Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/HdydxdJCe5bHfKbwF2C5LOtx5Lk.roa
File:                     HdydxdJCe5bHfKbwF2C5LOtx5Lk.roa (raw, json)
Hash identifier:          GCP7T6c/YcOFKNWY8eYJSP+KEjGJPgQiu2e6kq7jk3E=
Subject key identifier:   1D:DC:9D:C5:D2:42:7B:96:C7:7C:A6:F0:17:60:B9:2C:EB:71:E4:B9
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0172
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/HdydxdJCe5bHfKbwF2C5LOtx5Lk.roa
Signing time:             Mon 01 May 2023 01:28:45 +0000
ROA not before:           Mon 01 May 2023 01:28:45 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        113.150.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 370 (0x172)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:28:45 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=1DDC9DC5D2427B96C77CA6F01760B92CEB71E4B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0c:1e:b7:57:f4:d2:65:33:c9:d7:db:31:42:
                    bd:f9:44:bd:c7:ff:ee:05:8b:13:22:75:a0:8d:28:
                    c4:4b:bf:c2:28:88:05:90:16:b3:a2:e8:5a:8b:23:
                    cb:d7:3d:fd:45:13:65:b0:ed:db:9a:cf:ce:0c:5f:
                    2d:26:2d:14:a0:5b:7a:e5:c1:10:51:44:58:50:ae:
                    28:16:4f:6b:8d:1b:6c:11:b5:af:ba:bb:ad:30:ba:
                    2b:2e:35:bd:d9:90:ed:b6:7c:aa:64:01:fd:4b:24:
                    65:b8:eb:bd:95:1c:b8:6f:85:09:33:32:6b:67:5c:
                    06:62:f9:0b:c0:26:ff:6d:21:32:74:51:59:eb:70:
                    cb:84:d5:45:ff:5b:cf:53:4e:ef:d4:97:78:c7:06:
                    af:f6:83:26:d8:47:d0:28:dd:2f:42:42:a7:53:b0:
                    3d:0d:b9:19:56:40:f2:b9:1f:52:8c:57:fb:a7:f9:
                    b8:57:39:dd:1d:32:99:6f:a4:76:f7:a6:73:b2:6e:
                    b9:f1:72:7f:50:35:10:cc:3f:28:a4:7b:93:b7:a9:
                    b4:ad:20:dd:d7:de:b0:36:f2:0e:93:74:23:e0:09:
                    d9:35:ae:7b:7d:cf:c4:27:7e:dd:b5:36:26:fd:08:
                    e0:51:8e:bd:5a:de:4e:8e:c8:0f:6f:81:f6:4c:67:
                    d1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:DC:9D:C5:D2:42:7B:96:C7:7C:A6:F0:17:60:B9:2C:EB:71:E4:B9
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/HdydxdJCe5bHfKbwF2C5LOtx5Lk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.150.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         77:77:d0:f8:2f:40:7c:8a:88:c2:12:fd:5a:76:08:d5:44:7d:
         28:94:e6:cd:85:37:e0:9e:da:9a:5c:5a:69:cf:28:5a:81:3f:
         ce:05:d1:26:8b:46:f6:5e:54:6e:92:af:17:4c:80:cf:30:f7:
         52:34:ee:45:e4:dd:c6:29:c3:20:18:3c:91:22:bb:05:92:42:
         97:25:6e:d6:10:a6:62:1c:3b:4f:ab:f7:22:cd:18:74:f6:7e:
         e3:15:4d:9f:27:cd:5f:5b:51:0b:70:d0:a9:f7:83:3a:ed:cf:
         57:ef:b9:c7:ff:ea:07:81:c2:91:e8:79:03:42:56:c9:42:bc:
         a1:cd:01:62:1f:44:56:37:2d:ba:d2:11:bc:e4:50:7b:8c:b0:
         5d:83:96:3e:2f:ef:1f:9b:e0:79:96:18:1b:ea:fc:95:29:69:
         57:10:c4:8d:47:2a:4a:9f:a6:c5:ec:a1:18:64:b6:4a:53:8f:
         6f:f9:59:6d:c8:82:25:98:33:a2:02:9f:b6:23:f9:80:e6:cc:
         40:ac:7d:83:5c:ef:0d:87:9b:ae:68:bf:bb:30:ea:db:55:51:
         4b:3f:00:b2:12:fd:b6:d2:af:b6:de:a5:51:c1:e5:dd:7c:31:
         ad:08:50:d8:33:4e:95:eb:2d:1c:5a:34:53:58:ae:be:a4:7f:
         da:af:b1:c8
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yMzA1MDEw
MTI4NDVaFw0yNDA0MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDFEREM5REM1RDI0MjdC
OTZDNzdDQTZGMDE3NjBCOTJDRUI3MUU0QjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCgDB63V/TSZTPJ19sxQr35RL3H/+4FixMidaCNKMRLv8IoiAWQ
FrOi6FqLI8vXPf1FE2Ww7duaz84MXy0mLRSgW3rlwRBRRFhQrigWT2uNG2wRta+6
u60wuisuNb3ZkO22fKpkAf1LJGW4672VHLhvhQkzMmtnXAZi+QvAJv9tITJ0UVnr
cMuE1UX/W89TTu/Ul3jHBq/2gybYR9Ao3S9CQqdTsD0NuRlWQPK5H1KMV/un+bhX
Od0dMplvpHb3pnOybrnxcn9QNRDMPyike5O3qbStIN3X3rA28g6TdCPgCdk1rnt9
z8Qnft21Nib9COBRjr1a3k6OyA9vgfZMZ9FZAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUHdydxdJCe5bHfKbwF2C5LOtx5LkwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL0hkeWR4ZEpDZTViSGZLYndGMkM1TE90eDVMay5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwBxljANBgkqhkiG9w0BAQsFAAOCAQEAd3fQ+C9AfIqIwhL9WnYI1UR9KJTm
zYU34J7amlxaac8oWoE/zgXRJotG9l5UbpKvF0yAzzD3UjTuReTdxinDIBg8kSK7
BZJClyVu1hCmYhw7T6v3Is0YdPZ+4xVNnyfNX1tRC3DQqfeDOu3PV++5x//qB4HC
keh5A0JWyUK8oc0BYh9EVjctutIRvORQe4ywXYOWPi/vH5vgeZYYG+r8lSlpVxDE
jUcqSp+mxeyhGGS2SlOPb/lZbciCJZgzogKftiP5gObMQKx9g1zvDYebrmi/uzDq
21VRSz8AshL9ttKvtt6lUcHl3XwxrQhQ2DNOlestHFo0U1iuvqR/2q+xyA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org