Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10762/BXpbM4psdyITph8U7fh-pbicEBM.roa
File:                     BXpbM4psdyITph8U7fh-pbicEBM.roa (raw, json)
Hash identifier:          TQbb85tAZ8iyCUs9ex3JCN6oi1wjQwPgWeE+UG0Ks64=
Subject key identifier:   05:7A:5B:33:8A:6C:77:22:13:A6:1F:14:ED:F8:7E:A5:B8:9C:10:13
Certificate issuer:       /CN=28393FAE129B501824696BAE24B64734A203C376
Certificate serial:       49
Authority key identifier: 28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/BXpbM4psdyITph8U7fh-pbicEBM.roa
Signing time:             Fri 06 Jan 2023 09:39:57 +0000
ROA not before:           Fri 06 Jan 2023 09:39:57 +0000
ROA not after:            Fri 15 Dec 2023 01:30:02 +0000
asID:                     7514
IP address blocks:        211.13.192.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28393FAE129B501824696BAE24B64734A203C376
        Validity
            Not Before: Jan  6 09:39:57 2023 GMT
            Not After : Dec 15 01:30:02 2023 GMT
        Subject: CN=057A5B338A6C772213A61F14EDF87EA5B89C1013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bd:68:2b:8a:cc:f5:6c:f7:31:75:ed:13:42:
                    d1:ed:ca:b8:0e:02:d6:f7:ba:12:77:45:47:68:21:
                    4b:ff:b7:41:71:e8:3d:9f:e7:6b:61:50:4a:53:40:
                    98:c3:bd:c9:69:4b:c6:e3:95:30:0e:c7:74:d8:10:
                    dd:4d:2f:d5:4a:51:91:bc:3e:ee:d3:45:81:bb:47:
                    85:49:b5:79:06:9f:39:2b:d7:71:38:01:81:d3:57:
                    41:c8:32:d8:3b:4d:85:80:b5:83:b6:c2:e9:48:00:
                    47:bb:67:2e:ae:ff:f4:c6:3d:78:65:1d:55:fe:ba:
                    f4:67:0b:fa:dc:65:6f:21:dd:32:88:00:71:5b:f4:
                    2e:98:f3:25:c3:89:7d:4f:c5:ce:9f:6e:9a:b3:b5:
                    06:ff:bc:d9:4c:ea:c8:7e:44:47:38:0e:fc:11:b9:
                    fd:89:96:b0:e4:42:a0:45:ba:8d:b6:42:1e:cf:be:
                    b0:79:ec:9f:6b:b7:bb:1e:18:d8:7f:82:cb:2b:88:
                    98:5f:cf:bf:d5:32:cf:18:ca:ac:5a:45:a5:7e:fa:
                    e7:d1:89:f3:02:0b:b0:81:92:07:3a:e7:f5:64:09:
                    06:ed:fe:0d:31:4a:df:74:09:6e:47:0f:18:8b:e0:
                    94:9b:93:7b:ef:78:49:a4:88:98:ab:20:bd:af:b6:
                    b6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:7A:5B:33:8A:6C:77:22:13:A6:1F:14:ED:F8:7E:A5:B8:9C:10:13
            X509v3 Authority Key Identifier:
                keyid:28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/BXpbM4psdyITph8U7fh-pbicEBM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.13.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         70:12:59:6d:a1:f3:e9:a7:59:69:99:ec:03:a6:2b:dc:e1:3e:
         f8:6b:9d:c5:22:b2:33:8e:ee:e8:20:ac:83:b9:e4:d3:a6:72:
         f9:39:ca:83:00:6d:26:46:21:fc:0c:08:6d:3c:a3:2b:5c:18:
         e9:b8:b7:49:12:ac:78:f3:db:e7:3f:34:66:c8:1b:ea:41:ca:
         22:9f:bd:2c:d7:eb:ff:00:36:4b:ce:4b:fe:7d:04:10:b9:74:
         bc:18:a3:15:af:63:46:88:8c:cd:c5:4b:87:0d:07:b3:26:06:
         24:c6:e4:6a:71:7b:2b:ab:de:17:12:5b:6b:b7:a0:e2:59:58:
         54:42:7e:28:3e:57:64:c6:ab:bf:6f:f0:2d:f4:48:ed:f0:e6:
         5d:6e:35:40:50:49:e8:9e:13:f1:10:ff:ce:7c:f1:e6:33:6c:
         36:7c:95:d6:3b:c3:b4:60:20:85:9e:ad:70:99:ac:d4:20:fc:
         51:b6:06:0a:6a:0c:be:d0:c9:22:fd:6e:29:78:e0:5a:cc:6c:
         63:9f:63:7d:c4:5e:bf:86:2a:cc:c1:42:e3:c3:11:ff:96:03:
         cc:e3:4b:8b:cd:bd:1c:4c:c4:47:2f:58:52:63:59:9d:bc:d3:
         02:fe:da:ea:5b:b7:3a:45:0e:6d:a6:d4:4a:80:94:19:a1:be:
         ce:86:1e:3a
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBSTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyODM5
M0ZBRTEyOUI1MDE4MjQ2OTZCQUUyNEI2NDczNEEyMDNDMzc2MB4XDTIzMDEwNjA5
Mzk1N1oXDTIzMTIxNTAxMzAwMlowMzExMC8GA1UEAxMoMDU3QTVCMzM4QTZDNzcy
MjEzQTYxRjE0RURGODdFQTVCODlDMTAxMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALK9aCuKzPVs9zF17RNC0e3KuA4C1ve6EndFR2ghS/+3QXHoPZ/n
a2FQSlNAmMO9yWlLxuOVMA7HdNgQ3U0v1UpRkbw+7tNFgbtHhUm1eQafOSvXcTgB
gdNXQcgy2DtNhYC1g7bC6UgAR7tnLq7/9MY9eGUdVf669GcL+txlbyHdMogAcVv0
LpjzJcOJfU/Fzp9umrO1Bv+82UzqyH5ERzgO/BG5/YmWsORCoEW6jbZCHs++sHns
n2u3ux4Y2H+CyyuImF/Pv9UyzxjKrFpFpX7659GJ8wILsIGSBzrn9WQJBu3+DTFK
33QJbkcPGIvglJuTe+94SaSImKsgva+2tqUCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBQFelszimx3IhOmHxTt+H6luJwQEzAfBgNVHSMEGDAWgBQoOT+uEptQGCRpa64k
tkc0ogPDdjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTA3NjIvS0RrX3JoS2JVQmdrYVd1dUpMWkhOS0lEdzNZLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS0RrX3JoS2JVQmdrYVd1dUpMWkhO
S0lEdzNZLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzEwNzYyL0JYcGJNNHBzZHlJVHBoOFU3ZmgtcGJpY0VCTS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAXTDcAwDQYJKoZIhvcNAQELBQADggEBAHASWW2h8+mnWWmZ7AOmK9zh
PvhrncUisjOO7uggrIO55NOmcvk5yoMAbSZGIfwMCG08oytcGOm4t0kSrHjz2+c/
NGbIG+pByiKfvSzX6/8ANkvOS/59BBC5dLwYoxWvY0aIjM3FS4cNB7MmBiTG5Gpx
eyur3hcSW2u3oOJZWFRCfig+V2TGq79v8C30SO3w5l1uNUBQSeieE/EQ/8588eYz
bDZ8ldY7w7RgIIWerXCZrNQg/FG2BgpqDL7QySL9bil44FrMbGOfY33EXr+GKszB
QuPDEf+WA8zjS4vNvRxMxEcvWFJjWZ280wL+2upbtzpFDm2m1EqAlBmhvs6GHjo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org