Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/BXTh77Xaz9YB4bPfP96UTee_5po.roa
File:                     BXTh77Xaz9YB4bPfP96UTee_5po.roa (raw, json)
Hash identifier:          zElESFsi84DfFJPEY0EEOWG2qMF2D9dPNWwj/wkFbTk=
Subject key identifier:   05:74:E1:EF:B5:DA:CF:D6:01:E1:B3:DF:3F:DE:94:4D:E7:BF:E6:9A
Certificate issuer:       /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Certificate serial:       39
Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/BXTh77Xaz9YB4bPfP96UTee_5po.roa
Signing time:             Thu 13 Apr 2023 09:53:59 +0000
ROA not before:           Thu 13 Apr 2023 09:53:59 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     18260
IP address blocks:        27.106.224.0/19 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
        Validity
            Not Before: Apr 13 09:53:59 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=0574E1EFB5DACFD601E1B3DF3FDE944DE7BFE69A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f4:b0:04:c4:a4:79:10:33:73:d5:8c:e6:7c:
                    58:fa:14:13:97:bc:e4:67:98:07:6c:56:52:0c:14:
                    2e:06:6a:d1:51:39:b9:81:ea:7a:0b:e5:71:a6:8d:
                    25:0a:c7:18:f7:6d:dc:e7:74:62:f4:e2:7f:c1:83:
                    c3:a6:84:3a:e1:cf:c8:51:82:ab:2a:de:e5:ca:07:
                    c8:c0:75:53:52:b8:3d:ab:22:a4:99:f3:39:33:a8:
                    fe:0b:9d:9d:f4:cb:49:bf:4c:f1:9c:5a:ac:52:b8:
                    bc:e6:fc:f7:c3:e6:65:1d:e8:18:c6:13:3d:78:3f:
                    cf:37:52:db:6d:88:40:26:47:5a:38:9e:86:40:10:
                    59:75:79:c1:b1:56:b2:4c:b5:71:bf:7a:f1:37:be:
                    1c:9b:42:49:28:a8:4e:35:31:0c:c6:ec:d9:76:9e:
                    16:39:30:97:cc:c8:59:ba:db:9a:84:d7:eb:60:02:
                    e8:93:fc:04:9a:fd:e4:a0:03:8c:f1:af:88:51:f9:
                    10:4d:0a:00:da:27:59:cd:24:d3:18:1b:d6:45:24:
                    69:c4:10:42:70:b2:81:d4:2c:e2:cc:f5:3d:d8:76:
                    5a:e9:47:b0:7f:0f:52:f2:ca:f9:d6:27:c2:e5:15:
                    f3:99:3e:5d:8c:b7:08:94:4c:b1:45:fb:c5:a6:9d:
                    67:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:74:E1:EF:B5:DA:CF:D6:01:E1:B3:DF:3F:DE:94:4D:E7:BF:E6:9A
            X509v3 Authority Key Identifier:
                keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/BXTh77Xaz9YB4bPfP96UTee_5po.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.106.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         33:ea:b3:ae:8c:68:31:2c:47:db:d8:c9:09:10:97:3c:2d:bd:
         28:c4:a2:ab:d9:ee:3b:b7:fe:d8:b1:a5:09:1e:f9:a8:4a:ad:
         10:0e:cb:12:46:7d:18:9c:1b:8e:00:21:6b:55:a5:f4:85:da:
         ee:4e:49:ed:30:12:b7:4f:33:c9:aa:d4:72:f3:f3:50:a3:ac:
         6c:c6:39:da:68:06:9d:84:dc:dd:82:0f:ee:25:9d:32:73:1e:
         73:27:6e:dd:5f:d4:e6:65:45:d9:7d:93:f4:53:9b:3d:0d:d5:
         ba:15:8d:7d:c9:ce:25:be:8c:08:fe:6d:16:4e:69:07:f2:0c:
         17:f0:98:c2:36:24:86:93:f3:dd:d6:c3:34:5d:31:69:0a:55:
         02:82:7a:3d:26:07:11:a8:f2:69:85:ca:c8:22:3a:39:e6:6a:
         d2:80:c2:88:19:cf:90:22:45:c9:8a:f6:a2:e6:9b:00:1b:ec:
         24:60:77:1a:25:87:c7:de:17:1b:0c:6e:15:c5:a8:10:a8:48:
         d6:48:98:70:af:f8:fa:98:f3:d2:fa:0f:cb:47:de:f1:fe:31:
         12:0a:6b:fc:a6:82:40:5c:12:2c:3a:a8:16:78:28:0b:fb:35:
         9b:17:47:d5:78:ba:39:d0:75:83:da:eb:cc:34:bd:04:05:43:
         a5:c6:f3:04
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBOTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5MUFD
QTQ0Mjc1RUMwNTcyQkM2OTIxNTAyQjI0MUMxNEQ0NEE5QUExMB4XDTIzMDQxMzA5
NTM1OVoXDTI0MDMxNDAxMzAwMlowMzExMC8GA1UEAxMoMDU3NEUxRUZCNURBQ0ZE
NjAxRTFCM0RGM0ZERTk0NERFN0JGRTY5QTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMH0sATEpHkQM3PVjOZ8WPoUE5e85GeYB2xWUgwULgZq0VE5uYHq
egvlcaaNJQrHGPdt3Od0YvTif8GDw6aEOuHPyFGCqyre5coHyMB1U1K4PasipJnz
OTOo/gudnfTLSb9M8ZxarFK4vOb898PmZR3oGMYTPXg/zzdS222IQCZHWjiehkAQ
WXV5wbFWsky1cb968Te+HJtCSSioTjUxDMbs2XaeFjkwl8zIWbrbmoTX62AC6JP8
BJr95KADjPGviFH5EE0KANonWc0k0xgb1kUkacQQQnCygdQs4sz1Pdh2WulHsH8P
UvLK+dYnwuUV85k+XYy3CJRMsUX7xaadZ+UCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQFdOHvtdrP1gHhs98/3pRN57/mmjAfBgNVHSMEGDAWgBSRrKRCdewFcrxpIVAr
JBwU1EqaoTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNzMxL2theWtRblhzQlhLOGFTRlFLeVFjRk5SS21xRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2theWtRblhzQlhLOGFTRlFLeVFjRk5S
S21xRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC83MzEvQlhUaDc3WGF6OVlCNGJQZlA5NlVUZWVfNXBvLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBRtq4DANBgkqhkiG9w0BAQsFAAOCAQEAM+qzroxoMSxH29jJCRCXPC29KMSi
q9nuO7f+2LGlCR75qEqtEA7LEkZ9GJwbjgAha1Wl9IXa7k5J7TASt08zyarUcvPz
UKOsbMY52mgGnYTc3YIP7iWdMnMecydu3V/U5mVF2X2T9FObPQ3VuhWNfcnOJb6M
CP5tFk5pB/IMF/CYwjYkhpPz3dbDNF0xaQpVAoJ6PSYHEajyaYXKyCI6OeZq0oDC
iBnPkCJFyYr2ouabABvsJGB3GiWHx94XGwxuFcWoEKhI1kiYcK/4+pjz0voPy0fe
8f4xEgpr/KaCQFwSLDqoFngoC/s1mxdH1Xi6OdB1g9rrzDS9BAVDpcbzBA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org