Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/JvqNrBN_evz7AgTgYRq34cNlvX8.roa
File:                     JvqNrBN_evz7AgTgYRq34cNlvX8.roa (raw, json)
Hash identifier:          kjHrzAaivDI/Lix91u4QZIMEceBBaFFS1HG+xFcQcbg=
Subject key identifier:   26:FA:8D:AC:13:7F:7A:FC:FB:02:04:E0:61:1A:B7:E1:C3:65:BD:7F
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       24
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/JvqNrBN_evz7AgTgYRq34cNlvX8.roa
Signing time:             Wed 01 Mar 2023 23:28:32 +0000
ROA not before:           Wed 01 Mar 2023 23:28:32 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     4694
IP address blocks:        61.121.240.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar  1 23:28:32 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=26FA8DAC137F7AFCFB0204E0611AB7E1C365BD7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:20:2c:23:c7:6e:5b:36:d4:82:59:7e:08:69:
                    ab:b9:5d:b4:fe:12:58:6b:1a:a2:b2:bf:64:68:97:
                    b1:c1:0b:02:2b:b1:a7:25:ed:00:22:59:cd:4a:a0:
                    84:b1:64:f5:d1:00:18:70:ed:9f:a9:9f:ef:40:66:
                    a5:fb:3e:9b:ca:ce:c3:91:0a:f9:55:cc:4f:9d:cc:
                    07:8f:f3:65:8d:2a:32:58:07:a4:9c:45:66:4b:ed:
                    12:9f:27:05:93:d0:bd:44:da:e4:7d:d5:6c:a2:dd:
                    78:8a:6e:df:60:9d:9b:eb:ca:37:8d:6d:9d:e3:5b:
                    e7:27:32:8d:b7:de:98:3e:57:f8:9c:d7:a6:e1:11:
                    d4:94:36:bf:12:ba:98:12:5a:27:44:41:e7:cf:da:
                    cb:bf:94:4e:67:d1:3f:9e:46:e6:d1:b6:79:dc:11:
                    fb:38:66:3c:88:51:f3:16:97:7d:8f:e7:e3:10:00:
                    ff:2c:e4:b8:2d:76:16:8b:8c:02:c1:1f:6b:da:ff:
                    1e:57:7d:58:c4:8c:60:39:c4:94:1d:43:e3:3f:bc:
                    e8:0f:f5:0d:82:23:66:1c:ec:a5:b7:fe:5c:82:e8:
                    1f:fb:4d:02:6d:c7:c1:eb:ef:9b:50:18:9c:3b:cc:
                    36:45:d8:24:1c:43:23:41:0f:fa:09:d0:15:d9:1c:
                    c3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:FA:8D:AC:13:7F:7A:FC:FB:02:04:E0:61:1A:B7:E1:C3:65:BD:7F
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/JvqNrBN_evz7AgTgYRq34cNlvX8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.121.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:7f:3c:a7:7d:6c:d2:35:68:c5:c7:a0:08:5a:ad:e1:90:e0:
         9d:60:c4:9d:8c:00:19:c2:ca:4f:f7:b7:7a:56:84:61:5b:9a:
         55:47:96:a2:82:7a:53:23:68:85:20:5d:6c:cd:cf:1b:14:22:
         0e:75:f4:13:13:73:91:8c:ce:ec:5c:3d:63:51:34:6c:bc:fb:
         f5:5b:85:79:71:cc:26:cf:e6:4d:52:e4:fb:ac:a5:13:a6:6b:
         12:d5:c4:dc:fe:eb:87:56:cb:c4:e5:d4:96:30:47:a8:50:0a:
         8f:50:02:04:bc:6e:1b:dc:5f:b4:f2:06:8d:c1:bd:bd:1e:48:
         3a:af:44:98:24:2e:29:a6:50:0c:32:a4:c4:09:67:06:ca:c2:
         32:1a:62:3e:8a:77:ab:49:07:c6:c8:b3:71:b0:f8:1c:57:46:
         11:13:44:16:d3:38:f8:cc:47:78:04:6b:8e:a8:27:7f:63:2e:
         fe:65:ee:e0:26:b8:b8:46:49:94:3d:ec:31:ed:55:86:00:1a:
         3f:ff:83:fb:98:64:45:a3:39:cb:85:1f:e2:85:da:36:d9:f0:
         d2:0a:db:b2:64:22:54:b6:02:81:b2:c9:ee:6d:c2:5a:26:aa:
         a5:59:c4:f7:a0:72:db:8c:79:20:56:c5:fa:1f:b2:49:5a:97:
         97:2f:b6:5d
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBJDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1OTBB
ODIyODhEMkUyM0RCRkE4NzYzOEYzRUI4Qjk5NUUxODk3RTk1MB4XDTIzMDMwMTIz
MjgzMloXDTI0MDIxNTAxMzAwM1owMzExMC8GA1UEAxMoMjZGQThEQUMxMzdGN0FG
Q0ZCMDIwNEUwNjExQUI3RTFDMzY1QkQ3RjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALUgLCPHbls21IJZfghpq7ldtP4SWGsaorK/ZGiXscELAiuxpyXt
ACJZzUqghLFk9dEAGHDtn6mf70Bmpfs+m8rOw5EK+VXMT53MB4/zZY0qMlgHpJxF
ZkvtEp8nBZPQvUTa5H3VbKLdeIpu32Cdm+vKN41tneNb5ycyjbfemD5X+JzXpuER
1JQ2vxK6mBJaJ0RB58/ay7+UTmfRP55G5tG2edwR+zhmPIhR8xaXfY/n4xAA/yzk
uC12FouMAsEfa9r/Hld9WMSMYDnElB1D4z+86A/1DYIjZhzspbf+XILoH/tNAm3H
wevvm1AYnDvMNkXYJBxDI0EP+gnQFdkcwzMCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBQm+o2sE396/PsCBOBhGrfhw2W9fzAfBgNVHSMEGDAWgBRZCoIojS4j2/qHY48+
uLmV4Yl+lTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwODMvV1FxQ0tJMHVJOXY2aDJPUFByaTVsZUdKZnBVLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvV1FxQ0tJMHVJOXY2aDJPUFByaTVs
ZUdKZnBVLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDgzL0p2cU5yQk5fZXZ6N0FnVGdZUnEzNGNObHZYOC5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAA9efAwDQYJKoZIhvcNAQELBQADggEBAKt/PKd9bNI1aMXHoAhareGQ
4J1gxJ2MABnCyk/3t3pWhGFbmlVHlqKCelMjaIUgXWzNzxsUIg519BMTc5GMzuxc
PWNRNGy8+/VbhXlxzCbP5k1S5PuspROmaxLVxNz+64dWy8Tl1JYwR6hQCo9QAgS8
bhvcX7TyBo3Bvb0eSDqvRJgkLimmUAwypMQJZwbKwjIaYj6Kd6tJB8bIs3Gw+BxX
RhETRBbTOPjMR3gEa46oJ39jLv5l7uAmuLhGSZQ97DHtVYYAGj//g/uYZEWjOcuF
H+KF2jbZ8NIK27JkIlS2AoGyye5twlomqqVZxPegctuMeSBWxfofsklal5cvtl0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org