Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/-gG4VZDicA79nhrrs_xdR97DbU8.roa
File:                     -gG4VZDicA79nhrrs_xdR97DbU8.roa (raw, json)
Hash identifier:          ag2nI5v4cSVadgxlCMtOhZCgR3Towfmu5DOksi8T3wI=
Subject key identifier:   FA:01:B8:55:90:E2:70:0E:FD:9E:1A:EB:B3:FC:5D:47:DE:C3:6D:4F
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       65
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/-gG4VZDicA79nhrrs_xdR97DbU8.roa
Signing time:             Tue 07 Jun 2022 10:05:18 +0000
ROA not before:           Tue 07 Jun 2022 10:05:18 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        59.141.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:05:18 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=FA01B85590E2700EFD9E1AEBB3FC5D47DEC36D4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:95:2f:ec:60:9b:be:9e:f0:1f:67:b2:c4:ca:
                    7f:5a:c5:21:96:d7:c5:94:e6:25:45:39:9f:29:7c:
                    2b:00:b9:24:f4:d0:35:c6:c0:e0:80:3e:dc:5c:5e:
                    1a:13:89:5e:e6:45:00:98:7c:91:1e:7e:94:9d:e6:
                    07:8c:31:c4:67:94:dc:f3:74:1f:43:8d:ca:06:68:
                    db:e7:6f:7e:14:5e:8b:3b:14:74:12:07:7b:ae:ad:
                    15:76:d6:9b:95:da:bf:b6:9b:e8:26:cf:5a:04:f0:
                    5b:50:ff:d3:8f:a7:6b:c0:32:d3:4b:a3:52:30:68:
                    38:9e:15:da:ff:64:e9:36:b8:3f:f7:1b:43:2b:02:
                    35:af:8f:c9:ed:61:a4:35:6d:27:b4:6a:4a:ce:75:
                    b6:b0:50:16:31:a8:94:fd:d5:39:e9:f9:53:ea:b9:
                    1c:eb:53:6a:f6:34:16:a0:06:b2:ac:92:d2:03:83:
                    7a:8f:5b:cc:25:41:03:91:e1:58:0f:c5:cf:22:f9:
                    91:3f:f4:3f:9b:8e:09:58:04:e8:29:50:09:04:e8:
                    92:45:c6:4e:bf:ff:8a:b3:1f:10:71:c5:2a:4b:a0:
                    94:7f:2f:56:61:9e:7e:2e:1a:5b:71:ac:0e:4e:3a:
                    4b:57:4b:36:15:84:53:e4:d9:72:5d:25:4a:5d:94:
                    27:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:01:B8:55:90:E2:70:0E:FD:9E:1A:EB:B3:FC:5D:47:DE:C3:6D:4F
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/-gG4VZDicA79nhrrs_xdR97DbU8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.141.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3b:5b:cb:0b:65:b1:00:11:21:eb:d3:07:55:9d:b7:48:9e:b6:
         79:76:7f:cf:b7:78:67:da:a4:9d:b5:35:d3:4c:d1:2a:4a:7e:
         ab:77:ec:e4:48:c9:8f:6b:d6:fd:4d:83:95:6e:d5:54:79:a9:
         27:95:af:c0:01:2a:69:87:05:a9:f5:9d:37:4e:d7:91:0d:42:
         43:ac:b4:13:2f:63:e5:d3:16:25:a9:58:e4:87:a8:e8:1e:6f:
         7f:9d:36:82:67:44:13:da:54:c8:bb:ae:21:19:7b:8d:1f:07:
         25:36:dc:d1:92:5b:d8:72:b5:ac:41:94:4d:de:6e:34:a6:4c:
         84:b0:ad:d5:d9:b3:13:60:fd:10:05:62:fa:10:21:05:fb:6a:
         84:ac:df:e0:b5:5f:9d:13:76:04:e9:df:f7:79:cc:de:34:e4:
         b6:bf:12:a6:74:84:8a:e3:93:79:d1:ea:12:fe:3b:0e:2f:03:
         86:ed:6f:3d:c8:37:77:a9:1c:76:3e:b9:4f:5d:d1:e0:ca:fa:
         30:e8:91:bc:27:44:5e:f2:fa:68:ac:13:9b:74:cf:dd:7d:31:
         04:20:ee:7f:94:c1:9c:1c:0c:b9:f5:fa:97:57:6a:c8:32:1e:
         aa:c8:53:be:bc:9b:fc:a8:62:ac:cd:31:b8:04:6e:b7:1a:ce:
         09:ad:2f:06
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIBZTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNUJG
QTNFNTNFNTkxNDkyMzlBMTY4REZEOTJDNzU3NDVBQjY2Q0I2MB4XDTIyMDYwNzEw
MDUxOFoXDTIzMDUxNTAxMzAwNFowMzExMC8GA1UEAxMoRkEwMUI4NTU5MEUyNzAw
RUZEOUUxQUVCQjNGQzVENDdERUMzNkQ0RjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJiVL+xgm76e8B9nssTKf1rFIZbXxZTmJUU5nyl8KwC5JPTQNcbA
4IA+3FxeGhOJXuZFAJh8kR5+lJ3mB4wxxGeU3PN0H0ONygZo2+dvfhReizsUdBIH
e66tFXbWm5Xav7ab6CbPWgTwW1D/04+na8Ay00ujUjBoOJ4V2v9k6Ta4P/cbQysC
Na+Pye1hpDVtJ7RqSs51trBQFjGolP3VOen5U+q5HOtTavY0FqAGsqyS0gODeo9b
zCVBA5HhWA/FzyL5kT/0P5uOCVgE6ClQCQTokkXGTr//irMfEHHFKkuglH8vVmGe
fi4aW3GsDk46S1dLNhWEU+TZcl0lSl2UJ9kCAwEAAaOCAiMwggIfMB0GA1UdDgQW
BBT6AbhVkOJwDv2eGuuz/F1H3sNtTzAfBgNVHSMEGDAWgBQVv6PlPlkUkjmhaN/Z
LHV0WrZstjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTYxL0ZiLWo1VDVaRkpJNW9XamYyU3gxZEZxMmJMWS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZiLWo1VDVaRkpJNW9XamYyU3gxZEZx
MmJMWS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8xNjEvLWdHNFZaRGljQTc5bmhycnNfeGRSOTdEYlU4LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw
BQMDADuNMA0GCSqGSIb3DQEBCwUAA4IBAQA7W8sLZbEAESHr0wdVnbdInrZ5dn/P
t3hn2qSdtTXTTNEqSn6rd+zkSMmPa9b9TYOVbtVUeaknla/AASpphwWp9Z03TteR
DUJDrLQTL2Pl0xYlqVjkh6joHm9/nTaCZ0QT2lTIu64hGXuNHwclNtzRklvYcrWs
QZRN3m40pkyEsK3V2bMTYP0QBWL6ECEF+2qErN/gtV+dE3YE6d/3eczeNOS2vxKm
dISK45N50eoS/jsOLwOG7W89yDd3qRx2PrlPXdHgyvow6JG8J0Re8vporBObdM/d
fTEEIO5/lMGcHAy59fqXV2rIMh6qyFO+vJv8qGKszTG4BG63Gs4JrS8G
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org