Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/vGnBuGfkORQK_4ifppS4gnwLjmM.roa
File:                     vGnBuGfkORQK_4ifppS4gnwLjmM.roa (raw, json)
Hash identifier:          40FufIMcQU0Ms3cY4PFeVhWWNujNFoRb4h/hDMiasZk=
Subject key identifier:   BC:69:C1:B8:67:E4:39:14:0A:FF:88:9F:A6:94:B8:82:7C:0B:8E:63
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0103
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/vGnBuGfkORQK_4ifppS4gnwLjmM.roa
Signing time:             Fri 10 Jun 2022 03:04:18 +0000
ROA not before:           Fri 10 Jun 2022 03:04:18 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     4713
IP address blocks:        61.126.0.0/15 maxlen: 15

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 259 (0x103)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Jun 10 03:04:18 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=BC69C1B867E439140AFF889FA694B8827C0B8E63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:92:c8:cb:db:98:ec:62:6c:ea:1e:f0:89:e6:
                    f7:be:6d:91:1e:77:5c:a7:ce:8c:a0:89:56:c5:b6:
                    a8:7b:ed:d8:32:de:c9:79:1f:60:48:62:26:c7:62:
                    a3:84:a1:eb:2a:4a:bd:17:1e:29:09:7d:74:a0:19:
                    ca:40:a9:7c:14:ed:80:c8:cb:e9:55:bc:ed:94:2f:
                    2a:87:89:de:a4:bf:eb:0f:ef:66:74:04:f0:d2:77:
                    00:47:8d:08:94:69:ff:b0:5b:70:18:70:18:58:73:
                    64:0a:bb:15:27:0d:32:f7:02:90:7a:00:96:a0:60:
                    a0:f7:a1:22:7e:17:b7:c9:da:ab:64:bd:59:2b:20:
                    62:9a:61:91:2d:90:4b:02:36:1d:59:2d:60:2a:af:
                    83:35:cc:f9:f3:f8:26:35:33:11:52:af:05:7c:70:
                    2c:2f:2f:0b:25:71:9a:08:6b:4b:43:46:23:e4:fd:
                    87:af:8f:50:aa:16:36:a8:40:04:73:79:ae:fc:78:
                    40:bd:42:a6:a6:14:d9:11:cf:00:aa:c9:77:9d:01:
                    ab:bc:b5:80:8e:f5:ca:0b:9d:8b:ad:9f:85:7b:91:
                    95:94:1c:5b:33:34:b0:a4:72:00:84:3e:a9:b5:c3:
                    cb:6c:4f:77:ca:2c:61:d3:49:ec:83:45:09:51:50:
                    c6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:69:C1:B8:67:E4:39:14:0A:FF:88:9F:A6:94:B8:82:7C:0B:8E:63
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/vGnBuGfkORQK_4ifppS4gnwLjmM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.126.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         4e:3e:ba:b5:e6:69:32:77:4d:34:34:d7:3b:32:b8:1f:53:08:
         21:43:44:cf:91:b7:0f:46:48:3f:89:33:7b:23:1e:5b:d7:f7:
         ee:c0:70:ab:da:9b:fe:06:ab:44:17:f1:f4:e0:88:89:14:54:
         f5:36:27:37:f0:dd:e9:0e:75:ca:68:1f:05:55:ee:00:cb:49:
         c4:d8:2e:ef:cb:ff:4b:c1:b4:44:64:f8:cd:b2:39:c8:5f:3e:
         7b:77:c7:be:b9:a4:29:25:1f:4e:12:86:21:0f:67:ce:17:96:
         74:16:be:2b:79:a1:de:66:0d:68:f1:17:5c:b3:2d:47:51:f2:
         98:a4:a8:97:56:8e:42:79:db:ba:6f:2e:de:45:af:32:44:5d:
         b2:07:80:25:15:6a:ea:b5:86:69:5e:05:95:d1:a0:b4:36:80:
         fe:c6:f1:a5:b5:9d:8f:ad:ad:ef:09:6e:d6:a2:b3:0e:9a:1f:
         41:79:77:ae:90:ad:7c:3c:d2:00:c6:d2:ba:72:21:1e:f7:63:
         b7:95:47:d5:79:c7:5c:f5:cd:3c:7c:28:5c:40:34:0e:ef:12:
         52:4f:56:db:33:41:5a:48:f1:59:16:3f:b5:94:1b:34:51:2f:
         f6:99:44:0b:46:87:ee:77:62:c3:ac:94:75:5d:83:b0:1b:ef:
         b9:71:eb:3b
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yMjA2MTAw
MzA0MThaFw0yMzA1MTUwMTMwMDRaMDMxMTAvBgNVBAMTKEJDNjlDMUI4NjdFNDM5
MTQwQUZGODg5RkE2OTRCODgyN0MwQjhFNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBksjL25jsYmzqHvCJ5ve+bZEed1ynzoygiVbFtqh77dgy3sl5
H2BIYibHYqOEoesqSr0XHikJfXSgGcpAqXwU7YDIy+lVvO2ULyqHid6kv+sP72Z0
BPDSdwBHjQiUaf+wW3AYcBhYc2QKuxUnDTL3ApB6AJagYKD3oSJ+F7fJ2qtkvVkr
IGKaYZEtkEsCNh1ZLWAqr4M1zPnz+CY1MxFSrwV8cCwvLwslcZoIa0tDRiPk/Yev
j1CqFjaoQARzea78eEC9QqamFNkRzwCqyXedAau8tYCO9coLnYutn4V7kZWUHFsz
NLCkcgCEPqm1w8tsT3fKLGHTSeyDRQlRUMYbAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUvGnBuGfkORQK/4ifppS4gnwLjmMwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTMxL3ZHbkJ1R2ZrT1JRS180aWZwcFM0Z253TGptTS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwE9fjANBgkqhkiG9w0BAQsFAAOCAQEATj66teZpMndNNDTXOzK4H1MIIUNE
z5G3D0ZIP4kzeyMeW9f37sBwq9qb/garRBfx9OCIiRRU9TYnN/Dd6Q51ymgfBVXu
AMtJxNgu78v/S8G0RGT4zbI5yF8+e3fHvrmkKSUfThKGIQ9nzheWdBa+K3mh3mYN
aPEXXLMtR1HymKSol1aOQnnbum8u3kWvMkRdsgeAJRVq6rWGaV4FldGgtDaA/sbx
pbWdj62t7wlu1qKzDpofQXl3rpCtfDzSAMbSunIhHvdjt5VH1XnHXPXNPHwoXEA0
Du8SUk9W2zNBWkjxWRY/tZQbNFEv9plEC0aH7ndiw6yUdV2DsBvvuXHrOw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:08 2023 by rpki-client on console-ams.rpki-client.org