Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/OC9sb2ztZczb1_bveegpzQeIpeI.roa
File:                     OC9sb2ztZczb1_bveegpzQeIpeI.roa (raw, json)
Hash identifier:          TQ+QM/5vvvnsyQh8x+9crAs2u+qxrjZrI+0u3szj5k4=
Subject key identifier:   38:2F:6C:6F:6C:ED:65:CC:DB:D7:F6:EF:79:E8:29:CD:07:88:A5:E2
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0222
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/OC9sb2ztZczb1_bveegpzQeIpeI.roa
Signing time:             Mon 01 May 2023 01:37:55 +0000
ROA not before:           Mon 01 May 2023 01:37:55 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        210.132.96.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 546 (0x222)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:37:55 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=382F6C6F6CED65CCDBD7F6EF79E829CD0788A5E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:dd:cf:d3:e0:de:25:9b:78:fa:27:a2:8b:bd:
                    ef:1d:32:7e:ed:71:81:3d:48:39:0a:26:a5:4d:e4:
                    11:d5:32:77:24:79:a5:7b:ef:5b:e6:a5:c7:82:7f:
                    bc:5a:fc:69:76:84:5f:7a:6c:e4:2b:5e:9b:55:7d:
                    76:27:87:21:87:92:ed:89:51:e5:4b:d8:b0:68:c8:
                    ad:62:bd:ca:c6:69:71:c4:49:15:69:65:55:ab:9b:
                    e4:7f:ae:9a:60:2a:4b:84:ed:48:bc:1c:e8:73:a2:
                    24:49:48:9e:b6:bd:4a:77:c7:c4:64:f5:9a:3d:21:
                    c4:c6:98:0c:f1:f7:06:73:7e:78:b1:27:06:ff:0f:
                    83:40:de:25:c8:d6:8d:a0:2a:83:1d:60:57:35:b6:
                    d7:68:e4:ef:7a:39:a8:38:2a:5f:9a:64:43:60:01:
                    f3:ee:71:6a:ca:ce:ce:54:e1:0f:59:f8:ea:83:9c:
                    87:18:ee:5f:fe:a1:02:e4:ae:26:98:20:b4:60:c6:
                    5a:e4:81:27:31:ae:d5:03:d3:76:4e:0d:ea:27:6f:
                    7c:24:29:6c:62:0b:7d:a1:f4:a8:8b:56:36:7e:d0:
                    48:e4:d9:8e:11:7f:9f:4f:db:3a:3b:78:74:3f:8b:
                    90:5e:db:a5:0d:55:a2:78:25:94:31:47:e0:76:26:
                    b5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:2F:6C:6F:6C:ED:65:CC:DB:D7:F6:EF:79:E8:29:CD:07:88:A5:E2
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/OC9sb2ztZczb1_bveegpzQeIpeI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.132.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b7:28:cb:02:75:e9:a0:6d:e1:9c:5b:d6:4f:9c:53:b4:73:d8:
         f0:91:9f:7d:1f:c4:e2:2f:c9:ab:78:b7:ea:b8:76:1f:13:ed:
         da:fa:98:b8:b3:10:23:5b:74:db:d1:0e:61:54:62:15:05:06:
         cc:c6:a7:20:46:cc:2d:c8:cb:de:e8:06:4b:9d:40:82:76:93:
         9e:2a:dc:2c:2a:8a:a8:9d:7c:04:49:81:03:ab:dd:eb:35:01:
         16:aa:23:e5:a0:a0:f6:60:96:c6:3f:70:8e:94:19:32:f0:94:
         94:3d:15:fd:81:ca:51:b2:97:a0:dd:40:98:79:cd:63:45:c1:
         b5:48:32:ee:6f:b7:ed:50:c0:1c:b2:df:6e:cf:b4:51:3b:97:
         d4:b7:49:37:df:67:71:69:13:6a:07:1f:f9:74:3d:83:08:69:
         dd:e2:98:99:f1:ae:86:f9:e4:b5:68:aa:e5:cc:46:7a:a7:83:
         6a:7b:ed:2b:5c:b8:d2:81:fa:b6:fa:1f:86:30:49:b6:e8:f1:
         cd:27:0d:37:8a:04:df:b1:b0:bd:b9:a4:7a:8e:19:dd:97:75:
         4d:b3:1c:be:fb:64:3d:e3:9a:aa:51:ac:6c:0b:0e:26:32:96:
         ac:de:0c:b9:d0:5f:52:13:90:fe:ec:87:8d:a9:a8:43:9c:e6:
         b4:06:0b:1b
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAiIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yMzA1MDEw
MTM3NTVaFw0yNDA0MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDM4MkY2QzZGNkNFRDY1
Q0NEQkQ3RjZFRjc5RTgyOUNEMDc4OEE1RTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCa3c/T4N4lm3j6J6KLve8dMn7tcYE9SDkKJqVN5BHVMnckeaV7
71vmpceCf7xa/Gl2hF96bOQrXptVfXYnhyGHku2JUeVL2LBoyK1ivcrGaXHESRVp
ZVWrm+R/rppgKkuE7Ui8HOhzoiRJSJ62vUp3x8Rk9Zo9IcTGmAzx9wZzfnixJwb/
D4NA3iXI1o2gKoMdYFc1ttdo5O96Oag4Kl+aZENgAfPucWrKzs5U4Q9Z+OqDnIcY
7l/+oQLkriaYILRgxlrkgScxrtUD03ZODeonb3wkKWxiC32h9KiLVjZ+0Ejk2Y4R
f59P2zo7eHQ/i5Be26UNVaJ4JZQxR+B2JrWTAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUOC9sb2ztZczb1/bveegpzQeIpeIwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL09DOXNiMnp0WmN6YjFfYnZlZWdwelFlSXBlSS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAXShGAwDQYJKoZIhvcNAQELBQADggEBALcoywJ16aBt4Zxb1k+cU7Rz2PCR
n30fxOIvyat4t+q4dh8T7dr6mLizECNbdNvRDmFUYhUFBszGpyBGzC3Iy97oBkud
QIJ2k54q3CwqiqidfARJgQOr3es1ARaqI+WgoPZglsY/cI6UGTLwlJQ9Ff2BylGy
l6DdQJh5zWNFwbVIMu5vt+1QwByy327PtFE7l9S3STffZ3FpE2oHH/l0PYMIad3i
mJnxrob55LVoquXMRnqng2p77StcuNKB+rb6H4YwSbbo8c0nDTeKBN+xsL25pHqO
Gd2XdU2zHL77ZD3jmqpRrGwLDiYylqzeDLnQX1ITkP7sh42pqEOc5rQGCxs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org