Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/RYSl2S5x9FIkH9G3x9Zg6FMhgd4.roa
File:                     RYSl2S5x9FIkH9G3x9Zg6FMhgd4.roa (raw, json)
Hash identifier:          k7h8FWdtqQie5GtA/TMmvrQsTXlm93VDcJF4rcuKtzM=
Subject key identifier:   45:84:A5:D9:2E:71:F4:52:24:1F:D1:B7:C7:D6:60:E8:53:21:81:DE
Certificate issuer:       /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Certificate serial:       23
Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/RYSl2S5x9FIkH9G3x9Zg6FMhgd4.roa
Signing time:             Wed 11 May 2022 01:42:24 +0000
ROA not before:           Wed 11 May 2022 01:42:24 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     18260
IP address blocks:        119.30.8.0/22 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
        Validity
            Not Before: May 11 01:42:24 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=4584A5D92E71F452241FD1B7C7D660E8532181DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ba:ac:14:53:8a:79:f8:e0:16:6e:cc:e5:d1:
                    3c:c8:c1:f7:80:7e:c6:2f:d0:1d:bc:56:83:59:93:
                    10:00:95:ac:51:18:70:ac:3e:cd:0b:04:1a:7e:73:
                    e8:87:25:8e:32:b7:d7:06:6c:18:be:0f:a1:77:cf:
                    dc:75:58:c3:e9:a1:0f:94:8a:53:9f:02:ab:e5:84:
                    ea:1d:ba:4a:19:21:dd:d1:e1:b6:c0:9d:b3:d2:2e:
                    18:1c:00:eb:8a:46:13:6a:fe:cc:70:f3:ab:8a:d3:
                    ae:3e:15:6c:ff:0e:b9:72:b0:87:ff:c2:09:fe:47:
                    cb:16:6d:13:66:14:98:3b:8e:44:69:54:a4:67:2c:
                    e9:47:99:63:62:38:38:14:c3:bb:ee:45:f1:e9:df:
                    28:8a:00:23:21:df:c3:db:5d:40:54:39:eb:d4:00:
                    6b:72:26:e5:21:04:74:57:76:4b:b3:62:f6:bf:35:
                    73:9d:59:da:2f:12:02:a9:84:09:3d:33:f5:e9:03:
                    04:38:57:d9:02:fe:c3:ba:79:3b:47:01:de:42:5d:
                    7b:1b:31:24:8d:63:c5:0f:6d:03:64:bd:44:8b:db:
                    e0:71:3a:b8:b6:33:ca:f5:53:c1:3c:ac:ca:7e:95:
                    2b:b7:ca:96:e6:c2:14:4b:7c:de:5a:88:de:90:03:
                    d3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:84:A5:D9:2E:71:F4:52:24:1F:D1:B7:C7:D6:60:E8:53:21:81:DE
            X509v3 Authority Key Identifier:
                keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/RYSl2S5x9FIkH9G3x9Zg6FMhgd4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.30.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:df:de:3d:7d:64:56:e5:4c:51:38:94:68:31:92:06:61:cc:
         0f:e5:3b:aa:16:ea:24:ea:28:9d:17:fc:bb:94:05:47:22:90:
         0b:9a:de:3f:af:b7:c4:50:4e:c9:08:0d:31:b5:83:3b:45:9e:
         4e:1f:89:e4:12:93:de:bd:6e:fd:39:bb:6b:17:16:ed:8b:6d:
         55:75:34:25:84:ef:f2:5f:d8:5a:3f:cb:18:22:b1:4c:ce:eb:
         85:15:49:e6:42:c5:8d:a8:30:00:f2:0d:1a:3f:40:17:0b:fc:
         70:1c:59:d7:d8:2b:d4:be:96:f2:df:7d:26:20:ef:ee:1d:6c:
         3e:7d:de:c2:fa:92:4b:1f:c4:08:f1:91:db:03:7e:7e:d1:ee:
         4f:1c:82:ac:d7:09:c2:96:10:8f:70:a2:ca:5d:2b:27:9d:9d:
         7f:d4:d3:95:62:71:c6:82:25:53:11:5c:64:bc:52:3a:0f:c2:
         29:58:59:c7:e9:81:0e:3c:08:51:a7:b4:3d:f2:6b:24:83:40:
         e2:a1:3f:13:75:13:52:de:0e:2e:48:aa:c4:43:8f:13:a0:3b:
         c5:71:f1:fa:9e:96:da:13:be:04:44:d6:3d:c1:10:30:06:95:
         ad:f4:f8:c9:8f:67:8f:cb:5a:8f:b5:bb:ed:30:ca:29:c3:6a:
         c5:29:5d:7b
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBIzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5MUFD
QTQ0Mjc1RUMwNTcyQkM2OTIxNTAyQjI0MUMxNEQ0NEE5QUExMB4XDTIyMDUxMTAx
NDIyNFoXDTIzMDQyNzA5NTIzNFowMzExMC8GA1UEAxMoNDU4NEE1RDkyRTcxRjQ1
MjI0MUZEMUI3QzdENjYwRTg1MzIxODFERTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL+6rBRTinn44BZuzOXRPMjB94B+xi/QHbxWg1mTEACVrFEYcKw+
zQsEGn5z6IcljjK31wZsGL4PoXfP3HVYw+mhD5SKU58Cq+WE6h26Shkh3dHhtsCd
s9IuGBwA64pGE2r+zHDzq4rTrj4VbP8OuXKwh//CCf5HyxZtE2YUmDuORGlUpGcs
6UeZY2I4OBTDu+5F8enfKIoAIyHfw9tdQFQ569QAa3Im5SEEdFd2S7Ni9r81c51Z
2i8SAqmECT0z9ekDBDhX2QL+w7p5O0cB3kJdexsxJI1jxQ9tA2S9RIvb4HE6uLYz
yvVTwTysyn6VK7fKlubCFEt83lqI3pAD07sCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRFhKXZLnH0UiQf0bfH1mDoUyGB3jAfBgNVHSMEGDAWgBSRrKRCdewFcrxpIVAr
JBwU1EqaoTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNzMxL2theWtRblhzQlhLOGFTRlFLeVFjRk5SS21xRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2theWtRblhzQlhLOGFTRlFLeVFjRk5S
S21xRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC83MzEvUllTbDJTNXg5RklrSDlHM3g5Wmc2Rk1oZ2Q0LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAnceCDANBgkqhkiG9w0BAQsFAAOCAQEAiN/ePX1kVuVMUTiUaDGSBmHMD+U7
qhbqJOoonRf8u5QFRyKQC5reP6+3xFBOyQgNMbWDO0WeTh+J5BKT3r1u/Tm7axcW
7YttVXU0JYTv8l/YWj/LGCKxTM7rhRVJ5kLFjagwAPINGj9AFwv8cBxZ19gr1L6W
8t99JiDv7h1sPn3ewvqSSx/ECPGR2wN+ftHuTxyCrNcJwpYQj3Ciyl0rJ52df9TT
lWJxxoIlUxFcZLxSOg/CKVhZx+mBDjwIUae0PfJrJINA4qE/E3UTUt4OLkiqxEOP
E6A7xXHx+p6W2hO+BETWPcEQMAaVrfT4yY9nj8taj7W77TDKKcNqxSldew==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:56 2024 by rpki-client on console-fra.rpki-client.org