Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/9CAmyckNcJFJYcWONFAo1uAt64w.roa
File:                     9CAmyckNcJFJYcWONFAo1uAt64w.roa (raw, json)
Hash identifier:          D11uA5LxKvKKluz1mgclOvqmNoeKB0pmfZr7c3nqzak=
Subject key identifier:   F4:20:26:C9:C9:0D:70:91:49:61:C5:8E:34:50:28:D6:E0:2D:EB:8C
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       53
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/9CAmyckNcJFJYcWONFAo1uAt64w.roa
Signing time:             Tue 07 Jun 2022 10:01:13 +0000
ROA not before:           Tue 07 Jun 2022 10:01:13 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        113.158.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:01:13 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=F42026C9C90D70914961C58E345028D6E02DEB8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e7:5d:73:56:dd:7a:14:97:b7:72:40:01:b5:
                    5c:1e:f9:77:9a:2b:cd:ed:34:11:cd:80:53:a5:5d:
                    70:06:8f:84:84:6f:73:c2:6f:6c:c5:78:4c:44:01:
                    38:42:2a:2f:f8:b6:8f:b7:e8:c3:34:e4:b7:42:6a:
                    3f:1b:58:db:e0:e9:86:c3:53:2d:70:90:38:61:d7:
                    05:f3:5a:d4:86:25:4a:41:7b:f7:fb:74:1a:9e:9d:
                    b1:39:b8:c3:69:71:59:ae:94:59:d3:62:cd:1c:cf:
                    54:65:db:53:7a:9f:67:84:8a:3d:71:81:2f:67:f3:
                    fc:77:ac:4e:9a:49:eb:7f:0f:0a:e8:b1:a8:8a:dd:
                    f8:13:c9:b0:da:f7:df:29:22:c4:60:11:48:8c:1a:
                    c4:ef:08:2a:d7:23:97:ba:72:00:98:58:92:41:25:
                    dc:68:20:da:ec:21:5d:73:77:cd:c3:ae:63:2b:4d:
                    6e:f4:53:93:4a:95:bb:eb:bc:c0:e7:26:6e:69:7a:
                    41:1d:e2:85:ce:43:6e:bd:c1:45:55:c1:05:72:6f:
                    ac:2f:82:7c:f4:93:42:61:e9:57:e3:10:1b:89:ff:
                    10:3b:74:d4:a7:f3:91:97:ce:e8:43:89:58:95:b8:
                    bd:bd:c5:6d:2c:21:af:b3:cf:b8:ff:d3:d5:ef:86:
                    c7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:20:26:C9:C9:0D:70:91:49:61:C5:8E:34:50:28:D6:E0:2D:EB:8C
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/9CAmyckNcJFJYcWONFAo1uAt64w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.158.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a0:ff:13:13:b4:95:9c:cd:f7:d7:9b:06:bb:ec:06:37:5d:fd:
         14:66:a3:f3:4d:c8:f4:04:84:d4:91:a2:ba:d5:52:b1:27:12:
         06:22:1b:ec:6b:f8:e1:20:f7:40:84:be:6e:02:a8:44:5c:ec:
         75:87:7c:51:e4:0f:5a:8f:ed:9a:5d:f9:d5:c5:90:c4:4f:d7:
         14:77:ac:1b:91:1a:39:07:b0:4e:0c:a1:ce:ab:fc:28:dd:2c:
         5f:be:cf:a9:5c:64:47:91:de:8e:ad:a6:d3:71:81:6c:7a:56:
         b6:7b:ad:84:dd:fe:e8:f9:f0:dd:46:76:96:77:3b:0a:54:70:
         2c:72:d4:7c:d9:75:a4:a7:39:3e:93:49:a6:a9:3c:55:9a:30:
         b2:08:e8:a1:26:c2:d6:a4:2f:f7:1a:45:e4:17:dc:0b:68:8c:
         03:bf:ba:bc:a9:00:5c:c7:5b:db:93:11:74:a7:10:c2:e0:af:
         95:65:e1:1f:b5:13:75:bc:02:24:08:de:a5:2c:59:5f:6a:4e:
         30:81:f3:55:76:68:f2:dc:8c:d8:3d:64:47:33:31:07:6c:90:
         33:94:de:80:a9:42:f7:50:32:38:7d:d0:19:67:7c:7e:73:5f:
         fa:34:58:4d:66:8e:e7:9a:7c:82:bc:b6:c0:d0:d4:83:9f:9c:
         9d:98:08:5f
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIBUzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNUJG
QTNFNTNFNTkxNDkyMzlBMTY4REZEOTJDNzU3NDVBQjY2Q0I2MB4XDTIyMDYwNzEw
MDExM1oXDTIzMDUxNTAxMzAwNFowMzExMC8GA1UEAxMoRjQyMDI2QzlDOTBENzA5
MTQ5NjFDNThFMzQ1MDI4RDZFMDJERUI4QzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMTnXXNW3XoUl7dyQAG1XB75d5orze00Ec2AU6VdcAaPhIRvc8Jv
bMV4TEQBOEIqL/i2j7fowzTkt0JqPxtY2+DphsNTLXCQOGHXBfNa1IYlSkF79/t0
Gp6dsTm4w2lxWa6UWdNizRzPVGXbU3qfZ4SKPXGBL2fz/HesTppJ638PCuixqIrd
+BPJsNr33ykixGARSIwaxO8IKtcjl7pyAJhYkkEl3Ggg2uwhXXN3zcOuYytNbvRT
k0qVu+u8wOcmbml6QR3ihc5Dbr3BRVXBBXJvrC+CfPSTQmHpV+MQG4n/EDt01Kfz
kZfO6EOJWJW4vb3FbSwhr7PPuP/T1e+Gx28CAwEAAaOCAiMwggIfMB0GA1UdDgQW
BBT0ICbJyQ1wkUlhxY40UCjW4C3rjDAfBgNVHSMEGDAWgBQVv6PlPlkUkjmhaN/Z
LHV0WrZstjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTYxL0ZiLWo1VDVaRkpJNW9XamYyU3gxZEZxMmJMWS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZiLWo1VDVaRkpJNW9XamYyU3gxZEZx
MmJMWS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8xNjEvOUNBbXlja05jSkZKWWNXT05GQW8xdUF0NjR3LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw
BQMDAHGeMA0GCSqGSIb3DQEBCwUAA4IBAQCg/xMTtJWczffXmwa77AY3Xf0UZqPz
Tcj0BITUkaK61VKxJxIGIhvsa/jhIPdAhL5uAqhEXOx1h3xR5A9aj+2aXfnVxZDE
T9cUd6wbkRo5B7BODKHOq/wo3Sxfvs+pXGRHkd6OrabTcYFsela2e62E3f7o+fDd
RnaWdzsKVHAsctR82XWkpzk+k0mmqTxVmjCyCOihJsLWpC/3GkXkF9wLaIwDv7q8
qQBcx1vbkxF0pxDC4K+VZeEftRN1vAIkCN6lLFlfak4wgfNVdmjy3IzYPWRHMzEH
bJAzlN6AqUL3UDI4fdAZZ3x+c1/6NFhNZo7nmnyCvLbA0NSDn5ydmAhf
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org