8:80:71:31:2a:b6:cc:00:74:34:38:c1:
                    aa:93:64:b6:fc:8d:39:7d:2e:bc:9a:dc:5c:d3:b9:
                    e9:bf:73:1a:57:85:b3:ab:87:c4:c0:cb:c7:53:8a:
                    fe:2c:41:21:e5:13:4c:02:27:ca:6a:e6:d3:de:31:
                    46:ed:f0:12:52:d5:8f:63:15:37:5f:96:c0:81:09:
                    82:89:90:ae:19:69:ab:ef:f3:f0:c6:b6:ef:68:82:
                    ca:a1:5a:eb:28:1e:9d:63:de:bc:be:04:ed:0a:77:
                    e1:53:72:8d:58:ad:fb:3b:0b:04:ea:8b:42:65:e7:
                    a2:31:64:d0:e8:03:b1:0d:eb:6e:e4:e2:59:94:2e:
                    d3:7b:34:56:11:0b:f7:56:f6:a4:2d:bc:f2:86:1d:
                    e8:da:3b:03:e9:a9:f3:57:05:3f:26:d7:df:73:df:
                    a9:8a:6c:90:f3:6a:ec:45:0e:f2:f4:7d:80:6a:ea:
                    ff:56:f6:fc:9e:d6:c4:85:0f:1c:db:04:dd:a5:d9:
                    f4:c9:3c:7d:dc:88:bb:7d:d7:16:4e:1e:87:13:fc:
                    76:d9:62:bd:95:46:ca:45:ea:e1:6d:ef:08:1f:9f:
                    a6:fd:5d:7e:b0:40:37:e4:c5:aa:6c:e0:a8:cb:2e:
                    60:d3:d4:74:a3:dc:be:d8:d8:82:07:9e:dd:99:96:
                    b6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:0E:31:4C:73:62:2C:93:E0:20:E1:D2:CA:36:78:3B:C3:EA:CE:DC
            X509v3 Authority Key Identifier:
                keyid:8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/PA4xTHNiLJPgIOHSyjZ4O8Pqztw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.235.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:4d:e2:b2:7f:a2:c0:5e:fb:8f:70:5b:63:17:95:b5:49:a2:
         0d:2d:75:48:49:f4:e8:ba:f0:5f:09:86:cd:45:f2:4c:f7:15:
         f9:35:54:f1:f5:84:4e:97:1d:c0:fd:1a:0a:70:bd:40:a3:97:
         08:57:18:cb:49:56:3d:05:8d:6d:49:82:3a:45:01:04:7a:5e:
         46:1e:65:32:a4:ee:44:79:65:67:db:c2:72:4c:38:54:fb:d5:
         fc:00:88:ba:79:03:02:db:fa:43:22:42:78:42:bc:6a:24:3b:
         20:6d:98:2d:c4:df:19:25:ee:98:71:f0:7b:ee:4b:7c:75:9b:
         62:bb:c9:95:e4:da:9d:d1:8c:c4:f6:89:4a:fd:21:eb:11:d8:
         9c:26:d0:ff:40:b9:b6:ac:f1:eb:75:8c:58:25:7c:f0:27:9b:
         dc:fd:ee:1a:6d:2d:28:50:ab:36:d9:8e:f3:5e:bb:e0:e9:50:
         2b:63:0b:fd:4f:39:2a:97:d1:d8:c7:ea:20:7f:0f:16:a2:e6:
         03:58:ad:17:87:d4:a3:9f:d1:11:47:bb:ac:26:ee:81:37:bc:
         df:68:ad:a6:c7:cb:5c:e3:32:5d:7a:55:4a:d4:6e:f5:87:2a:
         e4:6c:53:4e:93:bc:c6:4b:70:da:c8:45:25:a0:b1:0f:c4:09:
         7f:1f:23:3f
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBPTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDI2
RTBEMTdFMzBEOEJGNTcxNEY0QkE5MkVFRUIwRDIyREREQjFEMB4XDTIyMDUwMTAx
MzA0MloXDTIzMDQyNzA5NTIzNFowMzExMC8GA1UEAxMoM0MwRTMxNEM3MzYyMkM5
M0UwMjBFMUQyQ0EzNjc4M0JDM0VBQ0VEQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJsjyIBxMSq2zAB0NDjBqpNktvyNOX0uvJrcXNO56b9zGleFs6uH
xMDLx1OK/ixBIeUTTAInymrm094xRu3wElLVj2MVN1+WwIEJgomQrhlpq+/z8Ma2
72iCyqFa6ygenWPevL4E7Qp34VNyjVit+zsLBOqLQmXnojFk0OgDsQ3rbuTiWZQu
03s0VhEL91b2pC288oYd6No7A+mp81cFPybX33PfqYpskPNq7EUO8vR9gGrq/1b2
/J7WxIUPHNsE3aXZ9Mk8fdyIu33XFk4ehxP8dtlivZVGykXq4W3vCB+fpv1dfrBA
N+TFqmzgqMsuYNPUdKPcvtjYggee3ZmWtikCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQ8DjFMc2Isk+Ag4dLKNng7w+rO3DAfBgNVHSMEGDAWgBSNJuDRfjDYv1cU9LqS
7usNIt3bHTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTg5L2pTYmcwWDR3Mkw5WEZQUzZrdTdyRFNMZDJ4MC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pTYmcwWDR3Mkw5WEZQUzZrdTdyRFNM
ZDJ4MC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85ODkvUEE0eFRITmlMSlBnSU9IU3lqWjRPOFBxenR3LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmfrKDANBgkqhkiG9w0BAQsFAAOCAQEAIE3isn+iwF77j3BbYxeVtUmiDS11
SEn06LrwXwmGzUXyTPcV+TVU8fWETpcdwP0aCnC9QKOXCFcYy0lWPQWNbUmCOkUB
BHpeRh5lMqTuRHllZ9vCckw4VPvV/ACIunkDAtv6QyJCeEK8aiQ7IG2YLcTfGSXu
mHHwe+5LfHWbYrvJleTandGMxPaJSv0h6xHYnCbQ/0C5tqzx63WMWCV88Ceb3P3u
Gm0tKFCrNtmO81674OlQK2ML/U85KpfR2MfqIH8PFqLmA1itF4fUo5/REUe7rCbu
gTe832itpsfLXOMyXXpVStRu9Ycq5GxTTpO8xktw2shFJaCxD8QJfx8jPw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:21 2023 by rpki-client on console-ams.rpki-client.org