Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/W7e1KXjXskJNSQ7e9mjxLO6vpvs.roa
File:                     W7e1KXjXskJNSQ7e9mjxLO6vpvs.roa (raw, json)
Hash identifier:          IhOAsHwb4p7T8pVUGMgpFPs1qAzXAJgxCaw+UqzZCc4=
Subject key identifier:   5B:B7:B5:29:78:D7:B2:42:4D:49:0E:DE:F6:68:F1:2C:EE:AF:A6:FB
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       85
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/W7e1KXjXskJNSQ7e9mjxLO6vpvs.roa
Signing time:             Tue 07 Jun 2022 10:13:15 +0000
ROA not before:           Tue 07 Jun 2022 10:13:15 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        124.211.128.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:13:15 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=5BB7B52978D7B2424D490EDEF668F12CEEAFA6FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2b:c4:84:a9:1c:8f:59:94:50:37:69:2e:f3:
                    9f:f0:19:6b:cc:cc:d2:58:48:50:4c:8a:ed:4f:74:
                    09:18:25:ea:39:82:c8:e2:79:70:85:6d:66:e5:86:
                    bc:50:c1:46:68:49:8d:b9:2d:84:6d:8e:d9:0b:d6:
                    61:11:5d:df:ec:d6:9e:2d:0d:d4:1a:87:4e:ae:5c:
                    e0:eb:e6:34:bd:e3:ef:ff:e9:9e:50:77:e2:f2:cd:
                    de:1d:62:a5:b3:5c:bf:5d:1f:2c:16:6b:a9:66:6d:
                    8b:41:94:c2:84:3a:7f:36:91:ad:be:e6:47:ed:de:
                    e4:93:c3:1d:52:9f:c9:43:3d:82:4b:70:be:2c:cd:
                    89:49:ef:57:30:b3:01:36:86:20:9e:80:30:a4:e2:
                    06:bb:65:95:4e:d2:1c:33:62:57:f1:8a:99:1f:cd:
                    d1:74:57:37:7e:78:82:9b:25:65:04:01:b7:d2:f5:
                    08:1c:a7:71:56:de:fa:4c:d6:c8:2d:19:cc:9d:60:
                    2d:fb:10:23:10:f4:fe:80:3d:52:7c:71:25:47:85:
                    f2:5f:e6:fe:45:df:f8:90:45:4a:88:59:e2:00:e5:
                    7e:3f:da:94:fa:5f:2c:1e:f5:b1:ce:20:84:6d:64:
                    c4:9f:17:16:ed:e0:e3:e2:27:d5:7c:98:a4:d2:c3:
                    3d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B7:B5:29:78:D7:B2:42:4D:49:0E:DE:F6:68:F1:2C:EE:AF:A6:FB
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/W7e1KXjXskJNSQ7e9mjxLO6vpvs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.211.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         95:a3:f7:cc:2a:f0:e7:00:5c:64:77:d5:b1:47:e9:85:5c:ac:
         a9:7a:dc:02:a4:a7:8c:d9:c8:c8:59:96:bb:a1:d0:84:ac:ee:
         bc:1b:29:dd:5c:20:e4:64:20:d6:41:e5:c6:d8:7f:50:bd:99:
         c9:8e:f0:cf:2c:40:fd:d2:8a:75:b3:3e:4a:88:c3:5d:04:49:
         b0:06:32:c4:f6:93:ce:00:ca:5b:5d:48:2d:b4:3a:6c:2c:bb:
         79:5b:0d:f9:d0:8a:1d:e0:fd:f8:9a:26:06:19:98:1d:9f:d2:
         0b:11:d1:1e:ab:53:b4:c6:f9:e0:07:47:58:b8:1d:6f:81:c2:
         a7:62:4d:29:31:38:a4:b8:03:82:84:26:06:ec:d7:0c:af:48:
         29:5e:24:3e:0f:6c:91:5e:30:8d:83:aa:fb:08:a6:3b:9e:b2:
         5f:79:8f:fe:ef:55:68:fd:63:1d:ce:70:c1:53:a9:e9:c4:00:
         8c:ad:6d:e0:41:4b:50:ae:5e:d3:d4:61:3e:a4:58:fa:a1:c4:
         ac:da:8f:85:1a:47:bb:b6:54:c6:8c:60:c4:7e:5f:4f:13:da:
         d7:0b:e7:07:10:2c:45:72:22:92:c4:1c:49:ff:a4:8b:88:89:
         c2:93:a7:00:18:50:5e:fc:2a:52:43:b1:fc:1f:8a:85:8e:a5:
         54:af:86:c4
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yMjA2MDcx
MDEzMTVaFw0yMzA1MTUwMTMwMDRaMDMxMTAvBgNVBAMTKDVCQjdCNTI5NzhEN0Iy
NDI0RDQ5MEVERUY2NjhGMTJDRUVBRkE2RkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCuK8SEqRyPWZRQN2ku85/wGWvMzNJYSFBMiu1PdAkYJeo5gsji
eXCFbWblhrxQwUZoSY25LYRtjtkL1mERXd/s1p4tDdQah06uXODr5jS94+//6Z5Q
d+Lyzd4dYqWzXL9dHywWa6lmbYtBlMKEOn82ka2+5kft3uSTwx1Sn8lDPYJLcL4s
zYlJ71cwswE2hiCegDCk4ga7ZZVO0hwzYlfxipkfzdF0Vzd+eIKbJWUEAbfS9Qgc
p3FW3vpM1sgtGcydYC37ECMQ9P6APVJ8cSVHhfJf5v5F3/iQRUqIWeIA5X4/2pT6
Xywe9bHOIIRtZMSfFxbt4OPiJ9V8mKTSwz0zAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUW7e1KXjXskJNSQ7e9mjxLO6vpvswHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL1c3ZTFLWGpYc2tKTlNRN2U5bWp4TE82dnB2cy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAd804AwDQYJKoZIhvcNAQELBQADggEBAJWj98wq8OcAXGR31bFH6YVcrKl6
3AKkp4zZyMhZlruh0ISs7rwbKd1cIORkINZB5cbYf1C9mcmO8M8sQP3SinWzPkqI
w10ESbAGMsT2k84AyltdSC20Omwsu3lbDfnQih3g/fiaJgYZmB2f0gsR0R6rU7TG
+eAHR1i4HW+BwqdiTSkxOKS4A4KEJgbs1wyvSCleJD4PbJFeMI2DqvsIpjuesl95
j/7vVWj9Yx3OcMFTqenEAIytbeBBS1CuXtPUYT6kWPqhxKzaj4UaR7u2VMaMYMR+
X08T2tcL5wcQLEVyIpLEHEn/pIuIicKTpwAYUF78KlJDsfwfioWOpVSvhsQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org