Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/fNLbZ-Bs9aaLnjk3MrHjcRCkmJE.roa
File:                     fNLbZ-Bs9aaLnjk3MrHjcRCkmJE.roa (raw, json)
Hash identifier:          MicNa+ZHgS3ocNdoLK6sj5dFWu+n2i42vp6iTJVk5Rg=
Subject key identifier:   7C:D2:DB:67:E0:6C:F5:A6:8B:9E:39:37:32:B1:E3:71:10:A4:98:91
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       E6
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/fNLbZ-Bs9aaLnjk3MrHjcRCkmJE.roa
Signing time:             Tue 14 Jun 2022 09:32:09 +0000
ROA not before:           Tue 14 Jun 2022 09:32:09 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        118.153.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 230 (0xe6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun 14 09:32:09 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=7CD2DB67E06CF5A68B9E393732B1E37110A49891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:39:90:60:1a:93:a6:18:8c:f0:0d:81:37:5a:
                    76:a2:9b:94:50:b4:56:4c:a9:af:f2:28:d7:d1:20:
                    1e:38:6a:cd:0a:94:b5:88:e8:3a:c7:4f:71:56:87:
                    2d:2b:a4:06:38:1d:c6:04:4d:a6:9e:a8:43:34:ce:
                    17:d6:29:5b:cb:4f:a8:56:5a:7f:d3:e9:12:cd:f5:
                    5d:cd:1f:8f:68:ad:2e:df:a5:f4:ca:37:bb:5d:1c:
                    6e:39:a1:6c:f0:29:24:b4:e7:00:91:39:17:15:6e:
                    38:11:c4:75:ce:62:86:76:11:96:55:b5:0e:d1:88:
                    f3:0e:d2:71:21:39:f9:1c:15:fc:e7:0d:85:c7:a8:
                    cd:d0:77:f4:b2:09:17:b2:58:0f:6a:b2:d3:dd:dd:
                    74:22:bb:5b:88:c0:1c:07:b2:41:45:da:44:34:74:
                    3f:1a:00:a6:5e:d5:30:7e:d3:67:df:e6:a0:24:2c:
                    a0:5a:e2:c1:c9:0c:0e:f9:ff:26:97:c7:f8:73:d6:
                    36:8a:8e:6d:a0:e6:a4:49:47:5f:67:78:2d:c4:72:
                    51:e7:b0:74:e4:a4:88:e5:b7:b6:d3:46:8c:c6:da:
                    42:09:7f:aa:42:2b:c9:2c:64:34:9b:0f:25:18:96:
                    08:1e:4f:57:6d:3a:57:7c:fb:44:b9:7c:50:76:45:
                    48:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D2:DB:67:E0:6C:F5:A6:8B:9E:39:37:32:B1:E3:71:10:A4:98:91
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/fNLbZ-Bs9aaLnjk3MrHjcRCkmJE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.153.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         78:f3:e9:16:3b:7e:1f:dd:d9:04:a1:0b:00:3c:a8:80:a5:54:
         30:23:c5:a1:69:50:20:f9:aa:ba:a2:d4:89:e9:c6:fa:42:08:
         91:7f:80:ad:d4:d4:1a:1d:2d:ce:70:c7:dc:ab:9b:9e:96:fb:
         1a:d9:27:b4:a0:1c:d3:b8:ec:e9:63:9b:0e:f1:b7:35:c6:a1:
         d2:50:ee:15:c7:52:33:84:4e:87:6f:a6:68:10:8f:92:bb:1d:
         0c:d8:14:62:27:ff:44:9c:54:40:3c:49:80:b4:24:50:8a:21:
         fb:2a:ea:5a:ad:1b:9f:b5:7c:44:ab:a6:71:20:17:81:47:38:
         08:d8:45:1b:ae:e5:4c:e7:19:eb:c1:aa:aa:12:41:1a:83:f5:
         8f:fd:be:0d:cd:d1:42:b4:3c:9a:88:d4:6e:a0:b1:3b:27:cd:
         36:f7:f9:4b:f7:c3:f1:2d:76:a4:69:b5:2a:c8:de:1e:02:85:
         46:3c:14:ab:7f:96:64:ef:09:ce:84:dd:5e:e6:47:e3:3b:ea:
         fa:76:43:21:6d:6e:09:2f:21:a5:cf:c5:36:00:ce:6f:a4:ba:
         39:a1:9e:e0:c3:82:56:77:34:46:72:8a:44:73:24:b2:70:ed:
         f4:1b:9e:e2:80:bd:93:82:12:42:08:83:8b:d1:cd:8a:60:b5:
         58:9d:a1:e7
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yMjA2MTQw
OTMyMDlaFw0yMzA1MTUwMTMwMDRaMDMxMTAvBgNVBAMTKDdDRDJEQjY3RTA2Q0Y1
QTY4QjlFMzkzNzMyQjFFMzcxMTBBNDk4OTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0OZBgGpOmGIzwDYE3Wnaim5RQtFZMqa/yKNfRIB44as0KlLWI
6DrHT3FWhy0rpAY4HcYETaaeqEM0zhfWKVvLT6hWWn/T6RLN9V3NH49orS7fpfTK
N7tdHG45oWzwKSS05wCRORcVbjgRxHXOYoZ2EZZVtQ7RiPMO0nEhOfkcFfznDYXH
qM3Qd/SyCReyWA9qstPd3XQiu1uIwBwHskFF2kQ0dD8aAKZe1TB+02ff5qAkLKBa
4sHJDA75/yaXx/hz1jaKjm2g5qRJR19neC3EclHnsHTkpIjlt7bTRozG2kIJf6pC
K8ksZDSbDyUYlggeT1dtOld8+0S5fFB2RUi3AgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUfNLbZ+Bs9aaLnjk3MrHjcRCkmJEwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL2ZOTGJaLUJzOWFhTG5qazNNckhqY1JDa21KRS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwB2mTANBgkqhkiG9w0BAQsFAAOCAQEAePPpFjt+H93ZBKELADyogKVUMCPF
oWlQIPmquqLUienG+kIIkX+ArdTUGh0tznDH3Kubnpb7GtkntKAc07js6WObDvG3
Ncah0lDuFcdSM4ROh2+maBCPkrsdDNgUYif/RJxUQDxJgLQkUIoh+yrqWq0bn7V8
RKumcSAXgUc4CNhFG67lTOcZ68GqqhJBGoP1j/2+Dc3RQrQ8mojUbqCxOyfNNvf5
S/fD8S12pGm1KsjeHgKFRjwUq3+WZO8JzoTdXuZH4zvq+nZDIW1uCS8hpc/FNgDO
b6S6OaGe4MOCVnc0RnKKRHMksnDt9Bue4oC9k4ISQgiDi9HNimC1WJ2h5w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org