Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/840/Ywwx42FdB9VbnBheFKp1KkoKmSs.roa
File:                     Ywwx42FdB9VbnBheFKp1KkoKmSs.roa (raw, json)
Hash identifier:          kFLJXjoKvk0y6KGshUAS2prtDCPF+9TDk2mBlYoT/IQ=
Subject key identifier:   63:0C:31:E3:61:5D:07:D5:5B:9C:18:5E:14:AA:75:2A:4A:0A:99:2B
Certificate issuer:       /CN=D79B3890C2DA3795148976B954C2024056797554
Certificate serial:       19
Authority key identifier: D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/Ywwx42FdB9VbnBheFKp1KkoKmSs.roa
Signing time:             Thu 13 Apr 2023 09:51:24 +0000
ROA not before:           Thu 13 Apr 2023 09:51:24 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     131934
IP address blocks:        180.94.40.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79B3890C2DA3795148976B954C2024056797554
        Validity
            Not Before: Apr 13 09:51:24 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=630C31E3615D07D55B9C185E14AA752A4A0A992B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3f:27:b0:8c:cf:8a:0c:cf:d8:4c:60:1b:3a:
                    6f:d0:b1:87:b1:98:26:99:13:04:b1:c0:a5:f5:4b:
                    0f:cf:4d:4c:c6:68:bd:39:cd:55:7f:87:5d:eb:36:
                    6a:c2:e0:bb:da:46:91:71:76:f3:d8:2d:2c:97:2b:
                    e5:73:83:63:b3:e0:ec:66:c1:f7:d9:e9:3d:25:aa:
                    fb:66:f0:e5:20:dd:0e:09:41:72:c5:10:6c:40:59:
                    37:dd:e2:a3:c7:05:46:f2:95:e4:33:09:67:9d:91:
                    37:e4:02:2b:c5:1b:7c:6e:75:a8:ff:86:ff:95:de:
                    d5:1f:92:b3:0a:66:6a:5c:47:85:37:8c:8c:8b:d3:
                    bd:c1:23:62:2b:aa:3e:bb:da:f2:70:bf:52:bc:52:
                    6a:69:75:b7:ed:e5:4b:19:c0:a6:96:f5:ef:fc:e6:
                    53:cb:96:9c:91:a8:7f:48:c3:15:f7:71:04:11:38:
                    f5:f5:48:02:75:06:1d:d1:34:21:b2:65:ad:42:a5:
                    e9:8b:36:23:d7:f9:57:9e:69:fd:d1:22:ff:48:1b:
                    52:60:0c:eb:1f:3a:84:c0:86:39:60:cb:ed:40:b8:
                    14:c9:44:5b:09:a1:de:d4:b9:02:48:7b:da:e2:a1:
                    16:62:ea:3f:23:b7:d6:32:eb:5d:90:e8:98:79:ee:
                    ce:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:0C:31:E3:61:5D:07:D5:5B:9C:18:5E:14:AA:75:2A:4A:0A:99:2B
            X509v3 Authority Key Identifier:
                keyid:D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/Ywwx42FdB9VbnBheFKp1KkoKmSs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.94.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4c:09:0c:1e:69:58:db:fd:e8:f6:01:23:e7:a0:02:a7:5c:c3:
         ff:15:df:19:7d:cc:2c:2a:ee:d6:aa:86:54:9e:bc:e8:ca:0d:
         df:e3:4c:c1:5c:12:bd:7c:aa:26:30:4b:a1:68:06:37:8e:53:
         68:09:db:40:ad:1f:65:1d:44:79:cf:9f:ff:3b:8d:8e:c4:8c:
         6f:d3:fc:30:65:72:23:68:a5:6b:22:72:2f:55:fb:7c:30:cc:
         2f:49:ed:09:58:b8:f3:85:aa:b3:35:12:b4:ac:9e:17:4a:4a:
         0e:01:49:07:f6:32:4b:a5:37:b8:ff:43:f1:29:c1:40:77:aa:
         49:01:d7:e2:bc:6b:b6:7c:0f:28:c5:cd:28:67:a6:4e:de:59:
         84:bf:57:83:48:56:d2:38:2b:0b:d3:7e:e3:e2:f7:cb:ac:02:
         34:a7:bb:06:b5:08:20:a3:c2:75:d1:0e:d7:02:ab:bc:23:41:
         0e:63:84:6b:f5:ba:4a:c7:d4:f0:c1:0e:48:42:0f:90:bf:38:
         db:15:b0:d7:22:49:51:18:4d:1d:16:db:15:b2:86:d9:02:3e:
         9e:ba:02:73:e9:a7:61:a8:2a:da:60:29:7c:ce:3f:1d:7f:9c:
         cd:32:71:4d:00:81:07:27:42:1c:e8:5b:a9:91:8a:2e:02:ff:
         3d:b2:d7:e9
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBGTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENzlC
Mzg5MEMyREEzNzk1MTQ4OTc2Qjk1NEMyMDI0MDU2Nzk3NTU0MB4XDTIzMDQxMzA5
NTEyNFoXDTI0MDMxNDAxMzAwMlowMzExMC8GA1UEAxMoNjMwQzMxRTM2MTVEMDdE
NTVCOUMxODVFMTRBQTc1MkE0QTBBOTkyQjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANY/J7CMz4oMz9hMYBs6b9Cxh7GYJpkTBLHApfVLD89NTMZovTnN
VX+HXes2asLgu9pGkXF289gtLJcr5XODY7Pg7GbB99npPSWq+2bw5SDdDglBcsUQ
bEBZN93io8cFRvKV5DMJZ52RN+QCK8UbfG51qP+G/5Xe1R+SswpmalxHhTeMjIvT
vcEjYiuqPrva8nC/UrxSaml1t+3lSxnAppb17/zmU8uWnJGof0jDFfdxBBE49fVI
AnUGHdE0IbJlrUKl6Ys2I9f5V55p/dEi/0gbUmAM6x86hMCGOWDL7UC4FMlEWwmh
3tS5Akh72uKhFmLqPyO31jLrXZDomHnuziMCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRjDDHjYV0H1VucGF4UqnUqSgqZKzAfBgNVHSMEGDAWgBTXmziQwto3lRSJdrlU
wgJAVnl1VDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODQwLzE1czRrTUxhTjVVVWlYYTVWTUlDUUZaNWRWUS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzE1czRrTUxhTjVVVWlYYTVWTUlDUUZa
NWRWUS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84NDAvWXd3eDQyRmRCOVZibkJoZUZLcDFLa29LbVNzLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA7ReKDANBgkqhkiG9w0BAQsFAAOCAQEATAkMHmlY2/3o9gEj56ACp1zD/xXf
GX3MLCru1qqGVJ686MoN3+NMwVwSvXyqJjBLoWgGN45TaAnbQK0fZR1Eec+f/zuN
jsSMb9P8MGVyI2ilayJyL1X7fDDML0ntCVi484WqszUStKyeF0pKDgFJB/YyS6U3
uP9D8SnBQHeqSQHX4rxrtnwPKMXNKGemTt5ZhL9Xg0hW0jgrC9N+4+L3y6wCNKe7
BrUIIKPCddEO1wKrvCNBDmOEa/W6SsfU8MEOSEIPkL842xWw1yJJURhNHRbbFbKG
2QI+nroCc+mnYagq2mApfM4/HX+czTJxTQCBBydCHOhbqZGKLgL/PbLX6Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org