Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/BcnJPriaQYK3-ZT44qGJz783JW8.roa
File:                     BcnJPriaQYK3-ZT44qGJz783JW8.roa (raw, json)
Hash identifier:          /K/wizmwWLzOji4x7zixx2VATSbDbW0QWZcBegOogSI=
Subject key identifier:   05:C9:C9:3E:B8:9A:41:82:B7:F9:94:F8:E2:A1:89:CF:BF:37:25:6F
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       AF
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/BcnJPriaQYK3-ZT44qGJz783JW8.roa
Signing time:             Thu 13 Apr 2023 09:52:56 +0000
ROA not before:           Thu 13 Apr 2023 09:52:56 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9607
IP address blocks:        203.141.56.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175 (0xaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Apr 13 09:52:56 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=05C9C93EB89A4182B7F994F8E2A189CFBF37256F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:25:93:98:7a:4e:ec:cc:df:3d:be:45:b1:ae:
                    05:9d:5a:70:29:5b:00:14:01:2c:9d:84:31:a7:4d:
                    2e:e7:c7:d7:f6:b5:57:04:3f:bc:4a:6a:bf:38:1d:
                    9f:5c:b3:55:79:e7:c1:ec:c8:4b:34:c9:54:85:81:
                    40:e6:9d:59:be:51:7f:1a:f4:e1:d7:dc:05:3b:de:
                    f9:5b:f3:f3:91:6c:9b:bd:fe:fb:3d:c3:06:41:85:
                    e2:c2:ac:56:34:5f:29:89:4c:aa:f4:b5:ab:e8:b5:
                    5f:21:60:1f:73:f3:7f:e7:c8:c5:ef:97:b5:56:f9:
                    c7:2e:72:8c:f3:79:ed:a4:31:26:e9:42:fb:a5:98:
                    69:62:13:32:b2:a5:58:8d:bd:d2:3e:70:d1:5c:ce:
                    f3:21:d7:23:39:98:04:d0:ba:ea:74:19:82:0c:f5:
                    d0:7b:a7:55:ae:92:91:3f:2a:b7:9a:67:87:ec:87:
                    6f:d1:12:16:be:49:e2:18:c7:68:c9:29:a7:42:68:
                    be:cd:27:d0:3b:7f:0d:d3:7b:65:c7:92:7a:9c:87:
                    79:00:bd:33:b4:cd:e1:1e:2f:6d:1a:44:64:78:d5:
                    43:c2:7e:7d:b6:ab:a3:41:2d:8e:97:ea:c8:4f:bd:
                    a4:98:82:3c:27:d4:f6:7b:33:bd:d1:08:b5:bb:d2:
                    e7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C9:C9:3E:B8:9A:41:82:B7:F9:94:F8:E2:A1:89:CF:BF:37:25:6F
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/BcnJPriaQYK3-ZT44qGJz783JW8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.141.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9f:2c:8b:5e:57:85:14:f9:07:5d:8e:63:4c:94:04:4a:29:60:
         dd:b7:df:ba:72:65:d0:81:f5:34:b7:68:f5:15:72:6f:94:ee:
         00:35:3e:5a:2c:b6:f2:fc:de:3c:2e:35:bd:de:9e:0e:b3:4b:
         66:6c:f1:4b:3b:a3:45:1e:8d:96:5b:65:37:76:90:1c:e5:3e:
         89:2c:fd:78:35:64:ca:38:af:8f:7e:1e:d3:36:cc:f5:3c:bd:
         ee:02:b0:c4:9c:d9:1b:db:e6:b6:14:c3:f9:7a:b9:a5:d2:01:
         4a:80:be:15:5d:42:bf:dd:37:8c:ff:ee:2e:91:d7:83:95:0d:
         65:29:7d:fb:b6:f3:4d:c7:3c:b0:fb:d0:be:a5:01:e5:46:b9:
         08:43:80:58:7f:d6:67:56:49:03:b9:8a:c4:45:b5:7c:bc:11:
         96:d7:1a:a3:5a:94:2f:7d:10:ad:2d:7a:a5:3b:3c:15:41:29:
         61:01:ac:e5:f9:89:6c:30:5c:31:71:ef:54:e0:50:dc:2c:7e:
         40:31:24:69:b1:38:59:29:62:b0:61:27:12:c3:63:30:b6:c6:
         30:2e:be:73:eb:f8:46:bb:06:8f:c9:38:8a:9d:35:f6:e8:35:
         2d:c7:f7:8c:b3:40:d5:37:b6:6e:75:30:22:ad:b9:b5:4d:1f:
         e0:47:07:f8
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEE1
QUNBQzI5OTBCRDhGODY1NUMwQzcyMUJBQ0ZGMDMwQTU5RDFGQzAeFw0yMzA0MTMw
OTUyNTZaFw0yNDAzMTQwMTMwMDJaMDMxMTAvBgNVBAMTKDA1QzlDOTNFQjg5QTQx
ODJCN0Y5OTRGOEUyQTE4OUNGQkYzNzI1NkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCiJZOYek7szN89vkWxrgWdWnApWwAUASydhDGnTS7nx9f2tVcE
P7xKar84HZ9cs1V558HsyEs0yVSFgUDmnVm+UX8a9OHX3AU73vlb8/ORbJu9/vs9
wwZBheLCrFY0XymJTKr0tavotV8hYB9z83/nyMXvl7VW+ccucozzee2kMSbpQvul
mGliEzKypViNvdI+cNFczvMh1yM5mATQuup0GYIM9dB7p1WukpE/KreaZ4fsh2/R
Eha+SeIYx2jJKadCaL7NJ9A7fw3Te2XHknqch3kAvTO0zeEeL20aRGR41UPCfn22
q6NBLY6X6shPvaSYgjwn1PZ7M73RCLW70ucvAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUBcnJPriaQYK3+ZT44qGJz783JW8wHwYDVR0jBBgwFoAUClrKwpkL2PhlXAxy
G6z/AwpZ0fwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM1NC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3cFowZncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3
cFowZncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzU0L0JjbkpQcmlhUVlLMy1aVDQ0cUdKejc4M0pXOC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAPLjTgwDQYJKoZIhvcNAQELBQADggEBAJ8si15XhRT5B12OY0yUBEopYN23
37pyZdCB9TS3aPUVcm+U7gA1PlostvL83jwuNb3eng6zS2Zs8Us7o0UejZZbZTd2
kBzlPoks/Xg1ZMo4r49+HtM2zPU8ve4CsMSc2Rvb5rYUw/l6uaXSAUqAvhVdQr/d
N4z/7i6R14OVDWUpffu2803HPLD70L6lAeVGuQhDgFh/1mdWSQO5isRFtXy8EZbX
GqNalC99EK0teqU7PBVBKWEBrOX5iWwwXDFx71TgUNwsfkAxJGmxOFkpYrBhJxLD
YzC2xjAuvnPr+Ea7Bo/JOIqdNfboNS3H94yzQNU3tm51MCKtubVNH+BHB/g=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org