Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/JHXCaEq8Pc9NnhLVvzOzkCuAz7o.roa
File:                     JHXCaEq8Pc9NnhLVvzOzkCuAz7o.roa (raw, json)
Hash identifier:          ynklnphzz8lwrpKE0c92e/4z6axlkELvuPk4Ts9Q0kk=
Subject key identifier:   24:75:C2:68:4A:BC:3D:CF:4D:9E:12:D5:BF:33:B3:90:2B:80:CF:BA
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0277
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JHXCaEq8Pc9NnhLVvzOzkCuAz7o.roa
Signing time:             Tue 30 May 2023 16:34:21 +0000
ROA not before:           Tue 30 May 2023 16:34:21 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        27.230.80.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 631 (0x277)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:34:21 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=2475C2684ABC3DCF4D9E12D5BF33B3902B80CFBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:de:ce:a4:8b:bd:1b:9c:92:7a:4b:23:d4:e4:
                    bc:b0:31:db:46:7a:26:bc:87:83:e1:62:be:37:9c:
                    da:07:1a:aa:64:6e:13:ba:0d:af:e4:03:5c:63:47:
                    f4:a2:5a:d5:8f:92:5e:e9:2b:53:63:76:8b:43:17:
                    24:12:f3:a3:57:df:b0:b8:55:f7:18:29:83:1d:5d:
                    94:60:9c:80:08:36:7b:10:e2:ca:60:f1:22:a6:ef:
                    e5:d1:ab:b2:d6:10:f1:c1:78:16:00:80:4c:da:40:
                    c7:53:6c:4c:b9:50:fc:a5:92:6b:9a:93:3e:2e:a4:
                    88:69:e2:39:c8:ce:6e:cc:75:89:1b:f4:32:e8:ac:
                    74:b9:ad:87:db:18:63:2b:eb:d8:35:f9:dc:51:d6:
                    04:13:a8:5a:08:09:31:12:a1:f3:7b:17:8b:87:30:
                    e8:ae:c0:7c:e4:ef:1a:f2:89:05:60:7c:57:a2:5b:
                    e0:a8:cf:09:f7:ea:aa:f0:6a:d8:ef:e3:74:81:6d:
                    8f:d2:f7:64:5d:e4:d7:36:cc:5a:1b:3b:5e:28:8a:
                    19:2d:6e:65:43:bb:5a:36:b1:d3:2c:fb:b6:01:70:
                    b1:2c:74:a8:72:4e:a4:10:67:18:2b:a2:59:8b:df:
                    c2:03:d3:cc:c8:19:d5:12:96:45:35:ed:d6:1e:b4:
                    73:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:75:C2:68:4A:BC:3D:CF:4D:9E:12:D5:BF:33:B3:90:2B:80:CF:BA
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JHXCaEq8Pc9NnhLVvzOzkCuAz7o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.230.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b3:12:d5:e2:d0:ee:7f:c2:eb:05:25:85:0d:8f:c4:27:e2:39:
         37:3d:fb:fa:34:1c:cf:69:e1:40:f7:df:06:b8:4b:ec:87:27:
         7d:53:07:2e:b6:44:cf:6b:ef:08:02:fa:18:92:35:e6:ce:e8:
         73:02:1d:3a:d2:d5:19:c9:a8:b5:fc:2c:ef:1b:49:13:34:9e:
         37:29:7f:64:79:0d:85:12:21:61:2b:35:9e:d8:98:d7:4a:00:
         3e:fb:11:e4:92:93:5b:81:9e:26:3f:f6:99:3d:b3:58:cb:40:
         76:b2:07:a8:e2:a9:12:46:3b:38:31:d5:b1:2c:53:de:9d:d3:
         c9:d0:e6:b9:d2:24:99:81:c2:9b:2a:92:3d:06:87:38:43:c8:
         96:18:14:1c:39:d5:3d:e3:89:01:88:dc:f2:52:3f:74:d5:50:
         09:d2:29:19:92:5f:5c:a2:06:88:32:3a:76:74:3e:d4:48:2a:
         ab:c0:9b:78:cf:a6:b0:74:c5:ba:b7:f9:c6:ef:ec:ed:2d:a6:
         4c:fc:ad:f8:e2:09:c8:fe:6b:ef:7e:73:dc:cc:58:d2:84:24:
         27:5b:7d:46:5e:ab:4f:c6:17:17:55:9f:76:e0:e7:28:aa:91:
         5e:b2:e4:52:b3:2c:2e:0e:36:fa:e7:27:39:fb:2d:c8:8e:68:
         6f:a6:fb:a3
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAncwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MzAx
NjM0MjFaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDI0NzVDMjY4NEFCQzNE
Q0Y0RDlFMTJENUJGMzNCMzkwMkI4MENGQkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDb3s6ki70bnJJ6SyPU5LywMdtGeia8h4PhYr43nNoHGqpkbhO6
Da/kA1xjR/SiWtWPkl7pK1NjdotDFyQS86NX37C4VfcYKYMdXZRgnIAINnsQ4spg
8SKm7+XRq7LWEPHBeBYAgEzaQMdTbEy5UPylkmuakz4upIhp4jnIzm7MdYkb9DLo
rHS5rYfbGGMr69g1+dxR1gQTqFoICTESofN7F4uHMOiuwHzk7xryiQVgfFeiW+Co
zwn36qrwatjv43SBbY/S92Rd5Nc2zFobO14oihktbmVDu1o2sdMs+7YBcLEsdKhy
TqQQZxgrolmL38ID08zIGdUSlkU17dYetHOVAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUJHXCaEq8Pc9NnhLVvzOzkCuAz7owHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0pIWENhRXE4UGM5Tm5oTFZ2ek96a0N1QXo3by5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAMb5lAwDQYJKoZIhvcNAQELBQADggEBALMS1eLQ7n/C6wUlhQ2PxCfiOTc9
+/o0HM9p4UD33wa4S+yHJ31TBy62RM9r7wgC+hiSNebO6HMCHTrS1RnJqLX8LO8b
SRM0njcpf2R5DYUSIWErNZ7YmNdKAD77EeSSk1uBniY/9pk9s1jLQHayB6jiqRJG
Ozgx1bEsU96d08nQ5rnSJJmBwpsqkj0GhzhDyJYYFBw51T3jiQGI3PJSP3TVUAnS
KRmSX1yiBogyOnZ0PtRIKqvAm3jPprB0xbq3+cbv7O0tpkz8rfjiCcj+a+9+c9zM
WNKEJCdbfUZeq0/GFxdVn3bg5yiqkV6y5FKzLC4ONvrnJzn7LciOaG+m+6M=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:51 2024 by rpki-client on console-fra.rpki-client.org