Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12/E8BB3HwJHqFyymMG8opoYPw-3FQ.roa
File:                     E8BB3HwJHqFyymMG8opoYPw-3FQ.roa (raw, json)
Hash identifier:          O3fvYa92PpLje+u29pUQ385fBG4ylXhgp83k5Q1KAwk=
Subject key identifier:   13:C0:41:DC:7C:09:1E:A1:72:CA:63:06:F2:8A:68:60:FC:3E:DC:54
Certificate issuer:       /CN=1589EECCC6718C652638CF4E92C60003C56FB697
Certificate serial:       31
Authority key identifier: 15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/E8BB3HwJHqFyymMG8opoYPw-3FQ.roa
Signing time:             Thu 01 Jun 2023 01:29:20 +0000
ROA not before:           Thu 01 Jun 2023 01:29:20 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     7660
IP address blocks:        203.181.248.0/23 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1589EECCC6718C652638CF4E92C60003C56FB697
        Validity
            Not Before: Jun  1 01:29:20 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=13C041DC7C091EA172CA6306F28A6860FC3EDC54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9c:05:4e:83:29:cb:e3:33:76:79:d2:ee:bc:
                    74:a4:c0:24:80:b4:5b:00:05:16:aa:0e:40:93:ab:
                    4e:f6:ed:0e:af:06:d8:08:03:64:64:56:a9:3c:89:
                    09:27:d4:ad:98:41:8f:fc:42:9f:84:a9:f3:30:64:
                    e9:02:ea:3b:5e:a4:55:60:d6:52:d2:5a:48:ed:3c:
                    77:4a:e8:cb:1a:07:22:dc:03:8d:14:82:a1:59:33:
                    ce:24:52:f9:8e:d1:20:81:83:03:4e:82:ee:86:cf:
                    33:8e:db:fc:fd:cf:0c:35:e0:6e:00:e3:c6:ae:6b:
                    fc:36:18:7f:2a:01:28:9f:56:67:68:e3:70:6f:a2:
                    8a:b2:e6:4f:b4:c1:78:75:22:4e:dc:79:0b:20:0d:
                    34:ff:3b:d7:86:d3:55:b2:68:1d:bb:07:55:39:70:
                    8c:26:96:fc:7e:0e:1d:55:4c:49:58:18:d7:01:27:
                    61:81:ab:07:ae:c6:92:a7:6f:c5:65:3c:f6:7e:3a:
                    30:9e:c1:0c:18:6d:82:07:2a:95:ea:16:b3:cd:3e:
                    32:a8:0e:11:f9:f7:57:b5:2c:64:1c:b4:73:ef:b3:
                    a5:cc:c0:8b:ec:10:bf:a6:47:16:91:1a:87:93:c6:
                    7e:48:5a:ce:c5:bc:29:5e:4d:10:d4:94:1a:bd:42:
                    f6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C0:41:DC:7C:09:1E:A1:72:CA:63:06:F2:8A:68:60:FC:3E:DC:54
            X509v3 Authority Key Identifier:
                keyid:15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/E8BB3HwJHqFyymMG8opoYPw-3FQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.181.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:1c:c3:aa:67:b5:9f:19:a6:43:a6:7c:31:82:c1:b3:10:2b:
         58:e6:b9:9b:26:b1:24:d8:b9:ef:78:c3:f2:bc:64:91:d7:90:
         3a:50:12:96:9b:7a:da:aa:83:ca:c8:7f:5a:c8:a4:43:8d:4b:
         ea:5c:91:18:af:19:83:b7:57:f2:09:f7:ed:ab:93:9c:46:d4:
         2d:f2:f6:2e:49:14:1b:e2:7a:8b:56:37:cf:0e:ef:41:fe:d8:
         8b:bd:26:52:13:70:26:50:a8:99:ff:12:54:e9:d3:d3:84:e2:
         b8:fa:d5:e0:88:b4:26:55:ac:b2:99:6a:2b:c9:b6:e0:8e:80:
         13:f4:94:1a:33:a5:ed:81:a9:19:b9:c8:52:fd:9d:72:6c:4b:
         4a:e1:42:58:3e:f0:49:46:c9:9f:96:0c:de:ba:10:fd:03:53:
         d3:f0:f6:7d:3b:65:93:ac:50:97:f9:06:b1:98:37:fa:a1:aa:
         78:2d:f2:e2:53:e9:26:50:8b:7a:1b:af:43:c8:a8:cc:21:db:
         71:92:a7:08:d2:99:95:b3:e3:a1:91:49:00:e7:65:c9:1f:a9:
         3a:dd:36:8d:5e:22:29:d0:8a:02:dd:8e:19:fb:83:bf:e9:2a:
         0e:32:09:c1:56:62:cc:de:59:cb:23:99:a9:bc:c6:14:bb:18:
         da:58:5a:4a
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIBMTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNTg5
RUVDQ0M2NzE4QzY1MjYzOENGNEU5MkM2MDAwM0M1NkZCNjk3MB4XDTIzMDYwMTAx
MjkyMFoXDTI0MDUxNDAxMzAwMlowMzExMC8GA1UEAxMoMTNDMDQxREM3QzA5MUVB
MTcyQ0E2MzA2RjI4QTY4NjBGQzNFREM1NDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALCcBU6DKcvjM3Z50u68dKTAJIC0WwAFFqoOQJOrTvbtDq8G2AgD
ZGRWqTyJCSfUrZhBj/xCn4Sp8zBk6QLqO16kVWDWUtJaSO08d0royxoHItwDjRSC
oVkzziRS+Y7RIIGDA06C7obPM47b/P3PDDXgbgDjxq5r/DYYfyoBKJ9WZ2jjcG+i
irLmT7TBeHUiTtx5CyANNP8714bTVbJoHbsHVTlwjCaW/H4OHVVMSVgY1wEnYYGr
B67GkqdvxWU89n46MJ7BDBhtggcqleoWs80+MqgOEfn3V7UsZBy0c++zpczAi+wQ
v6ZHFpEah5PGfkhazsW8KV5NENSUGr1C9tECAwEAAaOCAiIwggIeMB0GA1UdDgQW
BBQTwEHcfAkeoXLKYwbyimhg/D7cVDAfBgNVHSMEGDAWgBQVie7MxnGMZSY4z06S
xgADxW+2lzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTIvRlludXpNWnhqR1VtT005T2tzWUFBOFZ2dHBjLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRlludXpNWnhqR1VtT005T2tzWUFBOFZ2
dHBjLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzEyL0U4QkIzSHdKSHFGeXltTUc4b3BvWVB3LTNGUS5yb2EwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAHLtfgwDQYJKoZIhvcNAQELBQADggEBACEcw6pntZ8ZpkOmfDGCwbMQK1jmuZsm
sSTYue94w/K8ZJHXkDpQEpabetqqg8rIf1rIpEONS+pckRivGYO3V/IJ9+2rk5xG
1C3y9i5JFBvieotWN88O70H+2Iu9JlITcCZQqJn/ElTp09OE4rj61eCItCZVrLKZ
aivJtuCOgBP0lBozpe2BqRm5yFL9nXJsS0rhQlg+8ElGyZ+WDN66EP0DU9Pw9n07
ZZOsUJf5BrGYN/qhqngt8uJT6SZQi3obr0PIqMwh23GSpwjSmZWz46GRSQDnZckf
qTrdNo1eIinQigLdjhn7g7/pKg4yCcFWYszeWcsjmam8xhS7GNpYWko=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org