Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/958/wntrUTg6GNnbI2zLt76r-_tzTu0.roa
File:                     wntrUTg6GNnbI2zLt76r-_tzTu0.roa (raw, json)
Hash identifier:          V9LwZEAN6wvbOqHgIkDuMQ2TPKud904nBktwkkDtXlE=
Subject key identifier:   C2:7B:6B:51:38:3A:18:D9:DB:23:6C:CB:B7:BE:AB:FB:FB:73:4E:ED
Certificate issuer:       /CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
Certificate serial:       74
Authority key identifier: 99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/wntrUTg6GNnbI2zLt76r-_tzTu0.roa
Signing time:             Thu 13 Apr 2023 09:53:49 +0000
ROA not before:           Thu 13 Apr 2023 09:53:49 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     38631
IP address blocks:        119.235.232.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
        Validity
            Not Before: Apr 13 09:53:49 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=C27B6B51383A18D9DB236CCBB7BEABFBFB734EED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e3:6e:40:de:60:4a:9a:fd:1a:81:f1:4f:60:
                    74:00:fb:6f:6b:14:0a:8c:82:ba:4e:a7:30:63:a4:
                    77:bf:13:2e:05:42:ce:79:f1:4f:4e:34:12:d5:22:
                    5b:41:0d:9f:3f:15:69:8e:ef:b1:75:de:32:be:82:
                    2d:59:b2:a6:1f:7e:93:82:3a:66:28:73:b7:07:01:
                    ca:43:06:45:da:cc:99:79:d0:84:04:ae:b3:b1:b8:
                    e9:e9:3d:ba:b2:41:d0:b3:49:1a:64:49:19:05:db:
                    fc:14:26:4b:60:cf:9c:23:c1:5e:67:a4:16:ba:e5:
                    eb:d8:7b:5b:d3:a2:42:fc:ee:ec:b8:d9:06:1f:bd:
                    e9:b3:e1:86:14:36:2a:7b:80:80:59:8e:9f:b1:ab:
                    34:20:1d:8f:b4:ad:41:e6:c8:6b:ec:a7:9e:38:d1:
                    9c:83:d3:cc:f6:a9:49:a4:57:68:a0:60:5d:0f:c3:
                    b5:d7:6f:5c:cb:13:e5:4c:a4:25:57:44:9d:54:da:
                    80:3d:1e:c8:56:e0:ac:cd:ae:02:82:ce:6b:99:5c:
                    b3:da:a3:96:dc:5b:5a:7e:05:cf:63:73:39:08:bc:
                    04:04:61:35:e9:9f:5f:66:92:eb:7f:2b:2f:2c:b4:
                    a5:5f:ae:81:fb:8b:db:de:c8:8b:cd:74:3b:ed:16:
                    06:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:7B:6B:51:38:3A:18:D9:DB:23:6C:CB:B7:BE:AB:FB:FB:73:4E:ED
            X509v3 Authority Key Identifier:
                keyid:99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/mQTsvNhfIqLorn4fmR6DRdBqmBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/wntrUTg6GNnbI2zLt76r-_tzTu0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.235.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:16:d4:b9:8f:e7:10:5a:f8:64:7b:36:72:52:9a:da:68:b7:
         d0:b8:ae:fb:77:60:1e:8c:ca:a3:04:c4:52:fb:c6:4d:5b:17:
         ff:f1:b4:ed:46:ee:14:78:37:75:83:1c:e9:cd:f5:6f:0f:7a:
         87:ed:b4:60:1e:ef:9c:7a:c0:46:8c:97:0b:d6:a0:bc:84:50:
         10:d5:b0:26:d6:2f:9d:58:94:7b:70:97:b2:55:4c:87:81:ef:
         dc:86:de:52:c7:78:c0:a6:42:65:aa:4c:3a:45:f3:ef:77:a8:
         86:c8:56:ce:28:cb:85:5b:ec:65:b4:1c:15:46:a1:f2:22:83:
         16:34:21:0c:e0:11:55:8e:7a:4c:1d:aa:8b:5d:ce:b0:a1:6d:
         78:18:84:86:cf:fa:c2:8c:cb:93:7f:95:d4:64:36:2a:98:33:
         b7:fe:9d:dd:4a:94:28:e2:fc:9c:e9:ad:7f:68:8e:0a:b4:ba:
         a1:1c:10:2a:c2:f2:58:4d:43:bd:55:31:39:7e:17:a9:d5:ee:
         30:29:b6:53:97:c4:30:2a:ca:7c:11:eb:a6:33:f2:1c:99:74:
         a1:e2:a8:db:26:d5:2c:93:72:c6:01:3b:a2:d2:ba:1d:12:03:
         6e:e0:77:ce:41:1c:f6:bd:19:b9:b5:ec:0c:3e:fa:27:fb:e1:
         3c:5c:60:8f
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBdDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5OTA0
RUNCQ0Q4NUYyMkEyRThBRTdFMUY5OTFFODM0NUQwNkE5ODE2MB4XDTIzMDQxMzA5
NTM0OVoXDTI0MDMxNDAxMzAwMlowMzExMC8GA1UEAxMoQzI3QjZCNTEzODNBMThE
OURCMjM2Q0NCQjdCRUFCRkJGQjczNEVFRDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALjjbkDeYEqa/RqB8U9gdAD7b2sUCoyCuk6nMGOkd78TLgVCznnx
T040EtUiW0ENnz8VaY7vsXXeMr6CLVmyph9+k4I6ZihztwcBykMGRdrMmXnQhASu
s7G46ek9urJB0LNJGmRJGQXb/BQmS2DPnCPBXmekFrrl69h7W9OiQvzu7LjZBh+9
6bPhhhQ2KnuAgFmOn7GrNCAdj7StQebIa+ynnjjRnIPTzPapSaRXaKBgXQ/Dtddv
XMsT5UykJVdEnVTagD0eyFbgrM2uAoLOa5lcs9qjltxbWn4Fz2NzOQi8BARhNemf
X2aS638rLyy0pV+ugfuL297Ii810O+0WBncCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTCe2tRODoY2dsjbMu3vqv7+3NO7TAfBgNVHSMEGDAWgBSZBOy82F8iouiufh+Z
HoNF0GqYFjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTU4L21RVHN2TmhmSXFMb3JuNGZtUjZEUmRCcW1CWS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL21RVHN2TmhmSXFMb3JuNGZtUjZEUmRC
cW1CWS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85NTgvd250clVUZzZHTm5iSTJ6THQ3NnItX3R6VHUwLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAHfr6DANBgkqhkiG9w0BAQsFAAOCAQEAYxbUuY/nEFr4ZHs2clKa2mi30Liu
+3dgHozKowTEUvvGTVsX//G07UbuFHg3dYMc6c31bw96h+20YB7vnHrARoyXC9ag
vIRQENWwJtYvnViUe3CXslVMh4Hv3IbeUsd4wKZCZapMOkXz73eohshWzijLhVvs
ZbQcFUah8iKDFjQhDOARVY56TB2qi13OsKFteBiEhs/6wozLk3+V1GQ2Kpgzt/6d
3UqUKOL8nOmtf2iOCrS6oRwQKsLyWE1DvVUxOX4XqdXuMCm2U5fEMCrKfBHrpjPy
HJl0oeKo2ybVLJNyxgE7otK6HRIDbuB3zkEc9r0ZubXsDD76J/vhPFxgjw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:15 2024 by rpki-client on console-ams.rpki-client.org