Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/AF_2-YRIN-z8BRyH0VBvn6hSg0Y.roa
File:                     AF_2-YRIN-z8BRyH0VBvn6hSg0Y.roa (raw, json)
Hash identifier:          2m/o4GpPq8n1qOvbtFPP7XahVbBC6LuG89sK+GBBCCw=
Subject key identifier:   00:5F:F6:F9:84:48:37:EC:FC:05:1C:87:D1:50:6F:9F:A8:52:83:46
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       03CC
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AF_2-YRIN-z8BRyH0VBvn6hSg0Y.roa
Signing time:             Tue 06 Jun 2023 16:03:02 +0000
ROA not before:           Tue 06 Jun 2023 16:03:02 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.78.64.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 972 (0x3cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  6 16:03:02 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=005FF6F9844837ECFC051C87D1506F9FA8528346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cf:0c:3b:ad:c9:07:ab:86:b4:17:c5:a7:47:
                    48:8d:2d:0f:8c:e0:9e:20:f1:94:85:33:ae:71:56:
                    45:ec:ef:d8:b4:c7:db:1e:94:f5:94:25:9a:43:6b:
                    bd:11:13:98:e9:92:e7:75:78:20:bd:56:f1:9b:ac:
                    ef:df:7e:7a:ed:9e:86:17:8b:2e:bd:d3:56:3b:d9:
                    ab:49:0a:60:a0:4a:80:24:ce:73:c9:d9:b9:a0:df:
                    36:8e:df:8e:01:00:02:37:31:f2:2b:fc:df:eb:d6:
                    05:c0:a2:b2:ac:1c:d9:ab:8e:84:a2:4d:55:11:ae:
                    cd:82:f5:fd:43:65:c7:79:1e:12:95:9c:af:77:bb:
                    07:31:ac:d3:ea:16:6c:77:3b:f2:c7:87:bd:56:9a:
                    88:1e:e9:2b:6c:af:38:d5:f1:ce:a3:7a:05:4a:0a:
                    b3:8c:bf:6b:1a:4d:7b:c0:c4:f8:34:46:16:c9:6d:
                    00:7d:bc:cb:a2:0f:45:25:da:60:7b:83:9f:d4:8c:
                    42:51:12:f6:c7:ea:72:30:f5:cf:5d:d0:e9:73:01:
                    5c:81:36:88:41:c2:a4:ff:97:44:8a:a9:13:96:64:
                    59:a7:42:dc:aa:dd:e9:40:bb:32:20:af:b5:f3:c0:
                    e3:64:7f:af:19:06:56:bf:8a:87:00:45:f1:0e:4c:
                    41:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:5F:F6:F9:84:48:37:EC:FC:05:1C:87:D1:50:6F:9F:A8:52:83:46
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AF_2-YRIN-z8BRyH0VBvn6hSg0Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.78.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         36:85:3e:c4:c6:28:91:e0:9a:94:f8:d2:e8:8d:13:55:2c:cc:
         e5:e6:6f:74:72:f1:dc:d1:8c:f3:cd:f0:3a:25:c1:57:b4:a4:
         e8:7e:fd:55:5f:ec:b0:af:3b:80:0a:ec:3c:76:b7:9a:dd:f7:
         bd:49:d4:e0:4c:2e:bc:9f:57:0a:1a:0a:f6:c1:a0:03:f6:c3:
         7a:33:8f:68:28:e1:2c:1b:78:14:a9:ff:c4:4f:ff:87:13:51:
         9c:8e:b3:4b:c3:05:70:77:ef:78:9b:2f:4e:7f:bf:c3:b0:57:
         41:0e:23:0e:9e:6c:e9:f9:1f:09:cf:66:d1:13:48:68:43:44:
         06:5a:4b:9b:7a:3c:92:de:22:bd:7f:7d:bf:1d:7e:83:a6:22:
         a6:b1:5b:7a:6a:38:72:e4:ae:4c:bf:1b:56:08:79:e2:2d:21:
         84:63:1a:03:2d:c2:8d:dc:7a:99:c5:ef:b2:eb:22:a8:09:7f:
         c2:f5:0c:65:7b:ec:44:2b:53:40:bc:58:5f:b7:b5:19:de:7f:
         58:c9:4b:0f:5f:0f:6e:ab:65:b6:f6:7e:fa:e8:bd:db:82:f3:
         fc:e1:a4:50:d1:10:0f:27:1a:4c:ce:a5:77:10:72:f9:fc:59:
         ce:13:d9:b4:04:4e:d7:68:ad:d2:2c:69:0e:ea:43:07:81:cb:
         ab:46:cc:ee
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA8wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA2MDYx
NjAzMDJaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDAwNUZGNkY5ODQ0ODM3
RUNGQzA1MUM4N0QxNTA2RjlGQTg1MjgzNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVzww7rckHq4a0F8WnR0iNLQ+M4J4g8ZSFM65xVkXs79i0x9se
lPWUJZpDa70RE5jpkud1eCC9VvGbrO/ffnrtnoYXiy6901Y72atJCmCgSoAkznPJ
2bmg3zaO344BAAI3MfIr/N/r1gXAorKsHNmrjoSiTVURrs2C9f1DZcd5HhKVnK93
uwcxrNPqFmx3O/LHh71Wmoge6StsrzjV8c6jegVKCrOMv2saTXvAxPg0RhbJbQB9
vMuiD0Ul2mB7g5/UjEJREvbH6nIw9c9d0OlzAVyBNohBwqT/l0SKqROWZFmnQtyq
3elAuzIgr7XzwONkf68ZBla/iocARfEOTEFjAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUAF/2+YRIN+z8BRyH0VBvn6hSg0YwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0FGXzItWVJJTi16OEJSeUgwVkJ2bjZoU2cwWS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAUBTkAwDQYJKoZIhvcNAQELBQADggEBADaFPsTGKJHgmpT40uiNE1UszOXm
b3Ry8dzRjPPN8DolwVe0pOh+/VVf7LCvO4AK7Dx2t5rd971J1OBMLryfVwoaCvbB
oAP2w3ozj2go4SwbeBSp/8RP/4cTUZyOs0vDBXB373ibL05/v8OwV0EOIw6ebOn5
HwnPZtETSGhDRAZaS5t6PJLeIr1/fb8dfoOmIqaxW3pqOHLkrky/G1YIeeItIYRj
GgMtwo3cepnF77LrIqgJf8L1DGV77EQrU0C8WF+3tRnef1jJSw9fD26rZbb2fvro
vduC8/zhpFDREA8nGkzOpXcQcvn8Wc4T2bQETtdordIsaQ7qQweBy6tGzO4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:01 2024 by rpki-client on console-ams.rpki-client.org