Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/4Rs-ZHLPtpT27o83qNLwz2jNXH8.roa
File:                     4Rs-ZHLPtpT27o83qNLwz2jNXH8.roa (raw, json)
Hash identifier:          w4imWyggviLDmgTTYhGQe56i34HqEXgk17RaZSNtzr4=
Subject key identifier:   E1:1B:3E:64:72:CF:B6:94:F6:EE:8F:37:A8:D2:F0:CF:68:CD:5C:7F
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       015A
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/4Rs-ZHLPtpT27o83qNLwz2jNXH8.roa
Signing time:             Mon 01 May 2023 01:28:18 +0000
ROA not before:           Mon 01 May 2023 01:28:18 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     4713
IP address blocks:        61.214.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 346 (0x15a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  1 01:28:18 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=E11B3E6472CFB694F6EE8F37A8D2F0CF68CD5C7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a0:4a:d4:4e:31:39:1d:48:6a:3d:e4:f5:60:
                    e7:65:9a:37:44:ce:85:cc:bb:7f:a5:5b:b2:95:94:
                    8a:17:b1:b6:d5:5c:fd:c5:a5:0e:e8:1a:eb:81:2b:
                    c2:28:1b:a0:31:bd:a5:33:3e:ad:7a:88:30:02:88:
                    13:99:77:42:96:45:1d:85:46:89:54:30:60:03:7d:
                    b7:c6:37:80:0e:2b:b3:e5:2b:22:6c:b5:bf:0d:44:
                    d6:78:3a:b3:b8:b7:2a:07:bf:32:1b:7f:91:20:9d:
                    a9:c8:dd:c5:9d:cd:1a:b3:ca:b4:1e:76:eb:b9:81:
                    4e:23:a9:ba:30:2e:10:2b:e1:fc:4b:d4:f6:7e:09:
                    14:93:89:a4:70:63:ea:fe:85:8f:af:64:47:b2:8b:
                    0f:80:b0:a6:90:99:1e:22:e0:17:6b:99:d2:9e:fa:
                    5a:8e:90:bb:cd:9e:74:7c:c7:cb:e2:e7:41:99:9b:
                    00:0c:0c:2f:75:13:44:ea:91:cf:4c:fc:a9:dc:52:
                    70:6c:35:75:d4:45:a2:1f:12:c6:21:d6:68:8c:a0:
                    83:b5:53:ed:40:f2:6e:60:0b:a8:d8:fb:b7:3e:18:
                    b0:ad:31:54:00:84:91:31:aa:b7:ab:2f:0e:6d:01:
                    53:24:cb:07:85:69:a3:99:a9:b7:bd:7d:40:81:0a:
                    46:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:1B:3E:64:72:CF:B6:94:F6:EE:8F:37:A8:D2:F0:CF:68:CD:5C:7F
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/4Rs-ZHLPtpT27o83qNLwz2jNXH8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.214.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         94:93:82:b4:ca:3a:99:7b:8f:e0:c0:b2:cc:a3:ee:37:6f:3a:
         7b:e1:e8:cc:ec:13:cb:4e:12:7c:29:2e:a4:35:89:24:13:15:
         33:83:6f:c8:18:71:b7:ba:b7:da:fb:c9:5c:fe:a0:59:a1:82:
         c5:87:a9:99:f9:0e:bc:a4:0f:19:c4:ba:40:6a:9e:cf:b2:bf:
         b2:63:26:68:74:48:ff:e4:6c:0a:ee:e0:91:74:bd:c9:38:ec:
         35:33:0b:d1:23:09:d3:7b:6d:fa:aa:95:e1:b4:51:39:03:b9:
         88:e1:95:3f:0d:43:f9:7c:e3:a6:74:54:d5:b1:0d:00:93:fd:
         c7:1c:8f:1a:e3:f6:43:71:88:9e:7b:7a:d3:0e:86:de:72:08:
         90:ea:79:50:e7:5b:9f:1f:64:53:ed:ca:50:ea:87:da:72:52:
         a8:46:e8:08:23:fc:a8:d4:03:d1:33:80:d8:cb:c8:36:58:fd:
         62:28:8e:82:3d:43:64:93:6e:b8:f1:16:18:4f:6b:f3:2f:16:
         57:79:cd:94:6c:00:1c:b5:b6:04:47:0f:02:8a:5c:b9:df:30:
         e1:85:f6:e0:08:df:03:6c:a4:b2:90:ab:5f:7f:44:0c:7b:83:
         92:b7:4d:f9:53:60:87:9e:05:d8:51:b6:09:24:fd:bf:2d:83:
         4e:28:32:9c
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAVowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yMzA1MDEw
MTI4MThaFw0yNDA0MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEUxMUIzRTY0NzJDRkI2
OTRGNkVFOEYzN0E4RDJGMENGNjhDRDVDN0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDYoErUTjE5HUhqPeT1YOdlmjdEzoXMu3+lW7KVlIoXsbbVXP3F
pQ7oGuuBK8IoG6AxvaUzPq16iDACiBOZd0KWRR2FRolUMGADfbfGN4AOK7PlKyJs
tb8NRNZ4OrO4tyoHvzIbf5EgnanI3cWdzRqzyrQeduu5gU4jqbowLhAr4fxL1PZ+
CRSTiaRwY+r+hY+vZEeyiw+AsKaQmR4i4BdrmdKe+lqOkLvNnnR8x8vi50GZmwAM
DC91E0Tqkc9M/KncUnBsNXXURaIfEsYh1miMoIO1U+1A8m5gC6jY+7c+GLCtMVQA
hJExqrerLw5tAVMkyweFaaOZqbe9fUCBCkY3AgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQU4Rs+ZHLPtpT27o83qNLwz2jNXH8wHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTMxLzRScy1aSExQdHBUMjdvODNxTkx3ejJqTlhIOC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA91jANBgkqhkiG9w0BAQsFAAOCAQEAlJOCtMo6mXuP4MCyzKPuN286e+Ho
zOwTy04SfCkupDWJJBMVM4NvyBhxt7q32vvJXP6gWaGCxYepmfkOvKQPGcS6QGqe
z7K/smMmaHRI/+RsCu7gkXS9yTjsNTML0SMJ03tt+qqV4bRROQO5iOGVPw1D+Xzj
pnRU1bENAJP9xxyPGuP2Q3GInnt60w6G3nIIkOp5UOdbnx9kU+3KUOqH2nJSqEbo
CCP8qNQD0TOA2MvINlj9YiiOgj1DZJNuuPEWGE9r8y8WV3nNlGwAHLW2BEcPAopc
ud8w4YX24AjfA2ykspCrX39EDHuDkrdN+VNgh54F2FG2CST9vy2DTigynA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org