Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/iN5K_OEzkvLqpSz3CIpZsMD1jFQ.roa
File:                     iN5K_OEzkvLqpSz3CIpZsMD1jFQ.roa (raw, json)
Hash identifier:          y6mCysPinrGJtx7HKPQJgbHI53+usKFqWeg9BLssvg0=
Subject key identifier:   88:DE:4A:FC:E1:33:92:F2:EA:A5:2C:F7:08:8A:59:B0:C0:F5:8C:54
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       FF
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/iN5K_OEzkvLqpSz3CIpZsMD1jFQ.roa
Signing time:             Fri 10 Jun 2022 02:58:17 +0000
ROA not before:           Fri 10 Jun 2022 02:58:17 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     4713
IP address blocks:        58.88.0.0/13 maxlen: 13

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 255 (0xff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Jun 10 02:58:17 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=88DE4AFCE13392F2EAA52CF7088A59B0C0F58C54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ac:f1:1f:09:2d:41:94:0c:c4:f8:a8:4b:3f:
                    2c:80:a2:4b:a1:a4:f4:99:1f:e3:1f:29:86:87:41:
                    0a:ba:cf:b8:ba:c2:ed:7d:42:d8:32:90:fa:b4:ff:
                    40:3c:3a:49:25:65:3a:46:a8:a3:f0:cf:59:7b:57:
                    e5:08:80:d9:fd:37:79:d7:9c:9d:dd:6e:f2:cd:03:
                    ac:28:e7:9a:97:8c:21:42:99:cb:89:38:00:17:77:
                    29:e1:2f:d4:fe:11:fd:3c:ab:bc:86:37:12:42:26:
                    39:cd:d7:36:36:40:ea:31:cf:ae:6d:54:05:f2:23:
                    7e:c7:85:e5:6e:81:fc:75:17:ef:13:bb:d9:9a:c3:
                    13:8f:a8:88:14:00:c0:0d:5e:1a:09:0d:ef:f7:6e:
                    bd:38:df:81:8e:1b:d4:e6:63:61:ed:4b:1a:6b:0e:
                    da:83:16:7d:1a:e8:81:c6:30:d9:ec:1b:ad:06:f9:
                    5c:d7:07:60:f2:77:15:a4:87:40:9e:93:02:95:a6:
                    37:1d:e3:b3:fb:f7:3d:da:30:8d:89:6f:c7:0f:a8:
                    82:47:05:93:51:27:3a:c2:1f:34:a3:e1:88:03:e8:
                    7d:32:00:64:d4:6a:47:fc:d8:1a:0e:44:a1:c3:35:
                    17:73:f5:9d:c4:f6:ff:3e:b9:14:12:03:e8:f4:87:
                    1e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:DE:4A:FC:E1:33:92:F2:EA:A5:2C:F7:08:8A:59:B0:C0:F5:8C:54
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/iN5K_OEzkvLqpSz3CIpZsMD1jFQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.88.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         b7:32:eb:79:ec:e6:b3:9b:30:91:08:fa:11:70:76:be:9f:0e:
         44:41:53:93:05:00:fc:7b:e9:4e:4c:4b:24:3f:ef:9e:0b:c8:
         bc:52:df:0d:8d:94:10:6a:19:7b:62:2a:ba:44:39:38:82:c6:
         00:38:75:a7:77:38:f0:3e:8e:d3:73:15:8c:81:7c:01:de:be:
         81:cf:a2:a5:6d:99:f9:c0:55:3e:e1:a7:61:56:75:e9:ed:ff:
         20:ee:2e:49:cb:d5:4c:7d:0a:a0:c8:77:40:20:30:a2:64:33:
         2f:4f:12:c9:d8:bb:25:88:1d:0b:95:30:47:65:d3:59:3e:07:
         84:ce:c0:ea:6b:a3:7e:78:8a:2c:4c:8c:72:38:d8:e0:ce:11:
         ca:20:44:ab:c2:e3:e2:f0:ed:f5:84:04:ba:b6:1b:a6:60:d1:
         5c:fc:7e:ec:9b:7d:cf:c5:71:6a:df:5e:dd:f9:0a:1c:ab:45:
         8b:c4:07:3f:71:a7:8e:82:bc:4a:77:59:9f:4f:16:51:84:3e:
         f2:e8:b7:44:68:c0:dd:cb:51:be:ee:41:42:74:74:f6:ef:db:
         ae:f6:66:57:d6:b8:f2:bc:d6:3c:f3:e7:bb:d8:d6:c2:8a:d3:
         2f:43:60:e6:45:df:62:e4:75:b0:b9:66:16:1b:2d:70:2b:2a:
         2c:4f:04:fd
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yMjA2MTAw
MjU4MTdaFw0yMzA1MTUwMTMwMDRaMDMxMTAvBgNVBAMTKDg4REU0QUZDRTEzMzky
RjJFQUE1MkNGNzA4OEE1OUIwQzBGNThDNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCtrPEfCS1BlAzE+KhLPyyAokuhpPSZH+MfKYaHQQq6z7i6wu19
QtgykPq0/0A8OkklZTpGqKPwz1l7V+UIgNn9N3nXnJ3dbvLNA6wo55qXjCFCmcuJ
OAAXdynhL9T+Ef08q7yGNxJCJjnN1zY2QOoxz65tVAXyI37HheVugfx1F+8Tu9ma
wxOPqIgUAMANXhoJDe/3br0434GOG9TmY2HtSxprDtqDFn0a6IHGMNnsG60G+VzX
B2DydxWkh0CekwKVpjcd47P79z3aMI2Jb8cPqIJHBZNRJzrCHzSj4YgD6H0yAGTU
akf82BoORKHDNRdz9Z3E9v8+uRQSA+j0hx6VAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUiN5K/OEzkvLqpSz3CIpZsMD1jFQwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTMxL2lONUtfT0V6a3ZMcXBTejNDSXBac01EMWpGUS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwM6WDANBgkqhkiG9w0BAQsFAAOCAQEAtzLreezms5swkQj6EXB2vp8OREFT
kwUA/HvpTkxLJD/vngvIvFLfDY2UEGoZe2IqukQ5OILGADh1p3c48D6O03MVjIF8
Ad6+gc+ipW2Z+cBVPuGnYVZ16e3/IO4uScvVTH0KoMh3QCAwomQzL08Sydi7JYgd
C5UwR2XTWT4HhM7A6mujfniKLEyMcjjY4M4RyiBEq8Lj4vDt9YQEurYbpmDRXPx+
7Jt9z8Vxat9e3fkKHKtFi8QHP3GnjoK8SndZn08WUYQ+8ui3RGjA3ctRvu5BQnR0
9u/brvZmV9a48rzWPPPnu9jWworTL0Ng5kXfYuR1sLlmFhstcCsqLE8E/Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org