Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/679/FSFf1tiLip3dmivxNLcAsFLQHDc.roa
File:                     FSFf1tiLip3dmivxNLcAsFLQHDc.roa (raw, json)
Hash identifier:          cqGWPxf8De5HcwDSofCQbmqEUbA3zEQwm4biE/G5rIQ=
Subject key identifier:   15:21:5F:D6:D8:8B:8A:9D:DD:9A:2B:F1:34:B7:00:B0:52:D0:1C:37
Certificate issuer:       /CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91
Certificate serial:       15
Authority key identifier: 0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/FSFf1tiLip3dmivxNLcAsFLQHDc.roa
Signing time:             Tue 30 May 2023 06:05:17 +0000
ROA not before:           Tue 30 May 2023 06:05:17 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     17958
IP address blocks:        103.2.96.0/22 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91
        Validity
            Not Before: May 30 06:05:17 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=15215FD6D88B8A9DDD9A2BF134B700B052D01C37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:98:2f:7d:74:45:f5:55:bf:48:2f:86:09:6f:
                    b3:ac:22:10:e2:5b:05:76:d8:2b:8d:30:bc:d4:f3:
                    ec:74:4c:0e:6c:cd:b1:c9:a0:1f:54:67:1c:dd:70:
                    78:82:35:e1:b5:1f:d4:fc:d9:b6:40:40:7a:27:02:
                    76:f1:d5:72:09:f8:32:0b:76:6b:63:3f:e7:2c:4c:
                    42:69:5f:75:ef:70:ca:e5:a2:9c:22:62:39:9e:98:
                    44:64:ac:0b:83:1f:9c:05:5d:f7:59:0f:23:14:6f:
                    12:42:e1:59:f5:01:ed:c9:ce:43:c2:7d:e5:72:d1:
                    0e:8a:82:a8:ef:ed:16:6c:32:18:5b:20:c9:8b:ea:
                    a9:40:20:23:3f:d8:ec:90:21:f7:45:b7:ff:96:f3:
                    41:33:57:3b:0f:3b:b3:8f:6f:37:bd:55:06:ff:0c:
                    1e:51:a7:53:76:e3:ba:3b:d4:2d:9e:0f:c9:59:35:
                    80:95:4e:dd:f6:74:52:89:d0:3f:d0:c9:ef:c6:50:
                    8c:1f:d2:78:1e:e1:8e:f2:bf:80:fe:0b:2e:81:ab:
                    db:0c:d3:55:51:80:b5:98:32:e5:72:fc:40:6c:d5:
                    26:c8:3c:a4:33:c1:3d:14:9c:50:f7:aa:6f:1e:59:
                    9a:64:86:29:17:17:15:dd:4e:7f:e8:73:22:6b:41:
                    67:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:21:5F:D6:D8:8B:8A:9D:DD:9A:2B:F1:34:B7:00:B0:52:D0:1C:37
            X509v3 Authority Key Identifier:
                keyid:0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/FSFf1tiLip3dmivxNLcAsFLQHDc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:11:a8:67:b7:d8:bd:24:b1:b8:f2:72:0c:1c:fa:4b:0a:b3:
         90:4b:65:7c:42:2b:4e:8c:99:a3:bf:4a:60:89:4d:5f:d5:5c:
         1f:e1:0e:fd:4a:68:52:be:bd:fc:0f:7e:02:15:3a:0f:ce:08:
         23:6f:7a:54:ed:5a:d0:c1:6a:f9:2f:13:67:c0:59:fb:38:ae:
         5d:97:45:bf:96:9d:bd:5f:d9:3d:14:09:5c:8e:76:c8:32:98:
         17:fe:ac:24:a4:f1:25:b5:11:46:7d:6a:8f:d7:22:6c:cc:f1:
         45:43:ff:4d:17:2f:56:35:25:f5:f3:51:83:6c:52:76:98:5b:
         c3:56:b8:4f:df:7a:ef:e5:03:83:a5:8a:03:8c:e5:30:0c:51:
         99:af:f5:27:fd:7e:ba:1f:1d:41:72:28:8e:3d:d3:69:6c:1e:
         39:0b:a9:c0:29:aa:f2:58:30:99:70:4f:32:c2:c8:e3:85:52:
         a9:80:61:a5:11:d1:63:43:39:c1:4b:b1:a6:e3:c3:29:45:c6:
         98:34:cd:10:35:3d:9c:b1:44:f1:0e:9e:be:e1:88:bc:82:9a:
         9b:f3:77:69:b3:03:74:f3:d5:bd:15:09:ed:e4:00:be:e5:04:
         6c:9e:25:f5:b3:7c:f0:ef:64:2f:e9:99:ab:8a:41:d0:46:32:
         56:ac:37:ca
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBFTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwRjdG
MzMwOEZDOTUyMzI0NTk4MzZGREYxNTlBRjZCNEZBQUJBQzkxMB4XDTIzMDUzMDA2
MDUxN1oXDTI0MDUxNDAxMzAwMlowMzExMC8GA1UEAxMoMTUyMTVGRDZEODhCOEE5
REREOUEyQkYxMzRCNzAwQjA1MkQwMUMzNzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANeYL310RfVVv0gvhglvs6wiEOJbBXbYK40wvNTz7HRMDmzNscmg
H1RnHN1weII14bUf1PzZtkBAeicCdvHVcgn4Mgt2a2M/5yxMQmlfde9wyuWinCJi
OZ6YRGSsC4MfnAVd91kPIxRvEkLhWfUB7cnOQ8J95XLRDoqCqO/tFmwyGFsgyYvq
qUAgIz/Y7JAh90W3/5bzQTNXOw87s49vN71VBv8MHlGnU3bjujvULZ4PyVk1gJVO
3fZ0UonQP9DJ78ZQjB/SeB7hjvK/gP4LLoGr2wzTVVGAtZgy5XL8QGzVJsg8pDPB
PRScUPeqbx5ZmmSGKRcXFd1Of+hzImtBZ1kCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQVIV/W2IuKnd2aK/E0twCwUtAcNzAfBgNVHSMEGDAWgBQPfzMI/JUjJFmDb98V
mva0+quskTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjc5L0QzOHpDUHlWSXlSWmcyX2ZGWnIydFBxcnJKRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0QzOHpDUHlWSXlSWmcyX2ZGWnIydFBx
cnJKRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC82NzkvRlNGZjF0aUxpcDNkbWl2eE5MY0FzRkxRSERjLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmcCYDANBgkqhkiG9w0BAQsFAAOCAQEAcBGoZ7fYvSSxuPJyDBz6SwqzkEtl
fEIrToyZo79KYIlNX9VcH+EO/UpoUr69/A9+AhU6D84II296VO1a0MFq+S8TZ8BZ
+ziuXZdFv5advV/ZPRQJXI52yDKYF/6sJKTxJbURRn1qj9cibMzxRUP/TRcvVjUl
9fNRg2xSdphbw1a4T9967+UDg6WKA4zlMAxRma/1J/1+uh8dQXIojj3TaWweOQup
wCmq8lgwmXBPMsLI44VSqYBhpRHRY0M5wUuxpuPDKUXGmDTNEDU9nLFE8Q6evuGI
vIKam/N3abMDdPPVvRUJ7eQAvuUEbJ4l9bN88O9kL+mZq4pB0EYyVqw3yg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:14 2024 by rpki-client on console-ams.rpki-client.org