Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/COBdbjpwGmTj-IXqhXTgH1Bzn5s.roa
File:                     COBdbjpwGmTj-IXqhXTgH1Bzn5s.roa (raw, json)
Hash identifier:          VCu7JIHvrcqXecmRLMh1jg8I0cadYyqJb2RdUhqS1ZY=
Subject key identifier:   08:E0:5D:6E:3A:70:1A:64:E3:F8:85:EA:85:74:E0:1F:50:73:9F:9B
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0119
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/COBdbjpwGmTj-IXqhXTgH1Bzn5s.roa
Signing time:             Tue 06 Sep 2022 03:06:46 +0000
ROA not before:           Tue 06 Sep 2022 03:06:46 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     2516
IP address blocks:        14.9.96.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 281 (0x119)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Sep  6 03:06:46 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=08E05D6E3A701A64E3F885EA8574E01F50739F9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6a:aa:a3:c0:ff:42:fb:91:8c:c3:0c:71:32:
                    0c:bf:a4:9b:5f:68:54:e4:4e:28:a3:ad:ca:28:45:
                    14:9c:3f:45:be:0d:40:ee:fe:f3:a8:70:db:fe:6f:
                    5f:4c:a3:48:25:a4:8b:31:85:7b:bb:09:9a:7a:78:
                    e4:73:9e:a7:9d:89:74:e7:51:cd:fe:17:8a:ff:24:
                    e0:04:fd:f4:5b:cf:4d:d3:82:ab:f4:0b:f0:e1:5b:
                    a3:0d:f1:8f:2b:c6:f5:7b:00:8f:f6:6b:3d:5d:7a:
                    00:02:ed:df:14:af:99:9e:65:08:25:cc:34:8a:11:
                    0d:ee:bc:f3:08:e6:6b:ee:b1:55:16:8f:3f:5e:78:
                    c5:2d:7e:0b:0e:64:27:b1:2b:79:ec:70:d0:43:88:
                    2f:48:31:69:ac:09:f3:b8:23:d6:9b:fb:57:63:3f:
                    70:77:45:d0:47:66:ee:0b:47:40:7b:55:7b:d0:3b:
                    20:2d:f2:e9:42:32:60:d2:2e:fc:eb:78:ce:6f:db:
                    c0:af:46:6f:41:d0:1a:50:0b:32:04:bb:d8:c7:77:
                    40:fe:2e:77:bc:e6:f8:52:3e:f0:a3:ab:94:fa:d3:
                    38:32:2d:b4:15:0b:f2:76:25:6d:25:64:be:6c:64:
                    30:14:0d:46:a1:cc:16:5f:ba:64:c2:ad:89:7f:a6:
                    e7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:E0:5D:6E:3A:70:1A:64:E3:F8:85:EA:85:74:E0:1F:50:73:9F:9B
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/COBdbjpwGmTj-IXqhXTgH1Bzn5s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.9.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         59:f0:d0:98:d8:8d:cf:59:47:9c:e9:04:af:65:6f:33:63:55:
         12:41:75:f5:03:7f:a7:94:b1:25:7e:ea:71:11:91:a1:1b:93:
         e4:3e:d6:b5:33:d0:0a:b2:93:fb:6f:4f:2a:f4:16:74:12:eb:
         26:a0:00:ed:c3:60:8d:b9:c4:a8:a6:3b:45:70:7d:58:23:b1:
         22:3d:6d:43:44:83:64:20:c3:70:03:5c:43:7d:6c:dc:df:20:
         c2:ae:a1:37:30:e4:de:29:0d:b7:82:0a:70:14:cc:a7:ed:ae:
         b9:b7:4a:19:fa:fb:e3:ff:60:d3:1c:6a:10:1e:20:71:3e:2c:
         74:fc:46:72:07:a2:87:bd:80:8e:17:9d:d9:17:9b:51:5a:d5:
         f4:f4:7c:d0:8f:b6:5d:49:69:87:7e:06:c2:5a:d5:1b:12:81:
         52:5b:66:f4:62:b0:94:a0:18:20:0a:a7:25:4f:14:0b:b5:5b:
         9c:5b:bb:f2:b7:91:ce:83:32:1b:88:f3:4c:3a:65:c6:77:4a:
         f1:1e:fd:7e:81:aa:9e:d2:21:84:e9:dc:81:bc:27:20:3a:44:
         09:f8:ac:2c:25:4d:ac:11:d0:3e:21:ab:7b:58:6e:66:cd:85:
         ab:30:da:ab:f0:88:ff:d4:f9:91:50:36:62:81:8d:d7:e5:b4:
         14:1a:0e:70
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICARkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yMjA5MDYw
MzA2NDZaFw0yMzA4MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDA4RTA1RDZFM0E3MDFB
NjRFM0Y4ODVFQTg1NzRFMDFGNTA3MzlGOUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPaqqjwP9C+5GMwwxxMgy/pJtfaFTkTiijrcooRRScP0W+DUDu
/vOocNv+b19Mo0glpIsxhXu7CZp6eORznqediXTnUc3+F4r/JOAE/fRbz03Tgqv0
C/DhW6MN8Y8rxvV7AI/2az1degAC7d8Ur5meZQglzDSKEQ3uvPMI5mvusVUWjz9e
eMUtfgsOZCexK3nscNBDiC9IMWmsCfO4I9ab+1djP3B3RdBHZu4LR0B7VXvQOyAt
8ulCMmDSLvzreM5v28CvRm9B0BpQCzIEu9jHd0D+Lne85vhSPvCjq5T60zgyLbQV
C/J2JW0lZL5sZDAUDUahzBZfumTCrYl/puepAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUCOBdbjpwGmTj+IXqhXTgH1Bzn5swHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL0NPQmRianB3R21Uai1JWHFoWFRnSDFCem41cy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAQOCWAwDQYJKoZIhvcNAQELBQADggEBAFnw0JjYjc9ZR5zpBK9lbzNjVRJB
dfUDf6eUsSV+6nERkaEbk+Q+1rUz0Aqyk/tvTyr0FnQS6yagAO3DYI25xKimO0Vw
fVgjsSI9bUNEg2Qgw3ADXEN9bNzfIMKuoTcw5N4pDbeCCnAUzKftrrm3Shn6++P/
YNMcahAeIHE+LHT8RnIHooe9gI4XndkXm1Fa1fT0fNCPtl1JaYd+BsJa1RsSgVJb
ZvRisJSgGCAKpyVPFAu1W5xbu/K3kc6DMhuI80w6ZcZ3SvEe/X6Bqp7SIYTp3IG8
JyA6RAn4rCwlTawR0D4hq3tYbmbNhasw2qvwiP/U+ZFQNmKBjdfltBQaDnA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org