Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/zOFrAiOI4OWglqsP35e3utWnw8s.roa
File:                     zOFrAiOI4OWglqsP35e3utWnw8s.roa (raw, json)
Hash identifier:          gNK4EZh994COjWi0joXzg+YFyK+Ky963Gn/Wj73qT1c=
Subject key identifier:   CC:E1:6B:02:23:88:E0:E5:A0:96:AB:0F:DF:97:B7:BA:D5:A7:C3:CB
Certificate issuer:       /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial:       1D
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zOFrAiOI4OWglqsP35e3utWnw8s.roa
Signing time:             Tue 30 May 2023 16:30:34 +0000
ROA not before:           Tue 30 May 2023 16:30:34 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        146.99.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
        Validity
            Not Before: May 30 16:30:34 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=CCE16B022388E0E5A096AB0FDF97B7BAD5A7C3CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:56:c0:53:6d:a4:92:60:3c:07:78:be:82:e2:
                    75:ab:e2:a3:fd:67:30:08:d8:46:cb:cf:7a:64:33:
                    a0:49:98:57:9f:67:a8:d1:66:df:e1:67:00:34:80:
                    d1:0d:fc:17:9a:e4:d1:bb:51:ff:b3:70:db:cf:43:
                    87:31:9b:cc:4d:63:cb:57:56:4b:52:50:6e:96:fa:
                    58:11:c6:59:82:04:b1:29:52:7b:68:85:24:25:12:
                    ab:b3:0e:0c:a2:0d:a9:44:5b:0c:5a:31:35:4b:90:
                    87:66:5b:9f:e8:39:2c:5a:88:24:fa:60:ce:11:9d:
                    c9:1b:4c:58:5b:2f:72:80:c7:a5:ee:27:31:78:ac:
                    6e:43:e2:54:b0:e7:02:68:a2:89:1f:9a:40:09:23:
                    bd:c4:47:38:b6:22:64:e0:fa:6f:d9:4c:dc:99:cf:
                    3f:c3:4f:ec:38:97:77:34:20:4f:2b:53:e6:e1:43:
                    51:f8:91:56:58:34:7f:16:72:00:1f:32:f5:42:65:
                    72:fe:ac:cb:c1:3b:f6:cb:6a:46:b4:03:12:be:06:
                    ae:54:c7:07:2e:c2:c7:58:ca:e2:41:a4:73:2f:8d:
                    cb:e3:cd:e4:c4:c0:4f:ba:8b:35:90:ab:d1:a9:81:
                    64:77:c8:33:6f:11:3e:9f:94:ba:fa:e4:89:d9:b2:
                    76:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E1:6B:02:23:88:E0:E5:A0:96:AB:0F:DF:97:B7:BA:D5:A7:C3:CB
            X509v3 Authority Key Identifier:
                keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zOFrAiOI4OWglqsP35e3utWnw8s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.99.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6d:36:4f:86:75:e7:17:15:63:b8:d4:1a:c2:9a:46:b0:01:06:
         a4:a5:94:86:1d:c7:b6:bf:75:eb:76:aa:5a:48:a7:57:f3:32:
         b0:f1:18:97:19:a6:7f:4c:be:36:76:53:18:5f:4e:f1:52:85:
         42:b3:17:6c:11:6c:4d:3c:58:af:f8:cd:06:12:83:f8:00:84:
         92:f2:e4:88:9d:33:e8:4c:4b:1a:ae:0a:9a:38:42:51:f3:1e:
         ba:67:d0:40:bf:a8:fc:e3:c5:49:e6:6b:fe:c2:46:43:43:cb:
         6c:1d:dd:3a:0b:c0:97:3a:39:29:af:39:3b:0f:a6:6c:86:4c:
         f6:a9:51:84:a6:8c:70:ec:01:12:cd:f8:a6:2c:3d:5c:40:67:
         30:a0:a3:75:ed:93:e0:28:6e:37:6a:62:fc:83:3e:c9:03:30:
         09:35:08:9b:ba:5c:b7:87:58:ce:9d:57:83:fa:dd:32:44:26:
         dc:e9:a2:e3:7f:7e:23:3e:75:64:1a:c4:5b:3f:56:a7:90:b6:
         6b:68:70:2e:54:14:5d:eb:d2:44:83:83:a5:9d:75:04:8d:5f:
         4e:b4:24:82:b6:fa:41:8b:59:de:ab:c0:c6:4f:80:b6:91:5e:
         b1:74:72:64:ce:8e:95:0e:f7:e1:19:3a:5f:b3:5d:1a:df:6c:
         44:5d:ca:24
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIBHTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGODlF
MEYxNUMxRTIwRTE5MUFBRjE3Mjg4RjZFMzBGRjAxODY5QTZFMB4XDTIzMDUzMDE2
MzAzNFoXDTI0MDUxNDAxMzAwMlowMzExMC8GA1UEAxMoQ0NFMTZCMDIyMzg4RTBF
NUEwOTZBQjBGREY5N0I3QkFENUE3QzNDQjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANdWwFNtpJJgPAd4voLidavio/1nMAjYRsvPemQzoEmYV59nqNFm
3+FnADSA0Q38F5rk0btR/7Nw289DhzGbzE1jy1dWS1JQbpb6WBHGWYIEsSlSe2iF
JCUSq7MODKINqURbDFoxNUuQh2Zbn+g5LFqIJPpgzhGdyRtMWFsvcoDHpe4nMXis
bkPiVLDnAmiiiR+aQAkjvcRHOLYiZOD6b9lM3JnPP8NP7DiXdzQgTytT5uFDUfiR
Vlg0fxZyAB8y9UJlcv6sy8E79stqRrQDEr4GrlTHBy7Cx1jK4kGkcy+Ny+PN5MTA
T7qLNZCr0amBZHfIM28RPp+UuvrkidmydhECAwEAAaOCAiMwggIfMB0GA1UdDgQW
BBTM4WsCI4jg5aCWqw/fl7e61afDyzAfBgNVHSMEGDAWgBT4ng8VweIOGRqvFyiP
bjD/AYaabjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzA5Ly1KNFBGY0hpRGhrYXJ4Y29qMjR3X3dHR21tNC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLy1KNFBGY0hpRGhrYXJ4Y29qMjR3X3dH
R21tNC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDkvek9GckFpT0k0T1dnbHFzUDM1ZTN1dFdudzhzLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw
BQMDAJJjMA0GCSqGSIb3DQEBCwUAA4IBAQBtNk+GdecXFWO41BrCmkawAQakpZSG
Hce2v3XrdqpaSKdX8zKw8RiXGaZ/TL42dlMYX07xUoVCsxdsEWxNPFiv+M0GEoP4
AISS8uSInTPoTEsargqaOEJR8x66Z9BAv6j848VJ5mv+wkZDQ8tsHd06C8CXOjkp
rzk7D6Zshkz2qVGEpoxw7AESzfimLD1cQGcwoKN17ZPgKG43amL8gz7JAzAJNQib
uly3h1jOnVeD+t0yRCbc6aLjf34jPnVkGsRbP1ankLZraHAuVBRd69JEg4OlnXUE
jV9OtCSCtvpBi1neq8DGT4C2kV6xdHJkzo6VDvfhGTpfs10a32xEXcok
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org