Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/-ey7gcGdt56PsII94S2LFI8tUoU.roa
File:                     -ey7gcGdt56PsII94S2LFI8tUoU.roa (raw, json)
Hash identifier:          r/aXA4mI1SY2JcKd+pCwsihi01/I/jNc7yzt21QDEcY=
Subject key identifier:   F9:EC:BB:81:C1:9D:B7:9E:8F:B0:82:3D:E1:2D:8B:14:8F:2D:52:85
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       3A
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/-ey7gcGdt56PsII94S2LFI8tUoU.roa
Signing time:             Thu 28 Apr 2022 09:22:41 +0000
ROA not before:           Thu 28 Apr 2022 09:22:41 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     2516
IP address blocks:        125.50.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Apr 28 09:22:41 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=F9ECBB81C19DB79E8FB0823DE12D8B148F2D5285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:95:7d:f8:61:10:c9:8b:6a:b3:a3:9d:b5:48:
                    18:3a:b0:cd:fa:ba:d7:8d:b8:8b:1f:1e:ed:94:f5:
                    db:c6:68:25:68:ab:b7:a8:ed:81:3e:98:38:35:93:
                    f5:74:72:66:cc:12:5f:a0:32:59:70:2c:d6:03:56:
                    45:68:e2:97:40:b8:55:15:a7:1c:02:ab:00:ef:24:
                    4f:08:14:27:63:70:31:d5:62:65:5a:df:56:60:d0:
                    d4:ed:c9:e7:54:3d:0f:5d:4e:e3:d7:44:d1:eb:f1:
                    84:99:06:ab:58:10:eb:18:42:a6:cd:69:ff:d3:cb:
                    af:ae:a4:11:0c:33:0f:5f:f4:b9:ec:5e:5c:9b:f7:
                    2e:4b:f5:a8:d0:fa:e4:0e:fe:c0:20:65:3f:85:e4:
                    23:38:17:a4:65:8f:37:3b:f3:3f:5b:de:19:7e:2c:
                    55:a8:a6:0e:c4:fc:17:0b:2c:21:e2:ae:0c:1c:9f:
                    4a:78:db:5c:f7:bb:a1:81:fa:5a:7c:20:79:35:d8:
                    98:27:a7:48:9a:57:17:8f:1f:5c:49:7a:22:c0:ed:
                    57:62:3b:d2:91:b1:f5:b0:30:b6:7c:87:d6:8e:ca:
                    c4:72:83:3d:8b:07:4d:70:e9:88:a8:da:c6:0a:82:
                    48:ff:83:10:46:d2:f1:30:8e:e4:3d:c1:cf:d0:df:
                    7d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:EC:BB:81:C1:9D:B7:9E:8F:B0:82:3D:E1:2D:8B:14:8F:2D:52:85
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/-ey7gcGdt56PsII94S2LFI8tUoU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.50.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         70:26:c7:3f:a3:3f:1d:3c:4f:6f:cd:b5:9e:11:ff:9a:0c:e5:
         d3:67:52:bb:37:b5:7f:50:03:9d:3d:44:77:e5:96:54:42:a2:
         d6:d5:47:8f:92:54:e0:9e:09:db:94:ed:4a:e5:11:5c:3d:6c:
         23:5f:30:d9:45:29:d1:2e:4e:2f:7c:97:65:6d:08:2d:99:63:
         88:10:8f:f4:1d:50:5a:af:24:46:7b:0a:eb:34:9d:30:21:4d:
         88:09:fc:86:a7:de:59:c8:c0:e3:cb:40:7d:a9:94:b8:4d:ee:
         26:2e:bc:79:16:8c:0d:53:59:cd:9f:8b:74:95:bc:e6:7a:6c:
         29:73:1b:5c:ea:12:7b:a8:7d:b2:02:8a:f0:cd:23:2c:54:36:
         a4:97:58:c6:52:2c:f8:8e:69:06:b6:15:bd:e5:4b:02:ac:95:
         c2:1c:5e:fb:5d:bd:03:dc:5e:af:b6:1d:34:5f:77:2e:1a:5c:
         78:31:93:a2:03:38:32:d5:a5:da:b4:c9:43:d1:39:01:11:ff:
         f7:10:18:3b:c8:2c:07:f5:a7:b8:98:4c:a5:63:7c:52:19:ab:
         04:1e:19:ba:b6:06:06:df:26:b1:b6:33:07:15:37:13:d7:31:
         8e:76:e2:c4:0a:2f:ca:35:c3:60:14:ee:04:5a:91:06:fa:5f:
         59:bd:5a:f3
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIBOjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNUJG
QTNFNTNFNTkxNDkyMzlBMTY4REZEOTJDNzU3NDVBQjY2Q0I2MB4XDTIyMDQyODA5
MjI0MVoXDTIzMDQyNzA5NTIzNFowMzExMC8GA1UEAxMoRjlFQ0JCODFDMTlEQjc5
RThGQjA4MjNERTEyRDhCMTQ4RjJENTI4NTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANGVffhhEMmLarOjnbVIGDqwzfq61424ix8e7ZT128ZoJWirt6jt
gT6YODWT9XRyZswSX6AyWXAs1gNWRWjil0C4VRWnHAKrAO8kTwgUJ2NwMdViZVrf
VmDQ1O3J51Q9D11O49dE0evxhJkGq1gQ6xhCps1p/9PLr66kEQwzD1/0uexeXJv3
Lkv1qND65A7+wCBlP4XkIzgXpGWPNzvzP1veGX4sVaimDsT8FwssIeKuDByfSnjb
XPe7oYH6WnwgeTXYmCenSJpXF48fXEl6IsDtV2I70pGx9bAwtnyH1o7KxHKDPYsH
TXDpiKjaxgqCSP+DEEbS8TCO5D3Bz9DffS8CAwEAAaOCAiMwggIfMB0GA1UdDgQW
BBT57LuBwZ23no+wgj3hLYsUjy1ShTAfBgNVHSMEGDAWgBQVv6PlPlkUkjmhaN/Z
LHV0WrZstjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTYxL0ZiLWo1VDVaRkpJNW9XamYyU3gxZEZxMmJMWS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZiLWo1VDVaRkpJNW9XamYyU3gxZEZx
MmJMWS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8xNjEvLWV5N2djR2R0NTZQc0lJOTRTMkxGSTh0VW9VLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw
BQMDAH0yMA0GCSqGSIb3DQEBCwUAA4IBAQBwJsc/oz8dPE9vzbWeEf+aDOXTZ1K7
N7V/UAOdPUR35ZZUQqLW1UePklTgngnblO1K5RFcPWwjXzDZRSnRLk4vfJdlbQgt
mWOIEI/0HVBaryRGewrrNJ0wIU2ICfyGp95ZyMDjy0B9qZS4Te4mLrx5FowNU1nN
n4t0lbzmemwpcxtc6hJ7qH2yAorwzSMsVDakl1jGUiz4jmkGthW95UsCrJXCHF77
Xb0D3F6vth00X3cuGlx4MZOiAzgy1aXatMlD0TkBEf/3EBg7yCwH9ae4mEylY3xS
GasEHhm6tgYG3yaxtjMHFTcT1zGOduLECi/KNcNgFO4EWpEG+l9ZvVrz
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org