Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/IZI177vq-NuJpwQvLEqwuV0_5lM.roa
File:                     IZI177vq-NuJpwQvLEqwuV0_5lM.roa (raw, json)
Hash identifier:          cvVLCd0fsUfjEZlMxSBj//5liDziaZpsOuPuggT/LJo=
Subject key identifier:   21:92:35:EF:BB:EA:F8:DB:89:A7:04:2F:2C:4A:B0:B9:5D:3F:E6:53
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       010B
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/IZI177vq-NuJpwQvLEqwuV0_5lM.roa
Signing time:             Tue 14 Jun 2022 10:10:31 +0000
ROA not before:           Tue 14 Jun 2022 10:10:31 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        106.185.192.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 267 (0x10b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun 14 10:10:31 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=219235EFBBEAF8DB89A7042F2C4AB0B95D3FE653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:30:78:da:0e:99:71:6d:8b:d7:cd:59:43:db:
                    1e:61:1d:24:60:ff:08:70:65:d0:66:13:b7:1c:7e:
                    c2:13:45:85:23:2a:ad:25:0e:f4:77:8a:76:59:64:
                    c5:2f:4c:c4:a8:d8:fd:33:77:77:10:56:8a:9f:4c:
                    6d:01:9e:75:d9:af:c4:ab:b7:7e:89:99:15:7b:aa:
                    fc:64:2e:30:72:21:e5:02:92:39:76:d8:f9:24:78:
                    ed:ba:6d:94:68:70:4f:5d:4e:b6:51:a8:4c:80:df:
                    e5:6c:a4:65:56:8c:9d:b6:0b:dd:56:a3:9f:79:bc:
                    7c:dc:41:21:55:14:d9:0a:2d:c9:d9:61:9c:a0:18:
                    9a:5b:ed:4e:23:61:5f:be:a3:df:a3:3a:c4:b5:3d:
                    bd:c4:2a:a7:a1:d8:c8:fe:35:21:68:60:84:17:3d:
                    6f:ef:b2:63:44:1c:16:3c:f2:f8:05:a3:c3:65:ea:
                    d2:a5:4f:f5:a8:81:19:32:64:90:d2:10:29:fe:0b:
                    95:5b:f2:42:d9:a5:fc:0b:1c:6a:01:73:9a:00:e5:
                    01:9b:60:b4:28:90:f1:ec:5d:38:05:f1:b9:1c:bb:
                    b6:96:19:eb:02:76:b9:61:11:9b:61:f1:08:08:60:
                    d4:c5:e3:ba:fd:09:53:f8:36:b8:d8:73:49:f4:04:
                    84:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:92:35:EF:BB:EA:F8:DB:89:A7:04:2F:2C:4A:B0:B9:5D:3F:E6:53
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/IZI177vq-NuJpwQvLEqwuV0_5lM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.185.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         93:29:9f:60:3d:f7:67:3e:0f:90:68:d5:18:c3:a5:3e:fd:1c:
         fd:00:05:e3:4b:6b:d4:61:5f:5a:d3:34:47:eb:93:2b:93:b4:
         52:0a:a5:9b:05:86:5a:81:b8:88:0a:f1:09:0e:ef:85:bb:fc:
         40:6e:74:cd:d3:66:6b:85:65:cc:b0:b2:6f:5a:38:15:30:7b:
         36:91:1c:82:80:dc:c3:c0:a5:cf:a1:28:b6:4e:5b:70:8f:d5:
         02:31:15:72:3d:7e:1a:73:c6:aa:93:6e:77:a9:59:a3:b6:a0:
         0b:3e:80:2a:71:4a:95:ca:b7:66:f1:75:c6:ae:dd:c0:46:e1:
         29:5d:a5:53:ca:21:8d:e0:1a:8b:d9:76:bf:d3:77:c2:23:45:
         39:4e:28:ce:f7:c7:39:03:d5:10:7a:fc:99:16:05:a8:06:3b:
         6c:24:5b:ee:09:ef:98:44:1b:2f:d3:c6:35:41:85:4e:8e:73:
         7d:fd:c9:ce:1d:0f:da:54:a8:81:ab:18:88:ae:77:d7:88:b4:
         dd:84:8e:3a:5a:12:a1:62:d9:e7:e3:ed:85:4f:10:e7:18:35:
         a7:b4:d7:e0:20:a4:51:d5:78:f5:36:b8:ae:d7:d8:cd:40:17:
         e7:05:49:68:32:a4:50:a8:38:52:45:62:60:b1:0b:86:07:4c:
         b9:a6:53:f3
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAQswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yMjA2MTQx
MDEwMzFaFw0yMzA1MTUwMTMwMDRaMDMxMTAvBgNVBAMTKDIxOTIzNUVGQkJFQUY4
REI4OUE3MDQyRjJDNEFCMEI5NUQzRkU2NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCMHjaDplxbYvXzVlD2x5hHSRg/whwZdBmE7ccfsITRYUjKq0l
DvR3inZZZMUvTMSo2P0zd3cQVoqfTG0BnnXZr8Srt36JmRV7qvxkLjByIeUCkjl2
2PkkeO26bZRocE9dTrZRqEyA3+VspGVWjJ22C91Wo595vHzcQSFVFNkKLcnZYZyg
GJpb7U4jYV++o9+jOsS1Pb3EKqeh2Mj+NSFoYIQXPW/vsmNEHBY88vgFo8Nl6tKl
T/WogRkyZJDSECn+C5Vb8kLZpfwLHGoBc5oA5QGbYLQokPHsXTgF8bkcu7aWGesC
drlhEZth8QgIYNTF47r9CVP4NrjYc0n0BIQHAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUIZI177vq+NuJpwQvLEqwuV0/5lMwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL0laSTE3N3ZxLU51SnB3UXZMRXF3dVYwXzVsTS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAZqucAwDQYJKoZIhvcNAQELBQADggEBAJMpn2A992c+D5Bo1RjDpT79HP0A
BeNLa9RhX1rTNEfrkyuTtFIKpZsFhlqBuIgK8QkO74W7/EBudM3TZmuFZcywsm9a
OBUwezaRHIKA3MPApc+hKLZOW3CP1QIxFXI9fhpzxqqTbnepWaO2oAs+gCpxSpXK
t2bxdcau3cBG4SldpVPKIY3gGovZdr/Td8IjRTlOKM73xzkD1RB6/JkWBagGO2wk
W+4J75hEGy/TxjVBhU6Oc339yc4dD9pUqIGrGIiud9eItN2EjjpaEqFi2efj7YVP
EOcYNae01+AgpFHVePU2uK7X2M1AF+cFSWgypFCoOFJFYmCxC4YHTLmmU/M=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org