Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/phGribo7NzORenSQSZHPebzEK-g.roa
File:                     phGribo7NzORenSQSZHPebzEK-g.roa (raw, json)
Hash identifier:          EH+BZmU3wyGy9zQwhA4BMzCG7jBR46TAPho/Dq9iFUs=
Subject key identifier:   A6:11:AB:89:BA:3B:37:33:91:7A:74:90:49:91:CF:79:BC:C4:2B:E8
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       3F
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/phGribo7NzORenSQSZHPebzEK-g.roa
Signing time:             Tue 31 May 2022 09:14:29 +0000
ROA not before:           Tue 31 May 2022 09:14:29 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        118.158.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May 31 09:14:29 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=A611AB89BA3B3733917A74904991CF79BCC42BE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:56:b1:9b:ec:85:61:93:04:00:dc:c7:a8:93:
                    a2:50:d4:7f:e9:60:30:61:1f:cd:2e:41:8f:80:51:
                    6c:ee:29:ff:a0:84:bd:99:77:f7:65:d7:66:ba:03:
                    83:8f:95:b3:42:66:1d:3a:2c:b9:97:dd:ec:66:d6:
                    fe:da:2a:d8:25:9e:84:a5:4e:d7:fa:ee:9e:03:e7:
                    46:57:93:ff:2e:5e:57:e4:cb:36:2b:1f:97:76:37:
                    ee:ad:58:0b:44:64:8b:47:5f:1d:ba:34:05:71:40:
                    cb:5d:27:96:96:95:d7:1a:32:89:30:6a:5b:33:77:
                    6a:b5:56:f8:43:80:bd:6b:e6:aa:b2:ad:2c:b2:46:
                    78:30:92:da:1f:50:5d:e1:17:8d:bb:d3:e9:cd:00:
                    62:29:67:84:10:52:53:ef:e4:a5:db:9e:63:c7:ec:
                    67:55:8b:ff:e4:9e:6b:33:b3:43:9c:10:4e:2d:6c:
                    71:05:98:dc:6d:b6:5f:4c:ff:e6:fa:89:3f:56:cd:
                    b3:bb:8d:e4:d0:24:fc:88:fa:45:6c:75:a4:18:f9:
                    6b:b4:bc:5e:09:1c:8b:60:57:8d:ae:ad:02:7e:8e:
                    bf:c3:9c:d4:4a:1c:78:7a:65:f3:ca:97:13:00:d1:
                    58:6a:38:45:bc:f0:ad:aa:41:a6:44:f0:93:ab:a7:
                    c5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:11:AB:89:BA:3B:37:33:91:7A:74:90:49:91:CF:79:BC:C4:2B:E8
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/phGribo7NzORenSQSZHPebzEK-g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.158.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3d:d6:01:37:9b:fb:30:eb:fa:79:43:c3:69:da:67:8a:86:ab:
         e8:c6:12:df:04:d1:dd:f2:d0:65:e5:f9:2c:d3:89:61:00:e1:
         28:cc:93:21:86:53:ea:28:0d:31:48:13:b5:0f:77:6e:ef:35:
         da:bc:9f:d7:b4:02:c8:4b:dd:90:f8:3f:c7:22:19:26:b3:6f:
         66:54:a9:93:90:06:7f:e0:3c:3a:30:16:e7:37:af:23:b9:d4:
         c3:6c:0d:07:cb:21:a9:2c:4a:28:5e:35:79:7e:e7:b0:40:bc:
         3a:5f:f8:e2:25:8d:94:fd:15:c0:f5:1f:39:1e:3b:2a:9c:25:
         04:2c:d7:39:53:2f:0d:f8:00:59:e2:93:c7:dd:fc:de:52:c1:
         39:c0:f3:47:d2:7e:22:d6:92:bb:cc:4c:c6:38:f0:1d:cf:e5:
         e0:8d:ea:57:86:37:87:4b:50:aa:17:ca:ba:5d:ba:b6:af:4a:
         e4:e6:c7:3b:13:f3:37:2b:e9:2e:b0:fd:26:63:d3:68:02:ef:
         03:50:9a:4c:40:6e:18:dd:ec:82:62:a2:0a:81:96:dd:4c:d3:
         da:91:3f:a1:66:3c:e9:6c:df:3a:41:bf:00:bd:7b:8a:29:eb:
         b9:47:a4:11:7d:68:4f:08:6f:57:7a:41:2c:05:6a:b3:e5:75:
         a2:ba:5f:80
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIBPzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNUJG
QTNFNTNFNTkxNDkyMzlBMTY4REZEOTJDNzU3NDVBQjY2Q0I2MB4XDTIyMDUzMTA5
MTQyOVoXDTIzMDUxNTAxMzAwNFowMzExMC8GA1UEAxMoQTYxMUFCODlCQTNCMzcz
MzkxN0E3NDkwNDk5MUNGNzlCQ0M0MkJFODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANVWsZvshWGTBADcx6iTolDUf+lgMGEfzS5Bj4BRbO4p/6CEvZl3
92XXZroDg4+Vs0JmHTosuZfd7GbW/toq2CWehKVO1/rungPnRleT/y5eV+TLNisf
l3Y37q1YC0Rki0dfHbo0BXFAy10nlpaV1xoyiTBqWzN3arVW+EOAvWvmqrKtLLJG
eDCS2h9QXeEXjbvT6c0AYilnhBBSU+/kpdueY8fsZ1WL/+SeazOzQ5wQTi1scQWY
3G22X0z/5vqJP1bNs7uN5NAk/Ij6RWx1pBj5a7S8Xgkci2BXja6tAn6Ov8Oc1Eoc
eHpl88qXEwDRWGo4RbzwrapBpkTwk6unxWUCAwEAAaOCAiMwggIfMB0GA1UdDgQW
BBSmEauJujs3M5F6dJBJkc95vMQr6DAfBgNVHSMEGDAWgBQVv6PlPlkUkjmhaN/Z
LHV0WrZstjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTYxL0ZiLWo1VDVaRkpJNW9XamYyU3gxZEZxMmJMWS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZiLWo1VDVaRkpJNW9XamYyU3gxZEZx
MmJMWS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8xNjEvcGhHcmlibzdOek9SZW5TUVNaSFBlYnpFSy1nLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw
BQMDAHaeMA0GCSqGSIb3DQEBCwUAA4IBAQA91gE3m/sw6/p5Q8Np2meKhqvoxhLf
BNHd8tBl5fks04lhAOEozJMhhlPqKA0xSBO1D3du7zXavJ/XtALIS92Q+D/HIhkm
s29mVKmTkAZ/4Dw6MBbnN68judTDbA0HyyGpLEooXjV5fuewQLw6X/jiJY2U/RXA
9R85HjsqnCUELNc5Uy8N+ABZ4pPH3fzeUsE5wPNH0n4i1pK7zEzGOPAdz+XgjepX
hjeHS1CqF8q6Xbq2r0rk5sc7E/M3K+kusP0mY9NoAu8DUJpMQG4Y3eyCYqIKgZbd
TNPakT+hZjzpbN86Qb8AvXuKKeu5R6QRfWhPCG9XekEsBWqz5XWiul+A
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org