Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/wsheKhfrW49nKZ4yrzeTqMifIrM.roa
File:                     wsheKhfrW49nKZ4yrzeTqMifIrM.roa (raw, json)
Hash identifier:          BACnGq8ES5hWTWyXfAaGTcpE0mk+Ugxi5XS7qcw6oq0=
Subject key identifier:   C2:C8:5E:2A:17:EB:5B:8F:67:29:9E:32:AF:37:93:A8:C8:9F:22:B3
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       39
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/wsheKhfrW49nKZ4yrzeTqMifIrM.roa
Signing time:             Thu 28 Apr 2022 09:22:41 +0000
ROA not before:           Thu 28 Apr 2022 09:22:41 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     2516
IP address blocks:        125.49.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Apr 28 09:22:41 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=C2C85E2A17EB5B8F67299E32AF3793A8C89F22B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c3:26:fb:00:90:02:6b:d4:ca:31:e1:a9:1b:
                    c2:d9:80:06:7a:67:37:0c:81:cb:e1:0a:a1:e9:53:
                    38:fd:25:e8:60:a1:38:7f:bb:1d:9a:33:30:68:42:
                    b8:cb:f2:1d:2d:41:38:9d:b4:79:c1:0b:2f:9b:b5:
                    c5:f4:97:32:a7:72:dd:31:46:67:70:d0:90:3b:fa:
                    4a:26:15:08:3e:0c:92:23:1a:bf:bd:8d:00:2d:7b:
                    79:0b:e1:5f:b3:d2:e9:f4:bc:4c:c8:48:60:86:9a:
                    47:65:c2:9b:f8:c4:be:bb:bf:a6:1d:97:84:aa:5c:
                    3e:75:05:00:dd:49:1c:54:5e:43:a4:27:c9:9d:70:
                    41:46:bf:08:e8:56:88:8b:97:be:01:7c:11:37:40:
                    a3:d3:c3:41:21:e2:a9:fe:eb:67:83:83:30:ce:75:
                    84:77:44:bc:60:6d:75:06:a0:9c:ed:7f:41:28:96:
                    ed:c2:a8:d4:3e:9a:b8:8a:f2:60:c2:b2:fe:02:be:
                    64:77:46:9c:27:af:48:04:4f:32:d0:30:e6:ff:bf:
                    1b:a9:cd:80:70:af:56:bb:8e:3d:4d:df:c1:fc:45:
                    93:28:8f:fd:d8:83:5c:b5:b5:c9:55:ee:fd:43:eb:
                    0d:46:a3:dc:bb:31:02:ce:9c:5e:da:b0:69:f1:4d:
                    59:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C8:5E:2A:17:EB:5B:8F:67:29:9E:32:AF:37:93:A8:C8:9F:22:B3
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/wsheKhfrW49nKZ4yrzeTqMifIrM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.49.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         12:00:f7:f6:64:3d:87:b7:d4:4d:e8:90:3a:05:43:6a:c8:31:
         53:8c:d3:9e:b6:fe:86:ca:2e:c3:78:e4:5c:f2:72:50:d2:6b:
         22:00:8e:04:33:8d:90:a5:a3:a5:b2:0c:e8:75:84:89:a6:fc:
         a4:04:3d:90:03:d7:8f:c2:28:80:4c:2b:60:b3:15:9b:ce:c2:
         06:fb:13:b5:fb:45:58:e4:ad:82:75:93:4a:99:b6:47:38:42:
         ff:21:2f:a8:6d:eb:d8:55:e7:52:c0:05:cf:c6:81:bf:3f:88:
         64:22:7d:05:ed:e8:4f:b7:a6:f9:1d:2d:c6:0d:d7:d7:f0:5b:
         77:11:be:19:7a:66:c5:dd:7d:d3:85:a5:62:66:2f:9a:82:de:
         a3:80:89:a3:9e:34:2b:4c:f0:ae:f8:10:43:53:05:66:46:bb:
         ec:e1:bb:98:d2:b9:91:a6:56:24:9b:b5:ab:df:59:f0:02:4b:
         24:6a:35:24:3e:10:3f:81:89:6c:21:af:ad:08:14:c0:f9:d2:
         c8:f2:ec:c0:ba:cd:65:72:f8:92:76:6b:31:ee:2e:73:3d:b7:
         96:8f:f7:a5:b2:19:2b:30:37:0d:16:93:f8:56:d9:a0:26:3e:
         84:76:3a:89:bd:04:c2:11:d7:e6:7e:fb:92:7b:b0:d7:5d:b1:
         ad:f1:35:6a
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIBOTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNUJG
QTNFNTNFNTkxNDkyMzlBMTY4REZEOTJDNzU3NDVBQjY2Q0I2MB4XDTIyMDQyODA5
MjI0MVoXDTIzMDQyNzA5NTIzNFowMzExMC8GA1UEAxMoQzJDODVFMkExN0VCNUI4
RjY3Mjk5RTMyQUYzNzkzQThDODlGMjJCMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOTDJvsAkAJr1Mox4akbwtmABnpnNwyBy+EKoelTOP0l6GChOH+7
HZozMGhCuMvyHS1BOJ20ecELL5u1xfSXMqdy3TFGZ3DQkDv6SiYVCD4MkiMav72N
AC17eQvhX7PS6fS8TMhIYIaaR2XCm/jEvru/ph2XhKpcPnUFAN1JHFReQ6QnyZ1w
QUa/COhWiIuXvgF8ETdAo9PDQSHiqf7rZ4ODMM51hHdEvGBtdQagnO1/QSiW7cKo
1D6auIryYMKy/gK+ZHdGnCevSARPMtAw5v+/G6nNgHCvVruOPU3fwfxFkyiP/diD
XLW1yVXu/UPrDUaj3LsxAs6cXtqwafFNWSMCAwEAAaOCAiMwggIfMB0GA1UdDgQW
BBTCyF4qF+tbj2cpnjKvN5OoyJ8iszAfBgNVHSMEGDAWgBQVv6PlPlkUkjmhaN/Z
LHV0WrZstjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTYxL0ZiLWo1VDVaRkpJNW9XamYyU3gxZEZxMmJMWS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZiLWo1VDVaRkpJNW9XamYyU3gxZEZx
MmJMWS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8xNjEvd3NoZUtoZnJXNDluS1o0eXJ6ZVRxTWlmSXJNLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw
BQMDAH0xMA0GCSqGSIb3DQEBCwUAA4IBAQASAPf2ZD2Ht9RN6JA6BUNqyDFTjNOe
tv6Gyi7DeORc8nJQ0msiAI4EM42QpaOlsgzodYSJpvykBD2QA9ePwiiATCtgsxWb
zsIG+xO1+0VY5K2CdZNKmbZHOEL/IS+obevYVedSwAXPxoG/P4hkIn0F7ehPt6b5
HS3GDdfX8Ft3Eb4ZembF3X3ThaViZi+agt6jgImjnjQrTPCu+BBDUwVmRrvs4buY
0rmRplYkm7Wr31nwAkskajUkPhA/gYlsIa+tCBTA+dLI8uzAus1lcviSdmsx7i5z
PbeWj/elshkrMDcNFpP4VtmgJj6EdjqJvQTCEdfmfvuSe7DXXbGt8TVq
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org