Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/nr8wcJXJC3Tm2p_GeuqZpRh7WbY.roa
File:                     nr8wcJXJC3Tm2p_GeuqZpRh7WbY.roa (raw, json)
Hash identifier:          nSwmU6dpkZy6T3i1s1bg1LKEriGAB7R9zft3VhSE+I4=
Subject key identifier:   9E:BF:30:70:95:C9:0B:74:E6:DA:9F:C6:7A:EA:99:A5:18:7B:59:B6
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       6C
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/nr8wcJXJC3Tm2p_GeuqZpRh7WbY.roa
Signing time:             Tue 07 Jun 2022 10:07:16 +0000
ROA not before:           Tue 07 Jun 2022 10:07:16 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        61.204.0.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:07:16 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=9EBF307095C90B74E6DA9FC67AEA99A5187B59B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2c:64:87:6b:dc:8e:09:8a:6c:9a:c0:ae:17:
                    a8:bb:9e:1a:83:3c:26:d8:3c:01:b9:84:70:5d:53:
                    7d:35:77:27:33:d5:2f:0c:c6:57:d3:88:b2:3b:46:
                    2c:66:61:91:fe:36:45:8f:35:2c:d5:60:43:e3:59:
                    fa:4d:05:7c:61:b6:f7:e6:d0:31:6f:7e:6d:df:98:
                    a6:09:63:4a:e8:6e:8d:86:27:d2:5e:58:1f:28:ac:
                    36:57:aa:62:c9:07:c9:1e:f3:41:9d:50:72:d6:be:
                    4c:2c:7b:39:27:f2:96:89:3d:d3:cd:60:a4:00:1b:
                    5e:df:a9:50:f0:13:d7:af:66:71:3c:2a:21:82:b9:
                    01:5a:93:69:e3:bb:89:a8:b6:17:0c:da:1d:6c:a7:
                    e4:2b:7d:49:6b:8c:97:64:83:1f:7a:d1:ff:c1:cf:
                    40:64:3a:29:ed:87:d3:5c:79:43:c9:28:f6:75:51:
                    aa:eb:90:7b:76:ce:cb:03:45:41:e6:9c:59:b0:c0:
                    f5:4c:6c:c2:6a:ac:81:35:09:76:dc:74:df:03:07:
                    43:b4:29:be:5e:f6:fe:9e:99:41:a3:fd:42:cb:e2:
                    84:29:aa:0b:d1:7c:87:22:4e:43:c5:3e:42:08:69:
                    1c:40:aa:68:97:55:d8:d9:a0:ba:19:7c:34:77:68:
                    19:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:BF:30:70:95:C9:0B:74:E6:DA:9F:C6:7A:EA:99:A5:18:7B:59:B6
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/nr8wcJXJC3Tm2p_GeuqZpRh7WbY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.204.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         62:ca:07:a6:e2:34:f4:f0:44:e2:01:9d:90:5c:cb:e7:e0:f9:
         77:8f:a2:bb:72:c2:ad:ec:46:f0:e0:0b:9e:fd:99:70:14:a7:
         7e:49:9d:fd:7d:7d:e6:61:bb:49:7c:50:92:58:f4:27:3f:e9:
         52:cf:a9:d4:22:3a:cc:49:a0:00:87:f5:a9:3b:ff:e6:b2:46:
         4f:2a:98:3f:86:03:82:2c:be:ac:a5:02:db:c3:bb:66:80:5c:
         b1:2c:f6:4e:e3:1f:3e:01:1e:fd:35:13:8a:e9:43:c9:16:5e:
         88:b8:86:f3:fb:87:a6:92:eb:16:f6:a2:7d:b9:7c:be:08:5e:
         87:31:12:ea:6d:67:46:57:34:61:77:89:6d:08:1a:bb:f9:b3:
         e5:4c:dd:8e:21:f4:ab:63:a4:e2:26:6b:6f:c9:46:94:99:6a:
         99:fb:73:e7:d5:16:d2:1c:b7:ff:d6:94:e7:05:0e:53:75:d7:
         2d:cc:75:f5:5b:8b:b3:bc:a9:1e:ad:8e:8a:a4:77:9a:ba:2c:
         32:66:5a:fa:20:0a:a9:e9:2c:0a:e8:54:53:2b:b8:18:0e:24:
         30:79:c9:49:a4:98:e7:a8:fe:d7:f4:85:d6:a0:e4:74:05:06:
         76:d1:1e:3a:2c:2b:07:74:d4:82:33:3b:03:7f:9c:4c:61:b9:
         cc:2e:74:19
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBbDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNUJG
QTNFNTNFNTkxNDkyMzlBMTY4REZEOTJDNzU3NDVBQjY2Q0I2MB4XDTIyMDYwNzEw
MDcxNloXDTIzMDUxNTAxMzAwNFowMzExMC8GA1UEAxMoOUVCRjMwNzA5NUM5MEI3
NEU2REE5RkM2N0FFQTk5QTUxODdCNTlCNjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALAsZIdr3I4JimyawK4XqLueGoM8Jtg8AbmEcF1TfTV3JzPVLwzG
V9OIsjtGLGZhkf42RY81LNVgQ+NZ+k0FfGG29+bQMW9+bd+YpgljSuhujYYn0l5Y
HyisNleqYskHyR7zQZ1Qcta+TCx7OSfylok9081gpAAbXt+pUPAT169mcTwqIYK5
AVqTaeO7iai2FwzaHWyn5Ct9SWuMl2SDH3rR/8HPQGQ6Ke2H01x5Q8ko9nVRquuQ
e3bOywNFQeacWbDA9UxswmqsgTUJdtx03wMHQ7Qpvl72/p6ZQaP9QsvihCmqC9F8
hyJOQ8U+QghpHECqaJdV2Nmguhl8NHdoGSkCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSevzBwlckLdOban8Z66pmlGHtZtjAfBgNVHSMEGDAWgBQVv6PlPlkUkjmhaN/Z
LHV0WrZstjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTYxL0ZiLWo1VDVaRkpJNW9XamYyU3gxZEZxMmJMWS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZiLWo1VDVaRkpJNW9XamYyU3gxZEZx
MmJMWS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8xNjEvbnI4d2NKWEpDM1RtMnBfR2V1cVpwUmg3V2JZLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBz3MADANBgkqhkiG9w0BAQsFAAOCAQEAYsoHpuI09PBE4gGdkFzL5+D5d4+i
u3LCrexG8OALnv2ZcBSnfkmd/X195mG7SXxQklj0Jz/pUs+p1CI6zEmgAIf1qTv/
5rJGTyqYP4YDgiy+rKUC28O7ZoBcsSz2TuMfPgEe/TUTiulDyRZeiLiG8/uHppLr
Fvaifbl8vghehzES6m1nRlc0YXeJbQgau/mz5UzdjiH0q2Ok4iZrb8lGlJlqmftz
59UW0hy3/9aU5wUOU3XXLcx19VuLs7ypHq2OiqR3mrosMmZa+iAKqeksCuhUUyu4
GA4kMHnJSaSY56j+1/SF1qDkdAUGdtEeOiwrB3TUgjM7A3+cTGG5zC50GQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org