Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/Ar9TzssUgsE9cdDM1qZTqPt10p8.roa
File:                     Ar9TzssUgsE9cdDM1qZTqPt10p8.roa (raw, json)
Hash identifier:          dTxZh92F8kbxlQs2XQ0w7S+My4B8AOwnDoyhePlJ7Ew=
Subject key identifier:   02:BF:53:CE:CB:14:82:C1:3D:71:D0:CC:D6:A6:53:A8:FB:75:D2:9F
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0118
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/Ar9TzssUgsE9cdDM1qZTqPt10p8.roa
Signing time:             Fri 10 Jun 2022 03:44:34 +0000
ROA not before:           Fri 10 Jun 2022 03:44:34 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     4713
IP address blocks:        153.224.0.0/12 maxlen: 12

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 280 (0x118)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Jun 10 03:44:34 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=02BF53CECB1482C13D71D0CCD6A653A8FB75D29F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0e:10:be:8f:0d:fd:32:4d:cc:9d:68:2a:9d:
                    cc:fa:eb:1c:1c:2f:ce:d3:11:b4:c4:93:a2:8a:9a:
                    32:ef:c7:28:72:32:80:4d:eb:ad:89:f1:d6:ca:b7:
                    b6:f8:28:39:a6:51:de:64:fd:d1:9f:43:ab:06:c5:
                    6c:0a:0a:31:fa:4a:47:86:bf:f2:d9:63:ff:43:5e:
                    41:58:03:56:17:89:8b:10:f9:57:15:4b:4d:6a:8f:
                    43:48:42:a9:9e:8a:f9:1f:55:5b:70:ef:e8:e0:c5:
                    44:58:35:bb:ba:4e:6a:9f:54:81:5d:62:de:50:fc:
                    b8:c7:60:0b:b5:01:3c:17:5d:5b:0e:83:fa:d3:18:
                    6d:4f:ac:58:51:f1:ea:81:84:9e:d3:5e:d3:da:86:
                    78:2a:6f:39:da:05:fe:53:5b:0a:7e:37:1a:a5:aa:
                    67:74:1f:d8:3a:e6:f2:08:c6:c3:35:9b:d6:c9:a5:
                    37:1c:c0:b4:30:57:b3:43:8c:14:f6:7c:9e:12:a9:
                    ed:db:c4:0c:32:74:c0:c9:60:91:db:9c:0e:9e:b1:
                    6e:83:32:7d:7c:86:ca:be:9e:e2:4b:16:71:7b:d0:
                    5d:9b:56:8a:be:8f:ab:74:c5:10:d0:e3:d5:2a:12:
                    cd:10:75:7a:9b:35:bc:40:6f:c1:6d:86:76:52:f4:
                    f4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:BF:53:CE:CB:14:82:C1:3D:71:D0:CC:D6:A6:53:A8:FB:75:D2:9F
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/Ar9TzssUgsE9cdDM1qZTqPt10p8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.224.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         08:54:c3:4b:ac:56:89:a0:f4:30:0a:c8:df:49:48:bd:8b:af:
         b8:6f:72:a5:fd:c8:49:68:45:ce:f2:1e:2e:9a:de:3e:55:a4:
         14:0e:76:1f:4d:24:90:80:61:86:44:fc:cc:b6:6e:54:10:3c:
         55:4f:56:86:b0:ae:d1:f1:2b:e5:a9:60:fc:7e:66:27:ba:2d:
         43:6d:18:e6:c7:a6:fc:08:3b:60:b7:f8:95:4b:21:7e:ee:04:
         bf:18:34:aa:05:79:d6:f3:0c:9b:72:8c:5a:f6:8d:cd:cc:60:
         90:db:06:e3:db:42:14:da:bc:a2:95:af:f9:b7:30:04:81:fc:
         63:09:6a:f2:4e:ce:24:89:0a:f3:4e:d1:aa:1e:59:72:25:ae:
         ea:e7:25:18:d3:2c:ce:fa:77:3b:67:aa:4e:e2:a7:3f:d3:35:
         50:2c:cc:a4:3a:b2:94:d2:ca:1e:45:72:0e:d6:db:43:01:9d:
         1b:25:84:ff:1a:54:c2:18:56:9f:34:cf:02:df:5e:41:f6:b7:
         58:aa:9c:1e:71:53:f8:9d:87:ae:bf:06:ce:66:c0:3f:d2:87:
         cb:6f:d3:a9:f4:e5:46:23:cb:88:c6:19:e8:f4:91:1d:db:e0:
         a7:3d:8e:f3:87:9e:56:5c:8d:23:ba:75:c7:00:6c:77:e0:06:
         79:08:8a:28
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICARgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yMjA2MTAw
MzQ0MzRaFw0yMzA1MTUwMTMwMDRaMDMxMTAvBgNVBAMTKDAyQkY1M0NFQ0IxNDgy
QzEzRDcxRDBDQ0Q2QTY1M0E4RkI3NUQyOUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/DhC+jw39Mk3MnWgqncz66xwcL87TEbTEk6KKmjLvxyhyMoBN
662J8dbKt7b4KDmmUd5k/dGfQ6sGxWwKCjH6SkeGv/LZY/9DXkFYA1YXiYsQ+VcV
S01qj0NIQqmeivkfVVtw7+jgxURYNbu6TmqfVIFdYt5Q/LjHYAu1ATwXXVsOg/rT
GG1PrFhR8eqBhJ7TXtPahngqbznaBf5TWwp+Nxqlqmd0H9g65vIIxsM1m9bJpTcc
wLQwV7NDjBT2fJ4Sqe3bxAwydMDJYJHbnA6esW6DMn18hsq+nuJLFnF70F2bVoq+
j6t0xRDQ49UqEs0QdXqbNbxAb8FthnZS9PQ1AgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUAr9TzssUgsE9cdDM1qZTqPt10p8wHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTMxL0FyOVR6c3NVZ3NFOWNkRE0xcVpUcVB0MTBwOC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwSZ4DANBgkqhkiG9w0BAQsFAAOCAQEACFTDS6xWiaD0MArI30lIvYuvuG9y
pf3ISWhFzvIeLprePlWkFA52H00kkIBhhkT8zLZuVBA8VU9WhrCu0fEr5alg/H5m
J7otQ20Y5sem/Ag7YLf4lUshfu4Evxg0qgV51vMMm3KMWvaNzcxgkNsG49tCFNq8
opWv+bcwBIH8Ywlq8k7OJIkK807Rqh5ZciWu6uclGNMszvp3O2eqTuKnP9M1UCzM
pDqylNLKHkVyDtbbQwGdGyWE/xpUwhhWnzTPAt9eQfa3WKqcHnFT+J2Hrr8GzmbA
P9KHy2/TqfTlRiPLiMYZ6PSRHdvgpz2O84eeVlyNI7p1xwBsd+AGeQiKKA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org