Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/_-zxEtK6l93jYS75Xz8aAH7i7UU.roa
File:                     _-zxEtK6l93jYS75Xz8aAH7i7UU.roa (raw, json)
Hash identifier:          U70PoFwM+OCyZGdvfJDIk0HUFxTHbfqZJL7CuGLMuKk=
Subject key identifier:   FF:EC:F1:12:D2:BA:97:DD:E3:61:2E:F9:5F:3F:1A:00:7E:E2:ED:45
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       69
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/_-zxEtK6l93jYS75Xz8aAH7i7UU.roa
Signing time:             Sat 08 May 2021 04:05:38 +0000
ROA not before:           Sat 08 May 2021 04:05:38 +0000
ROA not after:            Fri 15 Apr 2022 01:30:01 +0000
asID:                     4713
IP address blocks:        61.214.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  8 04:05:38 2021 GMT
            Not After : Apr 15 01:30:01 2022 GMT
        Subject: CN=FFECF112D2BA97DDE3612EF95F3F1A007EE2ED45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5d:4d:ac:1b:f2:28:4b:8e:84:9c:b5:80:bb:
                    d2:80:0b:4b:e3:0c:6a:83:d9:18:d8:7f:2a:f6:b8:
                    e8:b9:a1:f9:ae:21:03:3c:34:af:dc:23:34:2a:0b:
                    cd:47:da:d9:7a:ca:61:32:49:6e:d8:87:3d:c1:03:
                    af:06:84:0f:ea:37:08:b1:d0:cb:ba:ce:64:68:8e:
                    e9:26:5c:a0:45:6f:19:8b:70:b3:c3:23:2c:65:0d:
                    cf:27:f0:ac:46:85:6e:c1:49:1e:92:4c:d7:ad:24:
                    47:a3:9e:47:31:92:53:8f:6f:e1:a0:ee:76:8f:9a:
                    3e:02:3c:a3:8c:bf:43:88:e0:bd:c3:d9:d6:2b:15:
                    62:79:ec:be:af:84:8f:0f:05:88:7d:f7:fe:90:f4:
                    36:a7:bd:00:8f:d5:49:fc:d5:c8:df:d2:5d:9a:c2:
                    f3:43:65:35:49:b6:54:de:02:aa:64:4a:6d:f0:2f:
                    10:42:20:5f:04:b3:94:ac:c5:99:d2:bb:bc:63:5c:
                    ee:5d:8e:85:49:53:f4:48:7a:b9:80:ad:f1:d4:8e:
                    4f:1e:11:8b:f8:08:85:ec:81:dd:a7:ce:10:32:a8:
                    c9:39:26:73:8f:f2:17:04:16:60:7a:3c:70:df:31:
                    9c:9e:d0:85:ad:48:6f:aa:60:80:a2:03:da:a2:fc:
                    2b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:EC:F1:12:D2:BA:97:DD:E3:61:2E:F9:5F:3F:1A:00:7E:E2:ED:45
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/_-zxEtK6l93jYS75Xz8aAH7i7UU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.214.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         88:8d:6e:f4:98:3d:b1:a3:06:09:af:1f:2f:d6:da:50:a9:dc:
         46:b2:82:5e:d5:46:8a:a0:8e:84:33:6d:5a:ff:a3:78:e6:5d:
         d7:79:cf:49:39:83:e6:ac:5b:9a:3d:e9:a7:91:cf:25:f6:93:
         72:83:99:6d:ce:0f:3f:73:d2:ac:39:e2:2a:95:a5:e3:97:b0:
         20:5f:6b:5a:4c:4f:0d:c1:b1:ba:c8:db:a2:12:26:46:96:c5:
         d3:2e:30:41:23:7f:3a:fb:fe:b4:e7:a8:28:48:8c:d4:75:83:
         cb:a3:61:a9:02:5b:d1:15:0f:b9:d3:70:0d:f5:70:7f:04:a7:
         3f:93:f4:70:8f:76:04:a5:cb:3f:f2:f1:fa:ff:00:b2:a1:8c:
         ce:85:03:86:b1:87:ca:b0:19:93:67:80:2d:23:8d:2b:d5:d8:
         09:99:df:78:3c:26:70:6c:7b:0c:75:6e:ba:fd:30:bf:37:45:
         21:4e:f2:ad:d6:04:dc:f2:53:54:a5:a2:46:c2:a9:59:2d:98:
         cd:80:97:ac:65:ff:c2:fe:6a:5e:00:03:18:49:25:8f:d9:32:
         5e:c0:15:1a:7e:2d:3f:63:fb:9a:54:7b:3a:b6:65:82:f1:78:
         cb:61:4c:9a:38:4a:8f:3d:a6:3a:d2:8d:18:ea:f1:0e:c1:08:
         2e:91:eb:58
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgIBaTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyRkMw
OTkyM0IwNUE3RThGMUFERDlBNTk4NEVEQzE5MzIwREI5NzRCMB4XDTIxMDUwODA0
MDUzOFoXDTIyMDQxNTAxMzAwMVowMzExMC8GA1UEAxMoRkZFQ0YxMTJEMkJBOTdE
REUzNjEyRUY5NUYzRjFBMDA3RUUyRUQ0NTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKldTawb8ihLjoSctYC70oALS+MMaoPZGNh/Kva46Lmh+a4hAzw0
r9wjNCoLzUfa2XrKYTJJbtiHPcEDrwaED+o3CLHQy7rOZGiO6SZcoEVvGYtws8Mj
LGUNzyfwrEaFbsFJHpJM160kR6OeRzGSU49v4aDudo+aPgI8o4y/Q4jgvcPZ1isV
Ynnsvq+Ejw8FiH33/pD0Nqe9AI/VSfzVyN/SXZrC80NlNUm2VN4CqmRKbfAvEEIg
XwSzlKzFmdK7vGNc7l2OhUlT9Eh6uYCt8dSOTx4Ri/gIheyB3afOEDKoyTkmc4/y
FwQWYHo8cN8xnJ7Qha1Ib6pggKID2qL8K6UCAwEAAaOCAdgwggHUMB0GA1UdDgQW
BBT/7PES0rqX3eNhLvlfPxoAfuLtRTAfBgNVHSMEGDAWgBQvwJkjsFp+jxrdmlmE
7cGTINuXSzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTMxL0w4Q1pJN0JhZm84YTNacFpoTzNCa3lEYmwwcy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0w4Q1pJN0JhZm84YTNacFpoTzNCa3lE
Ymwwcy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8xMzEvXy16eEV0SzZsOTNqWVM3NVh6OGFBSDdpN1VVLnJvYTAeBggr
BgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAD3WMA0GCSqGSIb3DQEBCwUAA4IBAQCI
jW70mD2xowYJrx8v1tpQqdxGsoJe1UaKoI6EM21a/6N45l3Xec9JOYPmrFuaPemn
kc8l9pNyg5ltzg8/c9KsOeIqlaXjl7AgX2taTE8NwbG6yNuiEiZGlsXTLjBBI386
+/6056goSIzUdYPLo2GpAlvRFQ+503AN9XB/BKc/k/Rwj3YEpcs/8vH6/wCyoYzO
hQOGsYfKsBmTZ4AtI40r1dgJmd94PCZwbHsMdW66/TC/N0UhTvKt1gTc8lNUpaJG
wqlZLZjNgJesZf/C/mpeAAMYSSWP2TJewBUafi0/Y/uaVHs6tmWC8XjLYUyaOEqP
PaY60o0Y6vEOwQguketY
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org