Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/pvgNMc9xWhyDT9H_RShZBhK8H48.roa
File:                     pvgNMc9xWhyDT9H_RShZBhK8H48.roa (raw, json)
Hash identifier:          yIdNyfQ7elOjbaxriSO8nIn8wtMVceUyQVR8SlngOQo=
Subject key identifier:   A6:F8:0D:31:CF:71:5A:1C:83:4F:D1:FF:45:28:59:06:12:BC:1F:8F
Certificate issuer:       /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Certificate serial:       8E
Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/pvgNMc9xWhyDT9H_RShZBhK8H48.roa
Signing time:             Thu 13 Apr 2023 09:53:27 +0000
ROA not before:           Thu 13 Apr 2023 09:53:27 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     18126
IP address blocks:        115.36.0.0/14 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142 (0x8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
        Validity
            Not Before: Apr 13 09:53:27 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=A6F80D31CF715A1C834FD1FF4528590612BC1F8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a9:aa:11:91:f3:7e:ac:68:ff:ea:8e:bb:ed:
                    f3:07:a6:c9:32:74:a3:17:d0:b3:a3:fb:2c:11:90:
                    b8:f3:9f:17:d9:cd:60:22:00:d8:65:9b:63:5d:e5:
                    8c:97:f2:03:94:07:08:6e:a5:bf:b1:98:aa:f3:35:
                    22:73:82:1c:72:2a:da:0d:a4:73:6f:eb:e4:8a:49:
                    d1:31:83:4b:3f:f5:90:5b:cc:74:b0:c5:ba:1a:67:
                    7b:4f:f1:0d:55:13:6a:94:e7:34:fa:20:ef:4c:a2:
                    c6:7e:b2:d2:24:29:34:64:94:d1:09:7b:71:d0:da:
                    bd:90:33:be:57:3d:2e:3d:e6:41:83:30:c4:59:84:
                    8f:bd:67:d6:f2:51:36:29:79:7f:98:43:80:ba:19:
                    6a:b2:92:1c:fb:70:6c:ec:82:6b:3c:6a:48:01:f1:
                    ea:5e:39:c2:aa:20:14:af:e5:9e:52:6c:bd:a2:a6:
                    ff:f2:c6:80:bf:4f:79:4f:8b:61:92:c9:ec:d6:bd:
                    0f:2d:c8:db:47:0f:33:fa:e9:82:bd:e9:5c:31:80:
                    57:0c:56:79:36:f7:7f:d8:6c:d6:35:eb:bf:10:da:
                    f3:a2:a9:fb:f8:82:a8:fd:95:6a:80:cb:8b:f1:98:
                    21:51:ad:95:6d:f1:03:af:45:66:dc:35:ca:e7:4f:
                    80:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:F8:0D:31:CF:71:5A:1C:83:4F:D1:FF:45:28:59:06:12:BC:1F:8F
            X509v3 Authority Key Identifier:
                keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/pvgNMc9xWhyDT9H_RShZBhK8H48.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.36.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         6b:db:f9:bd:d8:0f:82:cd:8e:a3:18:0d:22:f4:1b:17:ec:b6:
         a2:8a:d0:1d:0a:3e:26:8c:51:27:4f:16:98:0d:80:92:c0:7e:
         a9:86:e5:a3:59:b6:b6:e0:fc:8b:53:0e:ec:72:32:69:3f:90:
         b1:24:a8:0a:d7:f1:19:6c:aa:44:3c:dc:90:75:36:d1:f3:e7:
         be:f4:ef:04:69:6c:1d:65:5c:e0:7a:07:85:0e:a0:d8:f9:30:
         f8:64:d4:be:4b:a9:07:fc:07:9f:f5:14:eb:43:d2:e5:34:62:
         72:4a:b3:a5:6f:98:be:20:59:88:7d:8f:b9:15:f5:35:7a:c9:
         01:49:95:af:23:69:1c:ce:3c:47:a6:eb:0f:e5:1f:2b:47:09:
         58:d8:9e:3f:10:a7:fc:65:9f:3a:81:b5:28:a9:c1:d4:51:c5:
         a5:7a:03:ac:64:5f:a6:a3:45:d8:a6:d6:90:81:8d:16:59:c3:
         20:7d:a4:fa:c1:f0:89:20:dd:86:0c:3e:54:88:0f:7f:99:37:
         c4:b6:9f:47:7f:af:00:a4:89:bd:68:fe:65:9d:75:6e:81:a7:
         2a:33:d2:8b:ae:87:63:a2:8c:a1:0f:c5:7e:55:54:f7:3e:3e:
         66:04:73:ca:35:e3:cf:f8:c9:f3:6f:cc:96:af:6b:28:7f:82:
         08:99:1f:4b
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTAx
QTkwRTRFNzRDNDAzQUJFOEU1RTBBMUZFOEU0MTU3QUJEMkFFNzAeFw0yMzA0MTMw
OTUzMjdaFw0yNDAzMTQwMTMwMDJaMDMxMTAvBgNVBAMTKEE2RjgwRDMxQ0Y3MTVB
MUM4MzRGRDFGRjQ1Mjg1OTA2MTJCQzFGOEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/qaoRkfN+rGj/6o677fMHpskydKMX0LOj+ywRkLjznxfZzWAi
ANhlm2Nd5YyX8gOUBwhupb+xmKrzNSJzghxyKtoNpHNv6+SKSdExg0s/9ZBbzHSw
xboaZ3tP8Q1VE2qU5zT6IO9MosZ+stIkKTRklNEJe3HQ2r2QM75XPS495kGDMMRZ
hI+9Z9byUTYpeX+YQ4C6GWqykhz7cGzsgms8akgB8epeOcKqIBSv5Z5SbL2ipv/y
xoC/T3lPi2GSyezWvQ8tyNtHDzP66YK96VwxgFcMVnk293/YbNY1678Q2vOiqfv4
gqj9lWqAy4vxmCFRrZVt8QOvRWbcNcrnT4DZAgMBAAGjggInMIICIzAdBgNVHQ4E
FgQUpvgNMc9xWhyDT9H/RShZBhK8H48wHwYDVR0jBBgwFoAUEBqQ5OdMQDq+jl4K
H+jkFXq9KucwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwMTczL0VCcVE1T2RNUURxLWpsNEtILWprRlhxOUt1Yy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0VCcVE1T2RNUURxLWpsNEtILWpr
RlhxOUt1Yy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMDE3My9wdmdOTWM5eFdoeURUOUhfUlNoWkJoSzhINDgu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTAL
BAIAATAFAwMCcyQwDQYJKoZIhvcNAQELBQADggEBAGvb+b3YD4LNjqMYDSL0Gxfs
tqKK0B0KPiaMUSdPFpgNgJLAfqmG5aNZtrbg/ItTDuxyMmk/kLEkqArX8RlsqkQ8
3JB1NtHz57707wRpbB1lXOB6B4UOoNj5MPhk1L5LqQf8B5/1FOtD0uU0YnJKs6Vv
mL4gWYh9j7kV9TV6yQFJla8jaRzOPEem6w/lHytHCVjYnj8Qp/xlnzqBtSipwdRR
xaV6A6xkX6ajRdim1pCBjRZZwyB9pPrB8Ikg3YYMPlSID3+ZN8S2n0d/rwCkib1o
/mWddW6Bpyoz0ouuh2OijKEPxX5VVPc+PmYEc8o148/4yfNvzJavayh/ggiZH0s=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org