Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/KenA2PlX02TlUzhYDmBBdTR8i00.roa
File:                     KenA2PlX02TlUzhYDmBBdTR8i00.roa (raw, json)
Hash identifier:          41wRO2cLsiQBGvuhQRROWXYuCkT0UH6eDfFzFi4oFqE=
Subject key identifier:   29:E9:C0:D8:F9:57:D3:64:E5:53:38:58:0E:60:41:75:34:7C:8B:4D
Certificate issuer:       /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Certificate serial:       3E
Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/KenA2PlX02TlUzhYDmBBdTR8i00.roa
Signing time:             Thu 13 Apr 2023 09:54:02 +0000
ROA not before:           Thu 13 Apr 2023 09:54:02 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     18260
IP address blocks:        119.30.8.0/22 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
        Validity
            Not Before: Apr 13 09:54:02 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=29E9C0D8F957D364E55338580E604175347C8B4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3c:76:1b:be:56:e9:d0:5f:06:0e:ac:14:ad:
                    7d:ad:7c:cc:3e:6e:68:a6:99:04:2f:45:0e:0d:28:
                    35:40:f0:32:21:b0:37:23:1f:73:aa:2f:f8:42:b7:
                    64:e7:47:9f:b6:c1:d2:2d:c7:59:4a:1d:eb:b8:78:
                    a8:9f:1d:d4:51:f5:9b:3c:9a:1c:14:0d:46:71:dd:
                    7c:3a:54:22:a6:24:a6:96:1e:29:9e:33:62:4c:f7:
                    d6:ec:c0:25:50:1a:90:d0:bb:56:aa:d7:93:8e:c3:
                    f1:84:7d:18:b6:9e:9c:29:fe:61:29:37:f3:51:d6:
                    43:df:3f:b3:b2:31:b1:83:3d:b3:e2:04:8f:c7:2d:
                    d6:d8:36:02:04:5f:45:b0:64:eb:34:80:be:a7:2d:
                    cb:e0:b8:97:50:4a:57:a3:9a:9c:c9:e4:f2:e9:a3:
                    97:f4:51:05:ad:68:40:b1:31:a6:6e:59:9d:65:86:
                    ff:c9:d0:35:4c:bc:e9:b1:7e:8c:73:78:3e:20:26:
                    62:4b:a7:3d:3e:d5:7c:13:19:6e:93:4f:1f:c6:24:
                    cf:42:4a:05:c7:1f:c2:6a:05:9c:d9:99:16:5a:e9:
                    51:69:fd:76:89:82:ab:ee:af:dd:d7:08:09:84:60:
                    e3:21:3b:cb:09:a4:8f:57:b8:08:15:e9:9c:01:cd:
                    78:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:E9:C0:D8:F9:57:D3:64:E5:53:38:58:0E:60:41:75:34:7C:8B:4D
            X509v3 Authority Key Identifier:
                keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/KenA2PlX02TlUzhYDmBBdTR8i00.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.30.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:8a:c8:13:dc:df:e6:64:a1:b3:fd:63:d5:e0:36:dc:b3:0b:
         9e:33:41:4f:f9:09:22:f4:07:1e:0f:d8:35:80:be:12:e3:33:
         93:56:01:08:63:cb:0e:f8:7f:ac:ac:2d:c6:1f:64:72:98:71:
         aa:e4:13:c6:79:1e:76:fb:be:a2:4b:40:3f:3e:1e:b6:c3:5e:
         d2:f8:dd:7e:30:5f:cb:11:13:4d:73:b9:82:96:61:f2:2e:29:
         db:49:c5:a2:f3:c7:a2:c3:5c:f8:ea:7d:58:a3:33:a1:03:e2:
         bc:40:0f:b4:3c:e7:43:b2:38:d2:4f:7f:86:16:22:46:a4:0c:
         e4:a2:e6:b8:ab:03:08:4e:ed:d3:b1:f6:dd:12:79:f5:fd:b7:
         08:fe:0f:09:1d:94:35:7e:81:e6:c6:03:07:86:6b:e5:12:4d:
         8c:d9:04:64:85:97:64:b9:d7:50:de:1e:0a:24:f5:8b:99:4a:
         6b:16:56:bf:c2:4b:85:be:70:38:3a:6d:8f:f2:38:9c:83:5e:
         71:d2:84:82:7d:05:b7:db:58:28:b8:ed:85:27:7e:19:a3:2f:
         0e:3c:f0:4b:1b:95:b1:42:cb:0a:fd:c8:49:e6:70:a7:f8:5b:
         e6:a8:81:0b:62:f2:99:5b:ba:20:40:1b:90:a6:c0:b4:45:5d:
         79:ac:74:64
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBPjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5MUFD
QTQ0Mjc1RUMwNTcyQkM2OTIxNTAyQjI0MUMxNEQ0NEE5QUExMB4XDTIzMDQxMzA5
NTQwMloXDTI0MDMxNDAxMzAwMlowMzExMC8GA1UEAxMoMjlFOUMwRDhGOTU3RDM2
NEU1NTMzODU4MEU2MDQxNzUzNDdDOEI0RDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL88dhu+VunQXwYOrBStfa18zD5uaKaZBC9FDg0oNUDwMiGwNyMf
c6ov+EK3ZOdHn7bB0i3HWUod67h4qJ8d1FH1mzyaHBQNRnHdfDpUIqYkppYeKZ4z
Ykz31uzAJVAakNC7VqrXk47D8YR9GLaenCn+YSk381HWQ98/s7IxsYM9s+IEj8ct
1tg2AgRfRbBk6zSAvqcty+C4l1BKV6OanMnk8umjl/RRBa1oQLExpm5ZnWWG/8nQ
NUy86bF+jHN4PiAmYkunPT7VfBMZbpNPH8Ykz0JKBccfwmoFnNmZFlrpUWn9domC
q+6v3dcICYRg4yE7ywmkj1e4CBXpnAHNeOsCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQp6cDY+VfTZOVTOFgOYEF1NHyLTTAfBgNVHSMEGDAWgBSRrKRCdewFcrxpIVAr
JBwU1EqaoTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNzMxL2theWtRblhzQlhLOGFTRlFLeVFjRk5SS21xRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2theWtRblhzQlhLOGFTRlFLeVFjRk5S
S21xRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC83MzEvS2VuQTJQbFgwMlRsVXpoWURtQkJkVFI4aTAwLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAnceCDANBgkqhkiG9w0BAQsFAAOCAQEAaorIE9zf5mShs/1j1eA23LMLnjNB
T/kJIvQHHg/YNYC+EuMzk1YBCGPLDvh/rKwtxh9kcphxquQTxnkedvu+oktAPz4e
tsNe0vjdfjBfyxETTXO5gpZh8i4p20nFovPHosNc+Op9WKMzoQPivEAPtDznQ7I4
0k9/hhYiRqQM5KLmuKsDCE7t07H23RJ59f23CP4PCR2UNX6B5sYDB4Zr5RJNjNkE
ZIWXZLnXUN4eCiT1i5lKaxZWv8JLhb5wODptj/I4nINecdKEgn0Ft9tYKLjthSd+
GaMvDjzwSxuVsULLCv3ISeZwp/hb5qiBC2LymVu6IEAbkKbAtEVdeax0ZA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org