Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/01KczWQH27lOFF0qHuDChscSTAM.roa
File:                     01KczWQH27lOFF0qHuDChscSTAM.roa (raw, json)
Hash identifier:          bLbn4NE6J99BFtvJn50fChVv3PRQkMya1DolCe/+uOc=
Subject key identifier:   D3:52:9C:CD:64:07:DB:B9:4E:14:5D:2A:1E:E0:C2:86:C7:12:4C:03
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       01FD
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/01KczWQH27lOFF0qHuDChscSTAM.roa
Signing time:             Mon 01 May 2023 01:35:42 +0000
ROA not before:           Mon 01 May 2023 01:35:42 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        113.152.0.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 509 (0x1fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:35:42 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=D3529CCD6407DBB94E145D2A1EE0C286C7124C03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8d:e4:7e:26:59:3a:dd:91:ef:59:ac:47:c8:
                    a4:1a:3b:12:e4:b8:30:de:08:c8:5f:d0:46:90:cd:
                    68:e6:97:0d:d6:20:f2:8c:48:27:23:45:be:f8:b4:
                    26:aa:d6:85:e0:87:f0:06:fc:cc:d3:83:27:6f:2b:
                    f0:c4:93:5d:29:9e:d7:32:5e:a9:d2:bd:b4:c6:1e:
                    f5:e6:d7:68:38:a5:79:f6:db:ab:71:83:c4:cd:43:
                    42:16:ed:56:98:2e:94:d8:ad:f3:ff:33:03:08:17:
                    c0:7a:7d:43:3e:09:7f:d9:97:c1:8c:92:5b:ee:95:
                    ba:d1:97:c4:3a:89:0b:0c:ec:25:ea:a7:aa:88:09:
                    e4:51:18:1d:fd:63:3b:a9:be:83:f1:3b:c5:2c:a7:
                    75:eb:aa:82:79:e8:99:1d:2a:78:ef:2f:75:95:e1:
                    39:ed:a6:80:c7:aa:ad:1c:df:65:de:4a:58:88:ba:
                    ff:1c:33:f6:26:97:31:5b:e3:a4:3a:26:67:41:f6:
                    bf:4b:c9:0f:2b:61:45:25:6a:37:f1:f5:e1:89:6b:
                    7a:2a:0e:b4:1b:2d:15:7b:83:69:10:b1:25:4f:51:
                    65:a3:6b:fd:66:c3:9c:40:04:5c:9e:bc:9f:0e:1b:
                    04:0e:5e:03:56:13:e4:f4:4a:a3:9d:c1:d9:c2:e2:
                    3c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:52:9C:CD:64:07:DB:B9:4E:14:5D:2A:1E:E0:C2:86:C7:12:4C:03
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/01KczWQH27lOFF0qHuDChscSTAM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.152.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7b:4d:23:cc:29:81:6a:5a:2c:38:da:e0:13:a1:be:a3:ae:0e:
         7d:60:54:2e:79:40:84:a5:4c:d2:c5:18:f1:b5:a2:05:f0:f4:
         af:ad:19:7f:bf:9f:7c:78:ef:ae:61:77:b6:2b:dc:a7:e0:c2:
         59:27:5c:c8:41:6f:ac:a5:fa:85:e5:dd:e1:bf:ce:7b:80:40:
         e3:61:c7:7e:b4:59:94:8b:61:39:44:4c:9e:99:cf:a5:61:91:
         48:32:fe:06:a1:2f:d4:e8:b0:42:8d:4f:d1:5b:76:d7:8c:0e:
         1d:3f:a3:bf:3e:9f:a9:cb:d7:19:a6:15:a5:2c:f8:27:b9:9f:
         f5:17:9f:56:64:c5:7f:b1:cc:99:db:a4:10:04:be:10:a9:ef:
         fb:89:9c:de:83:fd:2e:87:45:3f:89:40:fb:ff:ec:2b:da:0f:
         63:b3:94:c2:63:93:8e:61:12:b5:52:40:87:20:1f:f1:4d:0c:
         12:53:30:92:8a:50:c1:e6:fd:d3:f1:24:02:68:fb:45:ea:23:
         1e:a6:2b:15:fa:ea:91:81:e4:2b:29:0c:4c:d9:3f:ef:34:48:
         45:17:51:4d:24:15:6c:de:e5:3a:73:ed:ae:6b:c5:f5:ea:66:
         08:85:dd:57:25:f4:a1:db:fc:f3:d2:00:40:f1:35:3f:21:15:
         81:e5:07:dc
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAf0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yMzA1MDEw
MTM1NDJaFw0yNDA0MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEQzNTI5Q0NENjQwN0RC
Qjk0RTE0NUQyQTFFRTBDMjg2QzcxMjRDMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCejeR+Jlk63ZHvWaxHyKQaOxLkuDDeCMhf0EaQzWjmlw3WIPKM
SCcjRb74tCaq1oXgh/AG/MzTgydvK/DEk10pntcyXqnSvbTGHvXm12g4pXn226tx
g8TNQ0IW7VaYLpTYrfP/MwMIF8B6fUM+CX/Zl8GMklvulbrRl8Q6iQsM7CXqp6qI
CeRRGB39YzupvoPxO8Usp3XrqoJ56JkdKnjvL3WV4TntpoDHqq0c32XeSliIuv8c
M/YmlzFb46Q6JmdB9r9LyQ8rYUUlajfx9eGJa3oqDrQbLRV7g2kQsSVPUWWja/1m
w5xABFyevJ8OGwQOXgNWE+T0SqOdwdnC4jzpAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU01KczWQH27lOFF0qHuDChscSTAMwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxLzAxS2N6V1FIMjdsT0ZGMHFIdURDaHNjU1RBTS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAVxmAAwDQYJKoZIhvcNAQELBQADggEBAHtNI8wpgWpaLDja4BOhvqOuDn1g
VC55QISlTNLFGPG1ogXw9K+tGX+/n3x4765hd7Yr3KfgwlknXMhBb6yl+oXl3eG/
znuAQONhx360WZSLYTlETJ6Zz6VhkUgy/gahL9TosEKNT9FbdteMDh0/o78+n6nL
1xmmFaUs+Ce5n/UXn1ZkxX+xzJnbpBAEvhCp7/uJnN6D/S6HRT+JQPv/7CvaD2Oz
lMJjk45hErVSQIcgH/FNDBJTMJKKUMHm/dPxJAJo+0XqIx6mKxX66pGB5CspDEzZ
P+80SEUXUU0kFWze5Tpz7a5rxfXqZgiF3Vcl9KHb/PPSAEDxNT8hFYHlB9w=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org