Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/2o_KemmhLttIJi01ZVkLhK0mVu0.roa
File:                     2o_KemmhLttIJi01ZVkLhK0mVu0.roa (raw, json)
Hash identifier:          ovcyESjzcu8f6jUN7MYskmEoBmEgpa0jGAYnIGrCPFA=
Subject key identifier:   DA:8F:CA:7A:69:A1:2E:DB:48:26:2D:35:65:59:0B:84:AD:26:56:ED
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       CA
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/2o_KemmhLttIJi01ZVkLhK0mVu0.roa
Signing time:             Tue 14 Jun 2022 09:21:50 +0000
ROA not before:           Tue 14 Jun 2022 09:21:50 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        14.10.0.0/15 maxlen: 15

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun 14 09:21:50 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=DA8FCA7A69A12EDB48262D3565590B84AD2656ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ac:4b:08:c8:9e:3e:22:42:30:02:e9:e9:fe:
                    77:91:22:d4:34:72:33:fd:2b:83:e8:28:f8:35:73:
                    4d:7c:e7:95:e7:45:d8:b9:1d:71:64:53:ba:5f:b9:
                    16:13:3a:52:49:89:dc:8e:d3:ec:bc:db:59:87:53:
                    9e:e0:5f:53:3c:3f:4a:01:ba:74:28:07:34:dd:13:
                    1e:2a:e1:8a:4b:b7:52:b4:10:1f:ca:49:84:72:45:
                    9d:53:9b:d8:df:5f:38:bc:57:ea:b8:89:16:5d:d6:
                    35:11:35:e5:a5:38:1d:da:db:2f:3d:73:55:d5:c8:
                    c4:41:9a:d6:20:66:a1:d0:1d:cd:cc:47:9e:53:ec:
                    b9:32:8f:be:2d:7d:7a:00:8c:72:48:a0:fb:2d:b7:
                    e1:72:88:0c:e1:ab:5b:99:30:1c:68:dc:82:8f:68:
                    34:ed:8a:54:1f:7a:38:12:35:29:5f:28:82:5f:d6:
                    e1:c5:d2:3b:4b:d2:4c:ee:d1:76:e0:51:ef:33:cd:
                    be:ab:90:0e:a7:53:d7:21:e3:0c:18:6b:fa:d2:b9:
                    58:c2:72:70:21:c6:3f:3c:e0:e6:44:a5:80:7d:92:
                    9d:17:da:42:20:06:7d:e5:bc:e5:b8:1e:90:8c:a0:
                    6b:5f:40:0e:76:13:f2:c9:7c:eb:00:52:e1:fe:25:
                    5b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:8F:CA:7A:69:A1:2E:DB:48:26:2D:35:65:59:0B:84:AD:26:56:ED
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/2o_KemmhLttIJi01ZVkLhK0mVu0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.10.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         32:27:46:e8:55:12:8a:a5:90:08:6c:76:d4:ae:5b:99:0e:7c:
         50:5a:44:8a:af:0d:fd:d6:ea:2b:77:f3:d7:a9:02:5d:2d:8c:
         71:00:8c:c2:9c:0d:f7:1a:3f:e5:57:af:8b:f7:aa:03:1e:59:
         19:13:0a:c9:50:85:60:17:e2:08:4e:67:10:da:dd:d5:09:c2:
         a9:5d:6f:de:36:5b:5a:25:d9:36:25:ac:13:9a:93:27:b3:6d:
         fd:20:f9:d1:85:28:73:e9:17:27:2a:23:f6:ff:a6:15:68:95:
         fd:70:5b:f5:08:f3:ee:a3:0d:1f:13:68:6e:65:d2:9d:6d:1d:
         47:b1:a2:07:90:89:76:e3:59:4a:f7:cb:34:9b:8a:b2:ed:c2:
         a0:0d:a4:be:c7:20:c5:78:3d:7d:97:2c:1a:15:22:ad:eb:48:
         20:8d:0c:d4:71:b3:73:82:96:4c:06:b0:88:8f:51:24:ef:69:
         84:66:d3:41:e5:d1:9b:ab:8e:a9:88:6a:a0:8e:62:6f:5a:60:
         c2:cf:08:29:40:73:b8:01:4f:b2:0c:e3:e9:e9:05:5e:df:10:
         c8:5a:23:bd:36:ee:38:d2:e3:e7:d9:f6:54:13:26:7d:1a:34:
         70:f0:82:10:7a:d1:27:bc:a0:a7:da:c9:e8:fd:8a:85:4f:cd:
         84:d5:2c:77
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAMowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yMjA2MTQw
OTIxNTBaFw0yMzA1MTUwMTMwMDRaMDMxMTAvBgNVBAMTKERBOEZDQTdBNjlBMTJF
REI0ODI2MkQzNTY1NTkwQjg0QUQyNjU2RUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDbrEsIyJ4+IkIwAunp/neRItQ0cjP9K4PoKPg1c01855XnRdi5
HXFkU7pfuRYTOlJJidyO0+y821mHU57gX1M8P0oBunQoBzTdEx4q4YpLt1K0EB/K
SYRyRZ1Tm9jfXzi8V+q4iRZd1jURNeWlOB3a2y89c1XVyMRBmtYgZqHQHc3MR55T
7Lkyj74tfXoAjHJIoPstt+FyiAzhq1uZMBxo3IKPaDTtilQfejgSNSlfKIJf1uHF
0jtL0kzu0XbgUe8zzb6rkA6nU9ch4wwYa/rSuVjCcnAhxj884OZEpYB9kp0X2kIg
Bn3lvOW4HpCMoGtfQA52E/LJfOsAUuH+JVupAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQU2o/KemmhLttIJi01ZVkLhK0mVu0wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxLzJvX0tlbW1oTHR0SUppMDFaVmtMaEswbVZ1MC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwEOCjANBgkqhkiG9w0BAQsFAAOCAQEAMidG6FUSiqWQCGx21K5bmQ58UFpE
iq8N/dbqK3fz16kCXS2McQCMwpwN9xo/5Vevi/eqAx5ZGRMKyVCFYBfiCE5nENrd
1QnCqV1v3jZbWiXZNiWsE5qTJ7Nt/SD50YUoc+kXJyoj9v+mFWiV/XBb9Qjz7qMN
HxNobmXSnW0dR7GiB5CJduNZSvfLNJuKsu3CoA2kvscgxXg9fZcsGhUiretIII0M
1HGzc4KWTAawiI9RJO9phGbTQeXRm6uOqYhqoI5ib1pgws8IKUBzuAFPsgzj6ekF
Xt8QyFojvTbuONLj59n2VBMmfRo0cPCCEHrRJ7ygp9rJ6P2KhU/NhNUsdw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:01 2023 by rpki-client on console-fra.rpki-client.org