Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/kLF2nNWDEBbAvP00gPmjOXsVlaw.roa
File:                     kLF2nNWDEBbAvP00gPmjOXsVlaw.roa (raw, json)
Hash identifier:          n4rcABJWgtFo43LwJG3nMVK1svECXPeuHifSx5n8svI=
Subject key identifier:   90:B1:76:9C:D5:83:10:16:C0:BC:FD:34:80:F9:A3:39:7B:15:95:AC
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       99
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/kLF2nNWDEBbAvP00gPmjOXsVlaw.roa
Signing time:             Tue 07 Jun 2022 10:19:15 +0000
ROA not before:           Tue 07 Jun 2022 10:19:15 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        111.100.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153 (0x99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:19:15 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=90B1769CD5831016C0BCFD3480F9A3397B1595AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:83:74:17:f6:28:bb:5a:f3:e4:23:79:24:73:
                    a1:56:75:0c:96:84:d2:e1:bf:85:1c:f3:92:15:75:
                    61:a5:5a:25:64:fb:5c:b3:7c:96:14:ae:da:aa:4b:
                    fc:5b:be:16:b8:d5:ec:57:be:14:46:fb:ad:e8:7c:
                    e3:d4:89:75:29:6b:d9:5b:65:2a:fd:40:5e:7b:eb:
                    48:20:fe:7f:29:e8:ee:fd:cb:be:a3:d2:ff:d4:f1:
                    c7:67:10:9b:cb:15:d7:14:d0:6c:ba:f4:ef:83:50:
                    54:b6:d9:0c:4c:f8:c8:cd:a7:36:b4:18:8e:52:41:
                    c5:05:90:2f:39:31:8c:b5:e8:3d:5a:f8:b6:51:35:
                    24:7e:44:65:ca:81:27:30:08:ce:5e:af:13:44:f3:
                    33:30:50:1f:89:4c:b8:e5:23:94:be:a1:f9:23:69:
                    15:ec:ef:05:cd:4a:fe:1c:4e:22:9a:7f:69:99:d2:
                    3e:1d:b2:d1:3c:9e:f1:66:22:9a:fa:9e:e1:65:1d:
                    52:80:48:83:74:60:ce:ad:e9:bc:2a:ce:99:d2:fa:
                    6c:45:07:1b:d9:18:b2:a1:2f:d0:aa:b9:91:16:a0:
                    46:5d:09:d9:95:9b:bd:69:77:38:4b:db:f1:84:8c:
                    7d:fb:e5:3b:52:71:8f:7b:80:42:13:fa:54:ad:0c:
                    e8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:B1:76:9C:D5:83:10:16:C0:BC:FD:34:80:F9:A3:39:7B:15:95:AC
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/kLF2nNWDEBbAvP00gPmjOXsVlaw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.100.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8c:61:16:65:a8:b2:be:5b:cb:58:be:35:b7:95:6b:35:bb:29:
         86:97:af:1f:43:ec:56:61:76:bf:6b:9e:f5:3b:d6:71:7b:41:
         a3:53:6a:34:3b:f6:b2:a3:cc:3c:9d:12:74:12:1e:4d:ca:23:
         c7:0b:de:81:b6:c2:e0:59:83:3f:5d:10:5f:df:c6:5b:ae:8c:
         be:6c:d0:a7:3f:25:09:d8:5c:00:39:bd:b6:ff:70:19:b1:d0:
         ae:26:2e:71:d9:a1:5f:99:3f:2b:36:88:52:44:df:80:52:cc:
         f9:2d:c8:ba:0e:74:1c:ea:35:64:cf:fc:85:79:c3:e0:cc:37:
         55:f1:32:7f:85:5b:36:d4:ee:4c:03:22:ab:03:fc:de:c6:12:
         10:42:55:c4:1f:d5:14:8d:54:8a:5e:b2:fb:d9:0a:81:5d:72:
         64:03:4c:29:7e:66:bc:da:7b:3e:21:48:62:17:43:c5:97:e2:
         27:eb:5f:b1:c3:32:56:38:e3:94:fe:07:ff:e0:04:e6:57:2f:
         85:0d:f7:cc:4b:69:b0:3a:06:df:9d:6a:24:a8:b0:79:67:88:
         64:35:a2:e2:70:ed:ec:ff:1e:7a:3d:80:d2:b1:d6:47:bd:2e:
         ab:18:5c:d4:80:ea:bb:11:86:5b:68:5b:d8:77:fe:63:5d:56:
         55:0a:c4:33
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yMjA2MDcx
MDE5MTVaFw0yMzA1MTUwMTMwMDRaMDMxMTAvBgNVBAMTKDkwQjE3NjlDRDU4MzEw
MTZDMEJDRkQzNDgwRjlBMzM5N0IxNTk1QUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCig3QX9ii7WvPkI3kkc6FWdQyWhNLhv4Uc85IVdWGlWiVk+1yz
fJYUrtqqS/xbvha41exXvhRG+63ofOPUiXUpa9lbZSr9QF5760gg/n8p6O79y76j
0v/U8cdnEJvLFdcU0Gy69O+DUFS22QxM+MjNpza0GI5SQcUFkC85MYy16D1a+LZR
NSR+RGXKgScwCM5erxNE8zMwUB+JTLjlI5S+ofkjaRXs7wXNSv4cTiKaf2mZ0j4d
stE8nvFmIpr6nuFlHVKASIN0YM6t6bwqzpnS+mxFBxvZGLKhL9CquZEWoEZdCdmV
m71pdzhL2/GEjH375TtScY97gEIT+lStDOhPAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUkLF2nNWDEBbAvP00gPmjOXsVlawwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL2tMRjJuTldERUJiQXZQMDBnUG1qT1hzVmxhdy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwBvZDANBgkqhkiG9w0BAQsFAAOCAQEAjGEWZaiyvlvLWL41t5VrNbsphpev
H0PsVmF2v2ue9TvWcXtBo1NqNDv2sqPMPJ0SdBIeTcojxwvegbbC4FmDP10QX9/G
W66MvmzQpz8lCdhcADm9tv9wGbHQriYucdmhX5k/KzaIUkTfgFLM+S3Iug50HOo1
ZM/8hXnD4Mw3VfEyf4VbNtTuTAMiqwP83sYSEEJVxB/VFI1Uil6y+9kKgV1yZANM
KX5mvNp7PiFIYhdDxZfiJ+tfscMyVjjjlP4H/+AE5lcvhQ33zEtpsDoG351qJKiw
eWeIZDWi4nDt7P8eej2A0rHWR70uqxhc1IDquxGGW2hb2Hf+Y11WVQrEMw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:02 2023 by rpki-client on console-fra.rpki-client.org