Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/ElREsNSpQJuQ4VQLHMUnyrYD00Y.roa
File:                     ElREsNSpQJuQ4VQLHMUnyrYD00Y.roa (raw, json)
Hash identifier:          98KB08mrELAVkTMF3kNy/2vaEzDyfSpB2HWfUn32Jg8=
Subject key identifier:   12:54:44:B0:D4:A9:40:9B:90:E1:54:0B:1C:C5:27:CA:B6:03:D3:46
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       01D1
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ElREsNSpQJuQ4VQLHMUnyrYD00Y.roa
Signing time:             Mon 01 May 2023 01:33:36 +0000
ROA not before:           Mon 01 May 2023 01:33:36 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        222.7.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 465 (0x1d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:33:36 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=125444B0D4A9409B90E1540B1CC527CAB603D346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d2:6e:6c:02:23:c2:82:dc:f2:c8:c2:ac:1a:
                    08:dc:64:d2:64:a6:28:86:98:bd:c5:29:9a:99:07:
                    c1:37:c3:f2:8e:34:cc:bd:f8:2b:34:f8:6c:68:06:
                    b2:13:c2:c4:e2:4c:1a:81:00:3c:b3:98:e0:17:9c:
                    fc:61:4d:20:c4:57:a4:2c:32:c6:d4:1b:90:48:a3:
                    28:ac:ea:50:3e:e4:d5:db:7b:3e:45:03:25:37:ec:
                    27:66:b5:96:8c:92:9c:0a:35:a2:fa:d2:06:cf:60:
                    d1:42:71:90:d1:74:fc:db:f5:0e:3b:be:0a:6e:9d:
                    8b:d5:9c:52:2f:29:9c:90:e2:3d:36:1b:5e:4d:c5:
                    9d:2f:05:82:a3:0b:2b:70:84:07:08:c9:c9:d9:fb:
                    5b:51:c0:20:7f:c5:95:a8:c9:60:38:85:d2:e9:bb:
                    46:99:f8:60:f0:b0:a4:89:ed:a9:d5:e0:c0:65:26:
                    7e:89:df:82:61:ba:61:32:fb:a6:db:53:c3:30:36:
                    d1:67:97:b2:95:7c:43:ea:b1:3f:21:60:73:af:46:
                    76:0c:f4:8d:aa:1b:ab:c6:22:aa:37:07:ce:e7:32:
                    c2:af:08:24:0d:df:75:c3:6b:ab:51:ee:02:87:97:
                    d3:ba:02:6e:b2:3f:31:ca:5d:40:f5:e9:27:17:c2:
                    9d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:54:44:B0:D4:A9:40:9B:90:E1:54:0B:1C:C5:27:CA:B6:03:D3:46
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ElREsNSpQJuQ4VQLHMUnyrYD00Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.7.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         96:a8:ce:eb:96:47:7c:ed:45:5f:d9:d1:ae:f2:12:03:dd:db:
         67:2a:78:af:c6:91:c4:48:d5:5b:45:5b:0a:dc:07:67:11:4f:
         7f:e3:f2:bc:1e:b3:5a:8a:b2:8f:58:89:00:c2:9c:6b:43:af:
         ba:3a:a7:6e:82:04:4b:4b:89:8a:86:02:88:8d:90:49:f8:8e:
         b9:00:2c:52:58:33:a9:2f:49:86:b4:a0:58:6a:de:c7:05:46:
         a1:1a:64:f3:dd:a1:cb:09:e2:21:a3:84:39:07:c3:3c:00:55:
         09:d5:25:40:bc:f5:44:12:66:16:1f:db:9d:b8:dd:01:c9:54:
         bd:b1:8e:e1:16:3d:80:ca:8d:36:14:0f:df:94:28:0a:1f:3c:
         2f:e1:31:83:c8:5a:40:75:f1:aa:9b:bf:12:f4:00:a7:b8:0c:
         44:20:34:31:bf:29:d6:43:53:4f:8f:ae:c4:03:d7:6c:06:c9:
         5a:7f:b9:d7:c6:fb:07:3d:b8:37:5f:42:48:e1:35:4d:4f:80:
         86:df:29:85:80:c5:2e:89:48:b2:9b:7e:a7:64:e5:e8:ca:f8:
         f6:75:4c:38:92:99:31:43:8a:24:ae:d3:9c:12:6f:6b:67:ef:
         b9:1d:5a:85:6b:0e:5d:ef:d0:6e:32:b8:b0:3d:c7:c2:eb:54:
         5b:b2:6d:ea
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAdEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yMzA1MDEw
MTMzMzZaFw0yNDA0MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDEyNTQ0NEIwRDRBOTQw
OUI5MEUxNTQwQjFDQzUyN0NBQjYwM0QzNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDY0m5sAiPCgtzyyMKsGgjcZNJkpiiGmL3FKZqZB8E3w/KONMy9
+Cs0+GxoBrITwsTiTBqBADyzmOAXnPxhTSDEV6QsMsbUG5BIoyis6lA+5NXbez5F
AyU37CdmtZaMkpwKNaL60gbPYNFCcZDRdPzb9Q47vgpunYvVnFIvKZyQ4j02G15N
xZ0vBYKjCytwhAcIycnZ+1tRwCB/xZWoyWA4hdLpu0aZ+GDwsKSJ7anV4MBlJn6J
34JhumEy+6bbU8MwNtFnl7KVfEPqsT8hYHOvRnYM9I2qG6vGIqo3B87nMsKvCCQN
33XDa6tR7gKHl9O6Am6yPzHKXUD16ScXwp0dAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUElREsNSpQJuQ4VQLHMUnyrYD00YwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL0VsUkVzTlNwUUp1UTRWUUxITVVueXJZRDAwWS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwDeBzANBgkqhkiG9w0BAQsFAAOCAQEAlqjO65ZHfO1FX9nRrvISA93bZyp4
r8aRxEjVW0VbCtwHZxFPf+PyvB6zWoqyj1iJAMKca0OvujqnboIES0uJioYCiI2Q
SfiOuQAsUlgzqS9JhrSgWGrexwVGoRpk892hywniIaOEOQfDPABVCdUlQLz1RBJm
Fh/bnbjdAclUvbGO4RY9gMqNNhQP35QoCh88L+Exg8haQHXxqpu/EvQAp7gMRCA0
Mb8p1kNTT4+uxAPXbAbJWn+518b7Bz24N19CSOE1TU+Aht8phYDFLolIspt+p2Tl
6Mr49nVMOJKZMUOKJK7TnBJva2fvuR1ahWsOXe/QbjK4sD3HwutUW7Jt6g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org