Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30191/fJpIznSKznEeBZyEl-ueOjKQiCs.roa
File:                     fJpIznSKznEeBZyEl-ueOjKQiCs.roa (raw, json)
Hash identifier:          GWS6sLylT8MT68sHhnM7ZN71ayote9n5hVTgxhBkyAg=
Subject key identifier:   7C:9A:48:CE:74:8A:CE:71:1E:05:9C:84:97:EB:9E:3A:32:90:88:2B
Certificate issuer:       /CN=4F28372369E482E49424ED39E244330E34EB40B0
Certificate serial:       23
Authority key identifier: 4F:28:37:23:69:E4:82:E4:94:24:ED:39:E2:44:33:0E:34:EB:40:B0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tyg3I2nkguSUJO054kQzDjTrQLA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30191/fJpIznSKznEeBZyEl-ueOjKQiCs.roa
Signing time:             Sun 01 May 2022 01:31:11 +0000
ROA not before:           Sun 01 May 2022 01:31:11 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     7684
IP address blocks:        2401:2500::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F28372369E482E49424ED39E244330E34EB40B0
        Validity
            Not Before: May  1 01:31:11 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=7C9A48CE748ACE711E059C8497EB9E3A3290882B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3c:1e:82:92:7e:3a:33:0a:1d:57:02:33:21:
                    35:0a:83:39:42:d2:d6:10:05:7d:20:45:a0:ea:5e:
                    1c:7e:6c:dc:3f:5b:dd:cb:47:ac:ea:e7:dd:d4:bd:
                    72:11:c9:da:e9:10:04:9e:c3:30:63:2c:04:39:25:
                    d5:36:bf:a1:f9:ef:9d:d0:d8:99:1e:6a:fe:7d:a7:
                    44:22:5b:5a:61:25:b2:13:8b:79:5c:a6:cd:23:53:
                    c3:1b:1b:48:94:53:56:78:7f:c6:8e:73:a4:65:b4:
                    25:c6:ab:c0:d4:cb:05:6f:c7:78:8c:b9:c3:cc:20:
                    bf:a0:31:d5:2b:fc:b7:8d:08:43:22:66:8f:bd:14:
                    3c:53:08:e0:b9:52:84:5a:f2:83:86:6e:9d:69:03:
                    53:7c:3a:79:01:54:65:10:1f:86:26:66:3f:c3:ff:
                    60:cd:e5:75:11:f0:54:ce:99:41:83:d3:0e:df:d7:
                    b0:7e:f9:66:7f:88:6d:90:44:bb:1b:51:76:c1:90:
                    14:45:2b:c7:2e:bd:93:da:6b:c7:49:67:d5:4c:66:
                    38:1f:fe:6b:dd:27:10:8f:af:34:65:d9:aa:5b:6a:
                    1c:ec:e3:5c:1c:bd:77:1c:7d:33:77:b2:5f:1e:76:
                    fe:19:aa:9a:c3:73:4a:ac:93:da:29:8d:e8:21:a1:
                    64:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:9A:48:CE:74:8A:CE:71:1E:05:9C:84:97:EB:9E:3A:32:90:88:2B
            X509v3 Authority Key Identifier:
                keyid:4F:28:37:23:69:E4:82:E4:94:24:ED:39:E2:44:33:0E:34:EB:40:B0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30191/Tyg3I2nkguSUJO054kQzDjTrQLA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tyg3I2nkguSUJO054kQzDjTrQLA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30191/fJpIznSKznEeBZyEl-ueOjKQiCs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:2500::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:d8:11:f5:3f:31:6d:cc:8f:3f:83:42:ff:54:16:b1:ee:be:
         a2:ca:0a:15:a0:85:db:93:81:bc:f4:d0:36:65:22:1e:e2:9a:
         34:e1:5f:66:09:55:54:e8:aa:b5:84:a8:93:d6:ae:ac:ba:10:
         1c:ed:13:a5:17:fa:b8:26:92:d0:4e:0e:bf:c9:eb:e1:3d:ef:
         f5:cf:08:51:7f:00:f7:71:55:16:40:bc:2e:34:c9:00:40:5c:
         20:16:ec:af:74:a4:2b:40:d8:e9:6f:02:d4:a9:d4:05:9b:d2:
         ff:fd:a8:54:8e:e2:2f:5a:14:e3:f7:c1:83:bc:67:08:78:b8:
         0f:5c:c2:e9:64:a4:eb:78:b1:3a:5d:6f:40:d6:8c:05:89:ba:
         91:26:1c:90:ed:99:00:7c:26:03:26:11:4a:66:88:ee:8d:e1:
         b4:97:31:89:17:bc:ae:35:9d:f8:d9:3f:c3:60:b9:55:4e:a5:
         47:ed:79:2e:1f:76:5a:9d:9b:3b:31:2a:99:5c:f5:22:4b:ea:
         cb:c5:6e:58:e9:bd:0b:9d:14:87:8d:5e:e2:fb:35:26:65:ba:
         35:5b:82:92:c8:54:25:51:37:27:57:d7:b9:3d:4e:90:c5:c3:
         43:38:60:f9:45:4d:a6:d8:69:c9:04:41:af:3d:8b:00:f8:25:
         03:5f:14:21
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBIzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0RjI4
MzcyMzY5RTQ4MkU0OTQyNEVEMzlFMjQ0MzMwRTM0RUI0MEIwMB4XDTIyMDUwMTAx
MzExMVoXDTIzMDQyNzA5NTIzNFowMzExMC8GA1UEAxMoN0M5QTQ4Q0U3NDhBQ0U3
MTFFMDU5Qzg0OTdFQjlFM0EzMjkwODgyQjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAN88HoKSfjozCh1XAjMhNQqDOULS1hAFfSBFoOpeHH5s3D9b3ctH
rOrn3dS9chHJ2ukQBJ7DMGMsBDkl1Ta/ofnvndDYmR5q/n2nRCJbWmElshOLeVym
zSNTwxsbSJRTVnh/xo5zpGW0JcarwNTLBW/HeIy5w8wgv6Ax1Sv8t40IQyJmj70U
PFMI4LlShFryg4ZunWkDU3w6eQFUZRAfhiZmP8P/YM3ldRHwVM6ZQYPTDt/XsH75
Zn+IbZBEuxtRdsGQFEUrxy69k9prx0ln1UxmOB/+a90nEI+vNGXZqltqHOzjXBy9
dxx9M3eyXx52/hmqmsNzSqyT2imN6CGhZPsCAwEAAaOCAikwggIlMB0GA1UdDgQW
BBR8mkjOdIrOcR4FnISX6546MpCIKzAfBgNVHSMEGDAWgBRPKDcjaeSC5JQk7Tni
RDMONOtAsDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAxOTEvVHlnM0kybmtndVNVSk8wNTRrUXpEalRyUUxBLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvVHlnM0kybmtndVNVSk8wNTRrUXpE
alRyUUxBLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMTkxL2ZKcEl6blNLem5FZUJaeUVsLXVlT2pLUWlDcy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAkASUAMA0GCSqGSIb3DQEBCwUAA4IBAQAZ2BH1PzFtzI8/g0L/VBax
7r6iygoVoIXbk4G89NA2ZSIe4po04V9mCVVU6Kq1hKiT1q6suhAc7ROlF/q4JpLQ
Tg6/yevhPe/1zwhRfwD3cVUWQLwuNMkAQFwgFuyvdKQrQNjpbwLUqdQFm9L//ahU
juIvWhTj98GDvGcIeLgPXMLpZKTreLE6XW9A1owFibqRJhyQ7ZkAfCYDJhFKZoju
jeG0lzGJF7yuNZ342T/DYLlVTqVH7XkuH3ZanZs7MSqZXPUiS+rLxW5Y6b0LnRSH
jV7i+zUmZbo1W4KSyFQlUTcnV9e5PU6QxcNDOGD5RU2m2GnJBEGvPYsA+CUDXxQh
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org