Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/9_cLNdw25YdKLlfpdDfamVb-ka8.roa
File:                     9_cLNdw25YdKLlfpdDfamVb-ka8.roa (raw, json)
Hash identifier:          ETcQ5vraQ+eZXtDQ5OmYMZP2t3/ofQlYKL4zJTjjFDM=
Subject key identifier:   F7:F7:0B:35:DC:36:E5:87:4A:2E:57:E9:74:37:DA:99:56:FE:91:AF
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0196
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/9_cLNdw25YdKLlfpdDfamVb-ka8.roa
Signing time:             Mon 01 May 2023 01:30:32 +0000
ROA not before:           Mon 01 May 2023 01:30:32 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        121.104.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 406 (0x196)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:30:32 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=F7F70B35DC36E5874A2E57E97437DA9956FE91AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:76:39:30:de:e3:75:1d:a3:97:60:f6:e2:2e:
                    2c:04:6c:a0:9b:a1:a9:eb:ac:81:c1:58:4d:11:6d:
                    e7:f2:70:83:35:9c:f4:15:65:89:17:5c:7c:27:8a:
                    a0:4f:7a:6a:a1:48:d1:06:3c:3f:42:30:b1:18:6a:
                    75:6f:c3:8d:ab:75:79:08:8c:97:05:ef:32:f6:5c:
                    83:0b:c1:16:4a:a0:25:c1:48:65:e5:8f:ec:91:b5:
                    c3:9d:51:cd:f8:48:cf:14:cb:ba:8d:e0:f6:62:14:
                    ce:37:1b:0c:9b:b1:88:93:92:c9:89:2e:64:01:4a:
                    9e:39:2b:69:4f:67:15:34:06:95:18:e4:fb:16:b0:
                    9c:3e:20:d7:fd:c1:78:82:1f:4d:06:ad:05:27:6a:
                    c4:2f:ac:41:03:74:a1:25:b4:da:4a:b7:62:d7:2d:
                    77:94:50:f1:1d:79:2f:25:88:fc:29:ea:db:1a:4b:
                    62:6b:4d:49:3e:11:41:d1:9d:de:8e:43:b8:e4:95:
                    b1:88:3d:3f:3b:a4:a6:f6:3d:4a:65:eb:e4:1c:d0:
                    f4:6f:54:97:45:30:bd:0b:58:4d:98:3d:cb:b1:3f:
                    14:eb:80:44:95:4e:7c:08:85:c9:4a:e8:cf:94:31:
                    14:e9:3f:fd:00:b1:01:cc:c9:47:bc:61:90:f9:aa:
                    8c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F7:0B:35:DC:36:E5:87:4A:2E:57:E9:74:37:DA:99:56:FE:91:AF
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/9_cLNdw25YdKLlfpdDfamVb-ka8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.104.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ad:a0:1d:f1:aa:c6:c6:c2:48:b6:fd:e3:be:46:73:18:28:6f:
         7a:13:10:45:17:7c:22:cb:1a:9f:ec:96:8b:24:de:74:d1:4a:
         7d:61:59:7b:76:74:78:c2:94:bb:da:09:d0:8c:e3:db:50:a2:
         65:57:b0:03:ca:2a:f2:12:03:5f:72:c0:c2:e9:96:df:7e:d8:
         3c:bc:f0:f4:70:f2:a2:26:e0:38:49:b4:a2:6f:fc:4d:fd:21:
         fc:45:f2:73:08:3b:97:f1:d1:c7:f8:b2:70:09:8e:30:f5:3e:
         61:ae:3d:1d:6f:e7:1f:e6:59:40:04:b5:3d:e7:89:8f:13:84:
         c4:07:db:22:0b:a9:44:c1:0e:60:07:8f:a7:0f:e2:f2:71:5d:
         c9:e6:a7:08:7d:ae:70:dc:b0:5e:ac:08:67:2a:9d:fa:a0:87:
         70:b1:2e:07:68:e8:ba:bf:c0:f6:cc:43:a7:3d:33:e9:a6:45:
         de:75:d5:b1:2b:19:7c:67:61:dd:e0:80:c3:00:4c:12:03:1e:
         f8:5e:ed:1d:a8:c9:f0:0f:fb:05:54:d6:41:2b:61:c3:86:4c:
         cd:71:2b:7e:4e:54:41:ed:dd:f4:5d:29:8a:02:c2:5c:69:02:
         69:00:31:29:25:8e:bf:7b:58:c4:bb:e9:48:71:6c:ba:cc:6b:
         78:b1:b7:d7
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yMzA1MDEw
MTMwMzJaFw0yNDA0MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEY3RjcwQjM1REMzNkU1
ODc0QTJFNTdFOTc0MzdEQTk5NTZGRTkxQUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDZdjkw3uN1HaOXYPbiLiwEbKCboanrrIHBWE0RbefycIM1nPQV
ZYkXXHwniqBPemqhSNEGPD9CMLEYanVvw42rdXkIjJcF7zL2XIMLwRZKoCXBSGXl
j+yRtcOdUc34SM8Uy7qN4PZiFM43GwybsYiTksmJLmQBSp45K2lPZxU0BpUY5PsW
sJw+INf9wXiCH00GrQUnasQvrEEDdKEltNpKt2LXLXeUUPEdeS8liPwp6tsaS2Jr
TUk+EUHRnd6OQ7jklbGIPT87pKb2PUpl6+Qc0PRvVJdFML0LWE2YPcuxPxTrgESV
TnwIhclK6M+UMRTpP/0AsQHMyUe8YZD5qowVAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQU9/cLNdw25YdKLlfpdDfamVb+ka8wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxLzlfY0xOZHcyNVlkS0xsZnBkRGZhbVZiLWthOC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwB5aDANBgkqhkiG9w0BAQsFAAOCAQEAraAd8arGxsJItv3jvkZzGChvehMQ
RRd8Issan+yWiyTedNFKfWFZe3Z0eMKUu9oJ0Izj21CiZVewA8oq8hIDX3LAwumW
337YPLzw9HDyoibgOEm0om/8Tf0h/EXycwg7l/HRx/iycAmOMPU+Ya49HW/nH+ZZ
QAS1PeeJjxOExAfbIgupRMEOYAePpw/i8nFdyeanCH2ucNywXqwIZyqd+qCHcLEu
B2jour/A9sxDpz0z6aZF3nXVsSsZfGdh3eCAwwBMEgMe+F7tHajJ8A/7BVTWQSth
w4ZMzXErfk5UQe3d9F0pigLCXGkCaQAxKSWOv3tYxLvpSHFsusxreLG31w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org