Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/zn8eY89hE1M9erSyBjeaOkn5U50.roa
File:                     zn8eY89hE1M9erSyBjeaOkn5U50.roa (raw, json)
Hash identifier:          qxG2b5HoSFJ0UgGNnpfOaaWhMMnjp00UDL7TLYGY024=
Subject key identifier:   CE:7F:1E:63:CF:61:13:53:3D:7A:B4:B2:06:37:9A:3A:49:F9:53:9D
Certificate issuer:       /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial:       1C
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zn8eY89hE1M9erSyBjeaOkn5U50.roa
Signing time:             Tue 30 May 2023 16:30:32 +0000
ROA not before:           Tue 30 May 2023 16:30:32 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        158.199.32.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
        Validity
            Not Before: May 30 16:30:32 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=CE7F1E63CF6113533D7AB4B206379A3A49F9539D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:43:3f:4f:68:95:30:64:39:01:11:46:f5:7c:
                    5a:98:d2:05:e8:93:e4:5f:9a:6b:59:ce:09:99:01:
                    11:89:64:48:8b:0e:2c:c9:7c:d5:81:15:94:99:42:
                    f2:95:6d:86:85:1b:50:ba:95:71:db:b9:1c:ab:35:
                    e6:77:ee:3d:16:cd:7c:47:f0:b5:92:42:17:36:d9:
                    a6:c1:4f:9d:38:05:19:97:8c:24:75:34:4a:29:2c:
                    64:10:8b:c9:bb:0b:7b:5b:44:48:6d:c2:d8:23:af:
                    f3:94:70:39:b4:f7:08:46:67:d6:50:63:ee:64:e3:
                    29:c3:4c:6b:f6:ca:49:4c:bc:84:83:51:d3:5b:df:
                    75:17:59:25:8e:32:6b:5e:9e:78:61:a4:ef:d4:30:
                    63:c0:c0:f1:46:24:c5:53:be:2f:ce:3a:a5:dc:7f:
                    82:62:b1:35:a4:dd:b5:38:69:8a:11:a1:b3:26:7f:
                    c6:30:a0:bc:fc:61:34:04:4c:1b:bd:98:b6:96:bb:
                    0c:3a:fe:27:1e:15:df:39:90:06:0f:f6:3b:1e:08:
                    8f:e6:bf:09:cd:2f:00:95:e0:2d:d9:9b:6d:e4:31:
                    b2:59:04:66:7e:be:42:9e:9f:c0:ea:d3:e8:38:5b:
                    23:00:18:c8:bb:6a:fe:b5:c5:97:aa:68:55:8f:79:
                    a9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:7F:1E:63:CF:61:13:53:3D:7A:B4:B2:06:37:9A:3A:49:F9:53:9D
            X509v3 Authority Key Identifier:
                keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/zn8eY89hE1M9erSyBjeaOkn5U50.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.199.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         be:10:20:7a:bd:2a:f9:02:d4:5e:40:23:08:2b:33:d5:ea:29:
         4c:ea:61:2c:cb:2e:19:da:9f:d8:f8:d8:03:d9:3a:09:0b:f7:
         8e:2d:f8:c9:83:63:8f:a3:49:af:17:05:8c:37:06:ea:3d:9d:
         75:4a:3d:17:90:62:53:67:b3:d4:e3:21:7b:2e:da:67:53:af:
         60:cf:37:47:03:09:17:f0:c5:5b:57:c1:a6:d7:d4:fa:32:76:
         c0:23:92:d6:ca:90:d6:8a:c3:28:78:bd:55:bf:46:85:3b:11:
         4a:d8:c0:87:f7:23:0f:fe:e7:fe:be:08:ef:66:26:87:d2:05:
         b6:3b:fa:28:ed:18:cf:d9:6f:a3:79:62:f0:21:f0:1b:9d:20:
         eb:6a:85:58:8a:83:97:da:2a:72:2f:ba:bd:fa:06:32:a0:8a:
         f9:9d:ff:29:8e:49:ec:2b:85:78:67:8f:89:c3:21:b8:ff:22:
         19:d1:1b:8f:eb:9d:1f:71:12:ba:68:75:c2:e1:49:02:99:b6:
         0d:e1:19:db:c9:c7:24:ff:c1:f3:46:cd:5b:ef:7c:4f:c3:3b:
         8d:a7:06:d4:17:31:8d:f4:d7:c5:a9:c7:74:02:a4:96:59:2e:
         ab:eb:25:b6:0b:54:c6:cf:2d:a8:d7:8e:3f:3e:89:bc:ea:95:
         72:69:1c:63
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBHDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGODlF
MEYxNUMxRTIwRTE5MUFBRjE3Mjg4RjZFMzBGRjAxODY5QTZFMB4XDTIzMDUzMDE2
MzAzMloXDTI0MDUxNDAxMzAwMlowMzExMC8GA1UEAxMoQ0U3RjFFNjNDRjYxMTM1
MzNEN0FCNEIyMDYzNzlBM0E0OUY5NTM5RDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALVDP09olTBkOQERRvV8WpjSBeiT5F+aa1nOCZkBEYlkSIsOLMl8
1YEVlJlC8pVthoUbULqVcdu5HKs15nfuPRbNfEfwtZJCFzbZpsFPnTgFGZeMJHU0
SiksZBCLybsLe1tESG3C2COv85RwObT3CEZn1lBj7mTjKcNMa/bKSUy8hINR01vf
dRdZJY4ya16eeGGk79QwY8DA8UYkxVO+L846pdx/gmKxNaTdtThpihGhsyZ/xjCg
vPxhNARMG72Ytpa7DDr+Jx4V3zmQBg/2Ox4Ij+a/Cc0vAJXgLdmbbeQxslkEZn6+
Qp6fwOrT6DhbIwAYyLtq/rXFl6poVY95qccCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTOfx5jz2ETUz16tLIGN5o6SflTnTAfBgNVHSMEGDAWgBT4ng8VweIOGRqvFyiP
bjD/AYaabjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzA5Ly1KNFBGY0hpRGhrYXJ4Y29qMjR3X3dHR21tNC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLy1KNFBGY0hpRGhrYXJ4Y29qMjR3X3dH
R21tNC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDkvem44ZVk4OWhFMU05ZXJTeUJqZWFPa241VTUwLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBZ7HIDANBgkqhkiG9w0BAQsFAAOCAQEAvhAger0q+QLUXkAjCCsz1eopTOph
LMsuGdqf2PjYA9k6CQv3ji34yYNjj6NJrxcFjDcG6j2ddUo9F5BiU2ez1OMhey7a
Z1OvYM83RwMJF/DFW1fBptfU+jJ2wCOS1sqQ1orDKHi9Vb9GhTsRStjAh/cjD/7n
/r4I72Ymh9IFtjv6KO0Yz9lvo3li8CHwG50g62qFWIqDl9oqci+6vfoGMqCK+Z3/
KY5J7CuFeGePicMhuP8iGdEbj+udH3ESumh1wuFJApm2DeEZ28nHJP/B80bNW+98
T8M7jacG1BcxjfTXxanHdAKkllkuq+sltgtUxs8tqNeOPz6JvOqVcmkcYw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org