Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/sbviqF21Nyet44_nLpGa-cpO_BY.roa
File:                     sbviqF21Nyet44_nLpGa-cpO_BY.roa (raw, json)
Hash identifier:          WcLPUl0kQulQ1q3HbC9QdyF6Zr9Ki+O8ymEkhlImDcA=
Subject key identifier:   B1:BB:E2:A8:5D:B5:37:27:AD:E3:8F:E7:2E:91:9A:F9:CA:4E:FC:16
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0225
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/sbviqF21Nyet44_nLpGa-cpO_BY.roa
Signing time:             Mon 01 May 2023 01:37:56 +0000
ROA not before:           Mon 01 May 2023 01:37:56 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        210.157.128.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 549 (0x225)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:37:56 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=B1BBE2A85DB53727ADE38FE72E919AF9CA4EFC16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:08:ca:26:97:f6:dd:0f:39:11:27:43:87:54:
                    ef:92:dc:30:0d:ff:2b:d9:06:fc:00:96:c8:07:aa:
                    18:3e:60:56:51:f0:b3:89:95:20:26:bd:c4:bd:d8:
                    a1:d2:d3:43:b3:e4:ff:78:98:79:c7:41:1e:13:f8:
                    e1:45:33:bb:dd:0d:93:56:1a:aa:ff:99:2e:05:f4:
                    e1:b0:6d:f5:8f:3d:39:a9:8b:0a:2b:41:7b:a7:74:
                    15:77:e3:0f:f5:c6:89:e5:7f:89:26:db:94:82:ed:
                    cf:21:c3:20:e9:ca:8e:64:89:dd:00:5a:34:be:20:
                    1a:49:04:6f:1b:ab:4f:de:7c:d6:9a:5d:c9:1a:80:
                    e1:a0:4e:83:71:d9:5f:93:42:fa:13:ff:36:8e:c4:
                    72:10:d4:af:f5:b2:53:98:e5:27:b2:30:3c:c4:d2:
                    58:ab:66:ea:54:e5:8d:82:a2:8f:84:59:1f:94:45:
                    e5:7b:c1:49:6c:41:77:6b:b4:3a:e0:09:fd:64:74:
                    84:87:54:57:e8:f0:48:9b:8e:67:63:30:d0:58:c3:
                    34:c5:86:7b:19:05:0b:15:4b:b0:26:95:04:85:e6:
                    27:f9:b1:da:e2:ff:2c:ff:0f:a5:2c:9a:34:14:18:
                    c9:e8:25:bb:81:07:97:7e:16:e8:75:47:a9:63:a6:
                    f3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:BB:E2:A8:5D:B5:37:27:AD:E3:8F:E7:2E:91:9A:F9:CA:4E:FC:16
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/sbviqF21Nyet44_nLpGa-cpO_BY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.157.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         67:e1:e2:c9:d0:1b:a3:17:da:3e:1e:5b:4c:60:0c:8e:da:80:
         4c:80:90:d5:64:46:7a:8c:bd:7b:f8:51:5e:97:0e:93:90:9e:
         79:83:6a:84:3a:45:47:74:81:a1:ec:cb:ad:62:7d:97:24:a4:
         31:4f:f1:aa:33:72:bd:a7:f5:77:38:20:f1:88:98:ec:1b:e1:
         fa:0d:fc:94:80:91:ce:ca:4b:63:a6:2f:a7:f0:6a:47:aa:a2:
         e8:8c:ab:40:be:98:82:da:3d:7a:63:b7:24:fb:7f:f9:55:17:
         58:1f:bd:5b:93:b2:af:2b:0f:57:88:22:a1:9a:8b:d2:c7:03:
         94:90:b5:27:b8:7d:82:8f:8a:dd:75:7e:88:d8:96:0e:b3:85:
         ac:32:36:fd:86:22:9b:71:4e:1d:84:39:66:3b:dd:d9:24:ec:
         c7:35:11:21:ad:5d:be:ca:71:b1:f5:14:5c:16:3e:48:1c:20:
         cf:9b:c2:8f:8c:55:e1:1f:b1:0a:c4:89:a4:1b:41:5a:9d:c3:
         c5:4c:94:64:5f:7d:35:9b:3e:33:19:81:9d:1d:8d:59:96:9b:
         c1:83:7e:f8:7c:f8:39:03:88:c2:0f:ac:bc:fb:f2:54:af:64:
         3f:30:57:ef:10:d7:c2:fc:85:37:b7:97:c1:76:69:5c:07:43:
         6f:3b:4e:d8
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAiUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yMzA1MDEw
MTM3NTZaFw0yNDA0MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEIxQkJFMkE4NURCNTM3
MjdBREUzOEZFNzJFOTE5QUY5Q0E0RUZDMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCnCMoml/bdDzkRJ0OHVO+S3DAN/yvZBvwAlsgHqhg+YFZR8LOJ
lSAmvcS92KHS00Oz5P94mHnHQR4T+OFFM7vdDZNWGqr/mS4F9OGwbfWPPTmpiwor
QXundBV34w/1xonlf4km25SC7c8hwyDpyo5kid0AWjS+IBpJBG8bq0/efNaaXcka
gOGgToNx2V+TQvoT/zaOxHIQ1K/1slOY5SeyMDzE0lirZupU5Y2Coo+EWR+UReV7
wUlsQXdrtDrgCf1kdISHVFfo8EibjmdjMNBYwzTFhnsZBQsVS7AmlQSF5if5sdri
/yz/D6UsmjQUGMnoJbuBB5d+Fuh1R6ljpvMNAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUsbviqF21Nyet44/nLpGa+cpO/BYwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL3NidmlxRjIxTnlldDQ0X25McEdhLWNwT19CWS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAXSnYAwDQYJKoZIhvcNAQELBQADggEBAGfh4snQG6MX2j4eW0xgDI7agEyA
kNVkRnqMvXv4UV6XDpOQnnmDaoQ6RUd0gaHsy61ifZckpDFP8aozcr2n9Xc4IPGI
mOwb4foN/JSAkc7KS2OmL6fwakeqouiMq0C+mILaPXpjtyT7f/lVF1gfvVuTsq8r
D1eIIqGai9LHA5SQtSe4fYKPit11fojYlg6zhawyNv2GIptxTh2EOWY73dkk7Mc1
ESGtXb7KcbH1FFwWPkgcIM+bwo+MVeEfsQrEiaQbQVqdw8VMlGRffTWbPjMZgZ0d
jVmWm8GDfvh8+DkDiMIPrLz78lSvZD8wV+8Q18L8hTe3l8F2aVwHQ287Ttg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org