Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/wptaYS7b5p64bYFxYmPM1VD6ZZI.roa
File:                     wptaYS7b5p64bYFxYmPM1VD6ZZI.roa (raw, json)
Hash identifier:          dpft9oCzagAkpaR1FtDVrf5rkf6B1MJzXC6oVw6H0zY=
Subject key identifier:   C2:9B:5A:61:2E:DB:E6:9E:B8:6D:81:71:62:63:CC:D5:50:FA:65:92
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0190
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/wptaYS7b5p64bYFxYmPM1VD6ZZI.roa
Signing time:             Mon 01 May 2023 01:30:29 +0000
ROA not before:           Mon 01 May 2023 01:30:29 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        59.141.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 400 (0x190)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:30:29 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=C29B5A612EDBE69EB86D81716263CCD550FA6592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:76:b2:62:52:a1:d3:f6:1f:5d:15:73:be:83:
                    b4:86:c5:cd:fe:a6:9c:d5:2b:94:1a:11:50:db:99:
                    06:ab:22:53:98:3b:d5:28:53:61:7d:08:6a:9e:f5:
                    2a:c3:b0:c8:1b:d9:59:31:2e:02:4a:f5:2e:f7:4d:
                    99:3b:18:52:66:56:a2:cd:49:13:e6:10:d0:ca:f1:
                    09:06:a4:2a:25:c7:15:03:b4:ef:3b:dd:42:0e:62:
                    2a:75:cc:ec:64:6f:a9:28:70:7b:70:b3:ad:50:3c:
                    40:47:0a:2d:f6:14:2e:00:1e:52:7a:73:79:d3:33:
                    8b:15:ca:86:75:59:23:d9:18:8c:50:1c:4d:cb:2d:
                    7d:dd:ac:50:ab:d9:3d:00:53:da:d7:13:75:cf:13:
                    9b:90:1b:8e:b4:46:54:e9:ce:81:00:4f:52:8e:71:
                    8b:c2:c8:c9:9f:0c:65:7d:c5:9f:04:c7:20:d9:fd:
                    f7:fe:5b:c6:b4:c2:85:7c:1d:f9:f7:64:3b:3c:d2:
                    52:c0:96:b3:1e:8a:a8:e7:91:d1:bd:03:18:a8:52:
                    24:46:39:09:e4:ab:b9:57:11:3e:02:f1:76:fb:4b:
                    29:63:6d:7e:0b:64:e1:8a:eb:cf:e0:3a:31:4f:c4:
                    a2:b9:b5:8c:b1:fa:90:d7:d6:64:06:5c:5c:7e:4a:
                    ae:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:9B:5A:61:2E:DB:E6:9E:B8:6D:81:71:62:63:CC:D5:50:FA:65:92
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/wptaYS7b5p64bYFxYmPM1VD6ZZI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.141.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         39:14:a6:97:e1:67:37:e9:5e:bf:80:25:d3:cc:00:90:0c:ab:
         2f:5c:e8:d7:d4:b3:ed:e1:7c:f6:ea:9d:eb:2d:3b:cd:b8:9b:
         54:e1:1d:4e:6f:99:7f:3a:80:01:b7:df:bc:73:ff:8d:43:57:
         65:27:a8:3d:c9:ca:c5:d1:76:d2:88:a8:a0:0f:bf:62:db:b6:
         a3:7d:e3:d7:f6:4f:7e:b1:5f:34:4c:e8:d9:c0:ab:1e:1f:1d:
         f1:40:15:42:3a:f5:2d:78:fd:b7:aa:e8:f7:4d:93:a9:cb:e2:
         91:3b:e6:fb:a5:ae:1f:a9:93:04:d7:ad:e3:90:29:f3:0e:55:
         d0:31:0b:b6:96:31:ad:82:ab:0a:8a:3b:3b:f8:bc:0b:fe:f3:
         23:d9:20:45:18:36:07:38:7d:b4:69:6b:55:31:9a:96:b2:9e:
         dc:3f:a3:b3:a8:22:ea:fa:67:ed:60:6f:74:64:ee:50:7b:de:
         54:3a:e2:c7:68:e8:d1:ad:c7:3f:06:c6:7c:f0:72:78:a9:02:
         ab:69:d8:ac:54:12:b1:63:0f:c2:61:4e:f2:b6:30:01:5e:6e:
         d8:36:d1:14:e8:16:53:f2:25:10:3d:15:f7:8b:46:88:5a:bb:
         58:df:5d:58:49:9b:d2:ec:6a:0e:ff:b3:21:ca:7d:4a:a7:85:
         d8:eb:21:3b
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAZAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yMzA1MDEw
MTMwMjlaFw0yNDA0MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEMyOUI1QTYxMkVEQkU2
OUVCODZEODE3MTYyNjNDQ0Q1NTBGQTY1OTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD2drJiUqHT9h9dFXO+g7SGxc3+ppzVK5QaEVDbmQarIlOYO9Uo
U2F9CGqe9SrDsMgb2VkxLgJK9S73TZk7GFJmVqLNSRPmENDK8QkGpColxxUDtO87
3UIOYip1zOxkb6kocHtws61QPEBHCi32FC4AHlJ6c3nTM4sVyoZ1WSPZGIxQHE3L
LX3drFCr2T0AU9rXE3XPE5uQG460RlTpzoEAT1KOcYvCyMmfDGV9xZ8ExyDZ/ff+
W8a0woV8Hfn3ZDs80lLAlrMeiqjnkdG9AxioUiRGOQnkq7lXET4C8Xb7SyljbX4L
ZOGK68/gOjFPxKK5tYyx+pDX1mQGXFx+Sq5vAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUwptaYS7b5p64bYFxYmPM1VD6ZZIwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL3dwdGFZUzdiNXA2NGJZRnhZbVBNMVZENlpaSS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA7jTANBgkqhkiG9w0BAQsFAAOCAQEAORSml+FnN+lev4Al08wAkAyrL1zo
19Sz7eF89uqd6y07zbibVOEdTm+ZfzqAAbffvHP/jUNXZSeoPcnKxdF20oiooA+/
Ytu2o33j1/ZPfrFfNEzo2cCrHh8d8UAVQjr1LXj9t6ro902TqcvikTvm+6WuH6mT
BNet45Ap8w5V0DELtpYxrYKrCoo7O/i8C/7zI9kgRRg2Bzh9tGlrVTGalrKe3D+j
s6gi6vpn7WBvdGTuUHveVDrix2jo0a3HPwbGfPByeKkCq2nYrFQSsWMPwmFO8rYw
AV5u2DbRFOgWU/IlED0V94tGiFq7WN9dWEmb0uxqDv+zIcp9SqeF2OshOw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:39 2024 by rpki-client on console-ams.rpki-client.org