Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/BYLKjxreah048jz1pua3V_s_mPs.roa
File:                     BYLKjxreah048jz1pua3V_s_mPs.roa (raw, json)
Hash identifier:          4oh/YCs//8tfX3vCzVPMp3UQWozxBLpxWxV2US85FvI=
Subject key identifier:   05:82:CA:8F:1A:DE:6A:1D:38:F2:3C:F5:A6:E6:B7:57:FB:3F:98:FB
Certificate issuer:       /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Certificate serial:       05
Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/BYLKjxreah048jz1pua3V_s_mPs.roa
Signing time:             Fri 25 Feb 2022 07:12:38 +0000
ROA not before:           Fri 25 Feb 2022 07:12:38 +0000
ROA not after:            Wed 15 Feb 2023 01:30:03 +0000
asID:                     17676
IP address blocks:        61.213.0.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
        Validity
            Not Before: Feb 25 07:12:38 2022 GMT
            Not After : Feb 15 01:30:03 2023 GMT
        Subject: CN=0582CA8F1ADE6A1D38F23CF5A6E6B757FB3F98FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ba:f3:26:7d:0d:b6:9d:cf:91:ba:0f:6b:d8:
                    68:6b:a8:6a:9e:c9:a4:9f:62:7d:02:a2:8b:e5:61:
                    1d:1e:a9:5f:1d:78:35:90:77:e8:27:ac:0a:eb:42:
                    fc:44:9e:d8:fa:33:ac:00:22:dc:15:60:8e:e4:29:
                    83:d9:ac:04:21:82:17:ec:54:65:01:7f:b3:1f:9e:
                    88:b3:e7:5f:60:4c:51:30:fc:4a:8b:8e:0b:fc:c7:
                    e8:c5:f1:ce:ee:32:d0:3c:ef:f8:b7:39:37:d3:37:
                    e9:25:93:db:f8:07:1d:ae:0d:81:f3:45:18:36:8e:
                    bb:24:fd:fd:0f:99:0b:5b:c5:6a:f8:ce:c2:c3:20:
                    d7:9c:e9:12:ab:80:08:61:0c:1f:28:45:8d:af:a8:
                    3b:46:a4:f1:6d:68:31:77:f3:d9:35:6e:c9:f7:1c:
                    bf:10:93:a7:6d:6d:9d:82:13:df:6b:e4:e8:ea:4c:
                    76:d3:9a:1c:ef:20:8e:30:72:0f:dc:b6:c8:93:0f:
                    34:7b:a9:cd:38:65:91:8f:4d:32:d6:80:4f:b3:bf:
                    f2:95:01:bf:70:40:5b:02:84:35:c0:4e:96:0f:f9:
                    d2:46:cc:8a:0c:8a:63:ab:dd:4c:a9:06:f0:39:16:
                    db:ef:c1:6e:43:62:f2:94:67:cc:96:7c:65:8c:e1:
                    0a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:82:CA:8F:1A:DE:6A:1D:38:F2:3C:F5:A6:E6:B7:57:FB:3F:98:FB
            X509v3 Authority Key Identifier:
                keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/BYLKjxreah048jz1pua3V_s_mPs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.213.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         98:c4:9b:5d:b6:b6:7b:12:c3:9e:67:4a:c1:84:02:3e:32:bf:
         5a:d6:fa:d5:69:79:8f:ac:4a:42:a9:c4:ae:dc:0b:d2:d9:bb:
         11:c0:90:e1:e7:49:34:71:45:c7:c6:20:60:f2:a1:08:e7:05:
         54:54:03:a1:fe:6a:79:30:48:28:90:18:5c:20:dd:57:17:37:
         7f:3f:6e:ff:c8:d3:d6:cd:46:82:23:39:50:19:49:d2:8f:af:
         22:58:56:af:3e:89:f8:f6:01:cb:aa:af:67:07:6e:ab:1e:09:
         29:b8:20:35:40:98:49:f5:4a:14:e2:08:40:93:bf:03:2f:8d:
         6f:65:8a:b6:c0:2a:7f:35:f2:d3:24:8a:d0:89:43:de:57:56:
         40:28:ba:0d:db:14:89:4b:71:75:28:fd:31:4d:d3:38:04:fb:
         08:c7:e5:70:f2:29:28:d7:3c:fa:8f:bd:e6:ec:3f:60:77:ab:
         34:03:fd:10:39:26:5c:f5:fa:50:40:56:61:a0:61:89:70:36:
         a1:e3:fa:23:54:6a:e4:e8:ef:aa:9e:09:68:a8:02:5e:34:a4:
         61:bc:4d:e0:f5:1c:25:01:7f:33:7c:0a:9a:4f:9d:cb:da:14:
         c7:11:e7:9e:e9:b8:86:53:e7:0e:cf:b2:b8:4f:93:0b:9b:73:
         bf:e4:a0:fb
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBBTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFNjIz
MzhERTMzMkM2RjRCOUUyNTk2RUU1REMzNzlBMjVFRkU1OENGMB4XDTIyMDIyNTA3
MTIzOFoXDTIzMDIxNTAxMzAwM1owMzExMC8GA1UEAxMoMDU4MkNBOEYxQURFNkEx
RDM4RjIzQ0Y1QTZFNkI3NTdGQjNGOThGQjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANm68yZ9Dbadz5G6D2vYaGuoap7JpJ9ifQKii+VhHR6pXx14NZB3
6CesCutC/ESe2PozrAAi3BVgjuQpg9msBCGCF+xUZQF/sx+eiLPnX2BMUTD8SouO
C/zH6MXxzu4y0Dzv+Lc5N9M36SWT2/gHHa4NgfNFGDaOuyT9/Q+ZC1vFavjOwsMg
15zpEquACGEMHyhFja+oO0ak8W1oMXfz2TVuyfccvxCTp21tnYIT32vk6OpMdtOa
HO8gjjByD9y2yJMPNHupzThlkY9NMtaAT7O/8pUBv3BAWwKENcBOlg/50kbMigyK
Y6vdTKkG8DkW2+/BbkNi8pRnzJZ8ZYzhCiUCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBQFgsqPGt5qHTjyPPWm5rdX+z+Y+zAfBgNVHSMEGDAWgBTmIzjeMyxvS54llu5d
w3miXv5YzzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDQwLzVpTTQzak1zYjB1ZUpaYnVYY041b2w3LVdNOC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzVpTTQzak1zYjB1ZUpaYnVYY041b2w3
LVdNOC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80NDAvQllMS2p4cmVhaDA0OGp6MXB1YTNWX3NfbVBzLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBD3VADANBgkqhkiG9w0BAQsFAAOCAQEA
mMSbXba2exLDnmdKwYQCPjK/Wtb61Wl5j6xKQqnErtwL0tm7EcCQ4edJNHFFx8Yg
YPKhCOcFVFQDof5qeTBIKJAYXCDdVxc3fz9u/8jT1s1GgiM5UBlJ0o+vIlhWrz6J
+PYBy6qvZwduqx4JKbggNUCYSfVKFOIIQJO/Ay+Nb2WKtsAqfzXy0ySK0IlD3ldW
QCi6DdsUiUtxdSj9MU3TOAT7CMflcPIpKNc8+o+95uw/YHerNAP9EDkmXPX6UEBW
YaBhiXA2oeP6I1Rq5Ojvqp4JaKgCXjSkYbxN4PUcJQF/M3wKmk+dy9oUxxHnnum4
hlPnDs+yuE+TC5tzv+Sg+w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:10 2024 by rpki-client on console-ams.rpki-client.org