Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/4yxt-AXEZnPrZN1w-PKKEJjo6d4.roa
File:                     4yxt-AXEZnPrZN1w-PKKEJjo6d4.roa (raw, json)
Hash identifier:          Njbphmz0zXOQaX9BqzFd54Db9psCtvbiG4ntPnPag3A=
Subject key identifier:   E3:2C:6D:F8:05:C4:66:73:EB:64:DD:70:F8:F2:8A:10:98:E8:E9:DE
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0200
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/4yxt-AXEZnPrZN1w-PKKEJjo6d4.roa
Signing time:             Mon 01 May 2023 01:35:44 +0000
ROA not before:           Mon 01 May 2023 01:35:44 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        113.152.64.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 512 (0x200)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:35:44 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=E32C6DF805C46673EB64DD70F8F28A1098E8E9DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a9:c1:83:97:13:86:61:ff:e7:47:b0:e1:b5:
                    86:93:90:bb:d2:3c:bc:f2:1a:62:55:04:1d:33:22:
                    f0:c8:ae:19:46:96:6b:be:aa:90:bc:51:bd:a8:ea:
                    ec:37:60:0b:92:9f:ff:a2:cc:7c:0a:03:64:29:ea:
                    03:e6:e7:4c:36:ca:5f:32:c4:25:a2:80:ae:21:0c:
                    19:bf:4d:92:63:67:97:3e:44:17:31:9f:75:31:4b:
                    b6:e8:d2:42:90:91:15:8a:56:e7:f0:6e:a1:2f:eb:
                    5a:fd:55:ab:fb:8b:b8:69:30:ce:ee:1c:0f:1a:ee:
                    61:df:b8:21:29:61:db:c4:ba:88:9c:eb:25:c9:00:
                    2d:18:fd:bc:aa:c5:a0:42:82:68:19:51:0d:03:9b:
                    80:33:68:c8:ba:db:f8:7f:1e:3e:ae:e1:b1:b0:88:
                    46:21:2f:ce:ed:90:18:bb:10:e1:3f:00:3f:80:90:
                    9d:05:3b:42:a1:84:b9:80:8d:d1:20:ad:50:c4:fb:
                    c4:87:6b:49:64:8e:bc:8d:26:7d:95:ef:97:83:36:
                    f6:1c:29:23:6f:9a:90:ce:a8:29:e9:2d:83:93:d1:
                    0a:db:93:3f:cd:41:b4:6d:8e:bc:8b:fd:c3:59:2a:
                    18:cd:4e:f4:70:74:75:22:a3:2f:54:dd:36:de:1a:
                    bf:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:2C:6D:F8:05:C4:66:73:EB:64:DD:70:F8:F2:8A:10:98:E8:E9:DE
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/4yxt-AXEZnPrZN1w-PKKEJjo6d4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.152.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a9:fa:36:eb:9b:38:d0:7c:af:1a:29:9b:e2:03:e0:39:9a:ff:
         cd:63:c0:a2:62:cf:ab:16:30:86:66:a6:3f:f1:d3:19:29:24:
         23:da:51:99:6d:64:6a:a6:d0:02:8b:b2:5b:07:23:90:d0:7b:
         48:4e:44:1a:53:f5:eb:de:e5:d0:c2:44:a9:74:d5:f0:6c:a1:
         c6:7d:d8:62:1b:6d:5e:b8:d5:6b:64:04:e1:b6:3d:1c:18:48:
         6f:66:7c:45:59:c0:3b:fe:0a:9c:72:80:e3:ef:c6:4a:d8:4d:
         5f:79:78:09:c1:eb:bb:9a:55:fe:86:03:a7:66:12:ee:5d:ea:
         2b:11:1c:86:c0:4d:42:3c:b0:3d:80:c0:e1:29:8e:6e:b4:5e:
         26:87:89:f8:94:6d:d5:c3:ed:59:c7:14:36:e3:08:6d:e0:08:
         91:bb:14:32:a4:36:1c:e9:73:82:66:c7:1e:f1:21:8c:a8:b4:
         14:2c:4a:47:c6:10:a7:d9:c9:1f:d1:4e:59:b6:ad:ea:1f:6a:
         72:b4:88:36:84:aa:a4:02:37:78:5a:de:6e:6f:8c:91:86:ad:
         87:a8:8b:a0:f2:6a:d6:02:94:b6:5e:ea:8f:db:81:b2:06:ab:
         34:48:74:d3:7f:7f:30:27:b8:c6:31:1a:3f:86:b0:a1:40:fa:
         05:eb:bd:29
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAgAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yMzA1MDEw
MTM1NDRaFw0yNDA0MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEUzMkM2REY4MDVDNDY2
NzNFQjY0REQ3MEY4RjI4QTEwOThFOEU5REUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqqcGDlxOGYf/nR7DhtYaTkLvSPLzyGmJVBB0zIvDIrhlGlmu+
qpC8Ub2o6uw3YAuSn/+izHwKA2Qp6gPm50w2yl8yxCWigK4hDBm/TZJjZ5c+RBcx
n3UxS7bo0kKQkRWKVufwbqEv61r9Vav7i7hpMM7uHA8a7mHfuCEpYdvEuoic6yXJ
AC0Y/byqxaBCgmgZUQ0Dm4AzaMi62/h/Hj6u4bGwiEYhL87tkBi7EOE/AD+AkJ0F
O0KhhLmAjdEgrVDE+8SHa0lkjryNJn2V75eDNvYcKSNvmpDOqCnpLYOT0Qrbkz/N
QbRtjryL/cNZKhjNTvRwdHUioy9U3TbeGr87AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU4yxt+AXEZnPrZN1w+PKKEJjo6d4wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxLzR5eHQtQVhFWm5QclpOMXctUEtLRUpqbzZkNC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAZxmEAwDQYJKoZIhvcNAQELBQADggEBAKn6NuubONB8rxopm+ID4Dma/81j
wKJiz6sWMIZmpj/x0xkpJCPaUZltZGqm0AKLslsHI5DQe0hORBpT9eve5dDCRKl0
1fBsocZ92GIbbV641WtkBOG2PRwYSG9mfEVZwDv+CpxygOPvxkrYTV95eAnB67ua
Vf6GA6dmEu5d6isRHIbATUI8sD2AwOEpjm60XiaHifiUbdXD7VnHFDbjCG3gCJG7
FDKkNhzpc4Jmxx7xIYyotBQsSkfGEKfZyR/RTlm2reofanK0iDaEqqQCN3ha3m5v
jJGGrYeoi6DyatYClLZe6o/bgbIGqzRIdNN/fzAnuMYxGj+GsKFA+gXrvSk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org