Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Wcc1gbbu7Z-nMB2xtXHFs_kpnUo.roa
File:                     Wcc1gbbu7Z-nMB2xtXHFs_kpnUo.roa (raw, json)
Hash identifier:          JVi2zNluNPamOddJa18qqB/mkQItGvMTiAFh02CRX4w=
Subject key identifier:   59:C7:35:81:B6:EE:ED:9F:A7:30:1D:B1:B5:71:C5:B3:F9:29:9D:4A
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       021F
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Wcc1gbbu7Z-nMB2xtXHFs_kpnUo.roa
Signing time:             Mon 01 May 2023 01:37:53 +0000
ROA not before:           Mon 01 May 2023 01:37:53 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        203.181.96.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 543 (0x21f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:37:53 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=59C73581B6EEED9FA7301DB1B571C5B3F9299D4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:cf:04:2a:31:6b:55:d7:6d:6a:15:40:80:a6:
                    0d:89:fb:15:a9:7e:ac:d7:ff:05:71:cd:e5:6e:4f:
                    e5:33:2e:89:cd:77:a0:dd:ad:00:c2:91:68:1a:43:
                    55:43:f1:a0:e9:6a:f7:cf:65:3d:a1:e2:0f:3d:77:
                    87:36:b6:3a:3e:c5:83:ac:d6:d3:22:74:b9:d8:b0:
                    45:4f:2a:40:bb:23:25:87:74:71:d1:23:8b:9b:2f:
                    1a:f9:a6:40:09:84:a1:49:6c:97:94:0b:c5:d1:b7:
                    cf:48:5e:ca:3f:c9:f4:3d:1f:04:ef:f0:54:23:69:
                    dc:e4:e7:57:ab:a9:3c:1f:66:0d:c8:14:aa:39:e3:
                    44:00:cb:bf:a9:17:ca:2c:84:ae:d2:f7:67:0f:16:
                    f5:eb:e2:63:bb:9d:a3:69:9e:f2:10:c3:3c:20:2a:
                    61:1a:13:46:06:a6:85:34:48:da:bb:cc:e9:5b:08:
                    3a:2b:3d:7d:67:f3:8c:69:07:54:d4:86:b9:a6:6f:
                    af:b3:ad:b8:9a:7c:0d:cf:65:b5:de:91:1f:8c:7c:
                    7c:84:c1:fc:75:62:e2:3c:22:08:3b:01:d5:5d:f7:
                    51:c8:a3:fa:24:d6:64:d5:a3:31:9e:34:f7:3d:c8:
                    7f:28:25:ad:af:37:80:4b:ae:32:e9:09:64:82:96:
                    8e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C7:35:81:B6:EE:ED:9F:A7:30:1D:B1:B5:71:C5:B3:F9:29:9D:4A
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Wcc1gbbu7Z-nMB2xtXHFs_kpnUo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.181.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2f:94:d9:34:e3:ce:fe:4e:af:87:e5:4f:ee:53:16:0a:35:dc:
         4c:5f:1f:0a:55:12:e3:7a:c1:1e:10:f5:15:a5:ff:b7:c3:46:
         d0:c2:36:d2:f1:b6:16:0a:0d:64:97:6e:47:73:58:16:64:5a:
         80:04:22:65:02:82:ce:3a:60:ad:e9:38:c6:08:28:f8:28:a8:
         32:d4:2d:74:0b:6d:31:b7:4e:bc:8a:aa:c0:7c:4e:0e:77:cd:
         32:58:c2:8e:98:60:fa:b0:f1:65:fa:d4:3b:e3:1d:42:49:1b:
         29:32:5e:4e:ec:76:a6:53:fc:83:e6:4d:8c:97:aa:98:22:a6:
         6e:1a:52:b5:28:36:b5:0a:91:1e:57:23:1c:6b:68:9d:77:ef:
         93:fb:e7:67:d1:13:9d:67:97:51:26:a0:2c:d0:fc:e7:a6:73:
         e1:09:7b:13:f7:28:c9:ca:0d:4d:72:c6:82:e6:6c:49:37:27:
         58:b7:47:ab:a1:b7:fe:1f:89:55:4f:89:4c:cb:86:d3:2e:7a:
         87:89:67:94:1a:93:44:49:18:7a:be:ba:ab:f1:ae:c8:d5:46:
         cf:54:00:1e:9b:24:31:0e:4f:b0:ff:d4:82:21:92:0d:bd:51:
         41:68:95:ba:30:07:a9:10:df:16:e6:70:ac:97:77:cc:06:a4:
         33:8d:6c:ba
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAh8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yMzA1MDEw
MTM3NTNaFw0yNDA0MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDU5QzczNTgxQjZFRUVE
OUZBNzMwMURCMUI1NzFDNUIzRjkyOTlENEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDTzwQqMWtV121qFUCApg2J+xWpfqzX/wVxzeVuT+UzLonNd6Dd
rQDCkWgaQ1VD8aDpavfPZT2h4g89d4c2tjo+xYOs1tMidLnYsEVPKkC7IyWHdHHR
I4ubLxr5pkAJhKFJbJeUC8XRt89IXso/yfQ9HwTv8FQjadzk51erqTwfZg3IFKo5
40QAy7+pF8oshK7S92cPFvXr4mO7naNpnvIQwzwgKmEaE0YGpoU0SNq7zOlbCDor
PX1n84xpB1TUhrmmb6+zrbiafA3PZbXekR+MfHyEwfx1YuI8Igg7AdVd91HIo/ok
1mTVozGeNPc9yH8oJa2vN4BLrjLpCWSClo5FAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUWcc1gbbu7Z+nMB2xtXHFs/kpnUowHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL1djYzFnYmJ1N1otbk1CMnh0WEhGc19rcG5Vby5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAXLtWAwDQYJKoZIhvcNAQELBQADggEBAC+U2TTjzv5Or4flT+5TFgo13Exf
HwpVEuN6wR4Q9RWl/7fDRtDCNtLxthYKDWSXbkdzWBZkWoAEImUCgs46YK3pOMYI
KPgoqDLULXQLbTG3TryKqsB8Tg53zTJYwo6YYPqw8WX61DvjHUJJGykyXk7sdqZT
/IPmTYyXqpgipm4aUrUoNrUKkR5XIxxraJ1375P752fRE51nl1EmoCzQ/Oemc+EJ
exP3KMnKDU1yxoLmbEk3J1i3R6uht/4fiVVPiUzLhtMueoeJZ5Qak0RJGHq+uqvx
rsjVRs9UAB6bJDEOT7D/1IIhkg29UUFolbowB6kQ3xbmcKyXd8wGpDONbLo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org