Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/wVyliPxOvgD2Te8HfX1rCg4n72M.roa
File:                     wVyliPxOvgD2Te8HfX1rCg4n72M.roa (raw, json)
Hash identifier:          hfcVS4wysm/MVqcecQYyRfRn6CapHF2Yd5WWiQjilwM=
Subject key identifier:   C1:5C:A5:88:FC:4E:BE:00:F6:4D:EF:07:7D:7D:6B:0A:0E:27:EF:63
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       01F1
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wVyliPxOvgD2Te8HfX1rCg4n72M.roa
Signing time:             Tue 30 May 2023 16:29:20 +0000
ROA not before:           Tue 30 May 2023 16:29:20 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.75.188.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 497 (0x1f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 30 16:29:20 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=C15CA588FC4EBE00F64DEF077D7D6B0A0E27EF63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f2:9b:16:4b:f4:2c:2b:96:b5:60:2d:14:69:
                    38:50:12:8b:75:a4:4d:e4:b9:98:fd:4b:cc:f4:c1:
                    b9:04:3a:b7:3b:7c:08:33:41:ca:29:d3:0e:10:e1:
                    b9:4b:2a:81:d2:da:1f:d1:6f:a0:70:3b:5f:db:45:
                    7d:f6:69:35:22:79:0e:0a:9f:cc:2b:bd:b7:d5:f0:
                    d0:a8:08:5f:14:6d:ed:ab:d2:4e:4e:6b:f5:c3:e1:
                    20:e6:e9:b8:f6:af:71:d0:c5:a5:94:d5:9f:3f:48:
                    fe:5b:d4:56:2c:65:5b:d4:f0:8a:8c:6f:02:88:f9:
                    2b:4c:c3:8e:a0:37:40:d1:1f:7c:7d:44:2c:3f:b6:
                    f3:4a:77:3b:ae:d2:c1:29:d4:e3:3f:fa:61:44:6a:
                    fa:98:eb:87:57:b3:19:b7:07:b6:a3:df:92:43:ff:
                    8d:71:df:bc:39:c7:ba:ac:10:5b:bb:1b:58:19:cd:
                    c1:5e:96:a9:d7:98:c6:dc:0d:4e:8b:ec:65:bd:7c:
                    8a:f0:a7:e6:89:21:60:84:1a:ef:9f:84:8c:39:51:
                    b3:2e:ee:d9:5e:2e:bb:ae:d4:2e:a3:4b:85:a4:f4:
                    72:83:94:23:f4:31:e1:c3:31:75:1f:5a:c0:eb:5d:
                    d4:cf:c4:59:37:19:0c:1a:b7:20:7c:17:b3:88:00:
                    34:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:5C:A5:88:FC:4E:BE:00:F6:4D:EF:07:7D:7D:6B:0A:0E:27:EF:63
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/wVyliPxOvgD2Te8HfX1rCg4n72M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:dd:6f:8b:df:45:a6:6b:8b:9a:e6:43:53:b9:5b:a7:e9:b9:
         51:22:ae:a7:3c:44:66:62:06:3d:e6:30:0e:b6:08:d4:cd:ef:
         91:68:26:2a:b2:3a:94:73:ba:9f:e9:ff:73:8e:c4:a4:09:9d:
         82:08:10:06:5b:e5:1d:3f:10:b2:fb:ec:b5:da:01:07:0e:16:
         ae:09:22:55:83:54:80:96:6b:a1:b0:cf:f3:e8:f7:95:65:01:
         fe:83:21:34:3c:e8:c6:cf:0a:a9:4b:19:e5:2c:6f:31:cd:a6:
         03:65:59:09:23:8a:a8:22:e3:6b:2f:84:aa:e2:5e:db:34:e3:
         53:14:94:f2:b6:41:0d:5d:b9:5f:b2:d5:9b:34:e9:0e:37:ca:
         3b:5e:f4:6b:1f:29:d7:20:91:3c:d2:9b:ec:fd:aa:e7:9d:7f:
         fb:b1:d4:c7:19:c3:e7:59:60:fe:47:f1:c1:0b:e0:65:4d:bf:
         ea:41:13:89:9e:12:3a:25:68:4c:fa:4c:ac:46:67:94:7e:84:
         3a:06:4f:10:93:b9:1a:da:15:d4:dd:29:e1:87:73:a2:07:32:
         ed:04:f6:bf:2f:dc:05:29:c6:59:2b:d7:39:45:98:b3:52:3b:
         2c:b3:08:50:db:34:43:85:0c:86:ff:08:66:a1:08:56:e0:28:
         da:f2:61:87
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAfEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MzAx
NjI5MjBaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEMxNUNBNTg4RkM0RUJF
MDBGNjRERUYwNzdEN0Q2QjBBMEUyN0VGNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDa8psWS/QsK5a1YC0UaThQEot1pE3kuZj9S8z0wbkEOrc7fAgz
Qcop0w4Q4blLKoHS2h/Rb6BwO1/bRX32aTUieQ4Kn8wrvbfV8NCoCF8Ube2r0k5O
a/XD4SDm6bj2r3HQxaWU1Z8/SP5b1FYsZVvU8IqMbwKI+StMw46gN0DRH3x9RCw/
tvNKdzuu0sEp1OM/+mFEavqY64dXsxm3B7aj35JD/41x37w5x7qsEFu7G1gZzcFe
lqnXmMbcDU6L7GW9fIrwp+aJIWCEGu+fhIw5UbMu7tleLruu1C6jS4Wk9HKDlCP0
MeHDMXUfWsDrXdTPxFk3GQwatyB8F7OIADS/AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUwVyliPxOvgD2Te8HfX1rCg4n72MwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3dWeWxpUHhPdmdEMlRlOEhmWDFyQ2c0bjcyTS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIBS7wwDQYJKoZIhvcNAQELBQADggEBADfdb4vfRaZri5rmQ1O5W6fpuVEi
rqc8RGZiBj3mMA62CNTN75FoJiqyOpRzup/p/3OOxKQJnYIIEAZb5R0/ELL77LXa
AQcOFq4JIlWDVICWa6Gwz/Po95VlAf6DITQ86MbPCqlLGeUsbzHNpgNlWQkjiqgi
42svhKriXts041MUlPK2QQ1duV+y1Zs06Q43yjte9GsfKdcgkTzSm+z9quedf/ux
1McZw+dZYP5H8cEL4GVNv+pBE4meEjolaEz6TKxGZ5R+hDoGTxCTuRraFdTdKeGH
c6IHMu0E9r8v3AUpxlkr1zlFmLNSOyyzCFDbNEOFDIb/CGahCFbgKNryYYc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org