Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/T2vKMKbW7nok6XjEi41veIJDWjI.roa
File:                     T2vKMKbW7nok6XjEi41veIJDWjI.roa (raw, json)
Hash identifier:          QyMOSbynqT9ks9URwFMw+aaZdjtLKjJu26I+wxA++Mw=
Subject key identifier:   4F:6B:CA:30:A6:D6:EE:7A:24:E9:78:C4:8B:8D:6F:78:82:43:5A:32
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       01D3
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/T2vKMKbW7nok6XjEi41veIJDWjI.roa
Signing time:             Mon 01 May 2023 01:33:36 +0000
ROA not before:           Mon 01 May 2023 01:33:36 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        222.10.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 467 (0x1d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:33:36 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=4F6BCA30A6D6EE7A24E978C48B8D6F7882435A32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fb:a6:12:16:41:27:7e:cc:ca:bf:6d:55:ef:
                    32:6c:8f:b7:4e:41:7b:0c:b1:a3:cf:c6:b6:a0:c8:
                    b0:75:dc:fe:1f:9e:74:4e:14:e1:4f:23:52:83:47:
                    de:6a:01:1a:94:2b:6d:65:ed:98:a0:29:b7:3a:f6:
                    1f:74:62:9c:e0:2a:41:02:21:00:9b:22:45:2d:71:
                    04:44:aa:b0:75:84:d1:e9:77:ae:79:a3:58:96:a7:
                    76:65:5c:0e:7c:c2:52:39:8c:51:ca:93:ff:53:c8:
                    7c:31:51:73:b0:96:d6:2f:69:6b:a0:00:83:8c:18:
                    f1:a9:b6:1e:fe:e7:94:83:d3:3e:10:c8:49:8c:8f:
                    67:ee:49:2f:ab:64:74:2f:66:e4:9d:93:2d:35:95:
                    6f:27:de:63:b6:72:f5:58:c1:60:c7:d1:05:cb:c2:
                    d9:76:19:34:9b:7a:2b:b7:83:db:a0:82:fd:9d:59:
                    31:97:b7:ba:bc:73:5d:0c:15:34:97:d1:b7:36:b6:
                    d9:2d:31:1c:2f:06:24:5b:91:36:37:1b:c0:75:b7:
                    4f:75:47:1a:5c:ef:cb:ff:2d:f4:ae:86:1e:0f:2c:
                    59:6d:3a:c9:81:67:d2:e0:93:ef:19:7b:0a:07:d6:
                    56:24:dc:3a:da:02:fd:19:1c:76:6c:92:42:2c:5a:
                    ce:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:6B:CA:30:A6:D6:EE:7A:24:E9:78:C4:8B:8D:6F:78:82:43:5A:32
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/T2vKMKbW7nok6XjEi41veIJDWjI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.10.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a6:c9:40:3c:3c:e5:42:ff:45:d6:50:c5:fe:89:f2:9e:e9:51:
         c3:4b:d8:a4:ac:d7:bc:8c:a7:ce:5c:18:42:d6:18:48:1e:c5:
         01:78:c6:6f:29:06:cc:63:14:e0:60:49:93:72:2c:72:55:3e:
         51:fe:5f:58:14:13:c6:8e:62:b2:e5:17:a4:a1:5d:a9:79:ad:
         b0:5d:43:69:d0:0d:89:15:5c:7d:3d:cf:f0:01:bd:d5:b0:23:
         32:87:ac:1e:4f:3c:ad:73:82:e6:c7:be:f6:02:85:1b:39:68:
         71:6d:f3:fd:c5:42:90:a6:7d:97:e6:7f:09:39:21:83:7f:c7:
         94:a3:ac:c8:ae:11:9a:d3:28:55:89:73:fe:1a:6d:62:27:97:
         ed:44:d9:82:50:aa:6a:86:0d:53:67:e3:43:48:a0:8b:26:51:
         fb:ed:bb:9f:6e:84:8a:06:fb:0b:3c:bc:76:a3:5e:a2:2c:1d:
         63:7b:40:e6:96:10:ee:39:7a:c5:1c:8b:b3:a4:c0:2a:be:60:
         c5:b1:e1:9d:38:db:2c:0f:52:31:cd:68:e8:9b:34:da:25:f5:
         f2:96:09:4b:36:96:d5:3a:df:56:c0:f9:6f:6d:fa:3f:8f:6d:
         ef:cf:14:dc:fa:85:8b:78:42:68:53:99:f4:a0:22:6a:80:17:
         24:c5:47:92
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yMzA1MDEw
MTMzMzZaFw0yNDA0MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDRGNkJDQTMwQTZENkVF
N0EyNEU5NzhDNDhCOEQ2Rjc4ODI0MzVBMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8+6YSFkEnfszKv21V7zJsj7dOQXsMsaPPxragyLB13P4fnnRO
FOFPI1KDR95qARqUK21l7ZigKbc69h90YpzgKkECIQCbIkUtcQREqrB1hNHpd655
o1iWp3ZlXA58wlI5jFHKk/9TyHwxUXOwltYvaWugAIOMGPGpth7+55SD0z4QyEmM
j2fuSS+rZHQvZuSdky01lW8n3mO2cvVYwWDH0QXLwtl2GTSbeiu3g9uggv2dWTGX
t7q8c10MFTSX0bc2ttktMRwvBiRbkTY3G8B1t091Rxpc78v/LfSuhh4PLFltOsmB
Z9Lgk+8ZewoH1lYk3DraAv0ZHHZskkIsWs4nAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUT2vKMKbW7nok6XjEi41veIJDWjIwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL1QydktNS2JXN25vazZYakVpNDF2ZUlKRFdqSS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwDeCjANBgkqhkiG9w0BAQsFAAOCAQEApslAPDzlQv9F1lDF/onynulRw0vY
pKzXvIynzlwYQtYYSB7FAXjGbykGzGMU4GBJk3IsclU+Uf5fWBQTxo5isuUXpKFd
qXmtsF1DadANiRVcfT3P8AG91bAjMoesHk88rXOC5se+9gKFGzlocW3z/cVCkKZ9
l+Z/CTkhg3/HlKOsyK4RmtMoVYlz/hptYieX7UTZglCqaoYNU2fjQ0igiyZR++27
n26Eigb7Czy8dqNeoiwdY3tA5pYQ7jl6xRyLs6TAKr5gxbHhnTjbLA9SMc1o6Js0
2iX18pYJSzaW1TrfVsD5b236P49t788U3PqFi3hCaFOZ9KAiaoAXJMVHkg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org