Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/3YdWGxTw5LHczvWzCm0c85uCI50.roa
File:                     3YdWGxTw5LHczvWzCm0c85uCI50.roa (raw, json)
Hash identifier:          HG4NboGVu+J8k1t+oqbRtboDDHklt58jjAAzlV7vh4A=
Subject key identifier:   DD:87:56:1B:14:F0:E4:B1:DC:CE:F5:B3:0A:6D:1C:F3:9B:82:23:9D
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       B4
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/3YdWGxTw5LHczvWzCm0c85uCI50.roa
Signing time:             Tue 14 Jun 2022 09:11:49 +0000
ROA not before:           Tue 14 Jun 2022 09:11:49 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        210.255.0.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180 (0xb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun 14 09:11:49 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=DD87561B14F0E4B1DCCEF5B30A6D1CF39B82239D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c7:60:83:54:d8:a0:d7:f5:19:c5:6a:93:09:
                    02:d9:23:86:ad:3b:ec:1c:50:82:b4:48:f1:3c:7e:
                    2e:3c:9e:dd:81:8b:31:0c:24:79:7f:b3:38:4e:b1:
                    5b:9c:0d:f8:82:54:73:b8:09:6c:1c:5c:a2:4d:65:
                    73:60:30:a9:4b:8e:ab:dd:b8:bd:0f:68:24:c9:5f:
                    3d:63:5e:fb:05:73:76:d0:e6:75:8e:0b:e1:6f:1a:
                    60:a3:9b:08:c8:96:a6:b6:dc:97:ef:32:a5:ed:b1:
                    dc:f7:26:e3:14:a9:34:16:b8:32:f8:d9:c6:4c:50:
                    f0:b2:08:c2:57:e1:97:2d:c5:66:7f:c1:06:97:20:
                    96:5c:aa:97:b4:75:f9:e2:a3:11:55:ec:25:21:dc:
                    55:45:4b:ae:73:12:fc:ec:35:cb:e9:af:ef:f8:de:
                    84:8b:7e:87:60:f2:d6:8d:0e:21:ae:2b:92:4f:f9:
                    0e:d0:95:72:0d:d3:b2:ca:30:66:2d:89:5f:f6:f2:
                    d9:91:b9:7b:5c:ff:f4:32:f0:a4:7e:9c:bd:79:35:
                    69:e8:ec:52:92:ce:ef:d9:ab:75:b0:87:a7:dd:b6:
                    bd:54:d3:10:c3:30:88:ee:c4:be:c2:0b:a3:69:34:
                    83:2f:a6:e5:eb:f5:32:42:58:e6:96:a2:96:98:c8:
                    fb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:87:56:1B:14:F0:E4:B1:DC:CE:F5:B3:0A:6D:1C:F3:9B:82:23:9D
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/3YdWGxTw5LHczvWzCm0c85uCI50.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.255.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         51:0b:76:81:25:01:72:5c:ee:1d:4e:ab:a2:de:18:51:6f:8f:
         b5:90:44:36:03:93:4c:0b:98:23:a4:63:6a:e8:5b:58:93:21:
         c7:eb:f7:d3:cc:4f:98:08:c5:65:ed:b9:d2:09:71:2f:17:6d:
         0c:95:3b:ce:0c:f3:48:52:ce:44:41:f8:2c:31:bd:f5:59:02:
         59:51:55:51:46:29:bb:c4:a1:50:7f:3a:2f:a8:96:2c:c9:b2:
         69:35:a2:86:48:47:65:18:af:91:55:dd:c3:36:46:6c:98:30:
         a3:58:5f:5e:cb:cc:48:9f:a1:b6:4f:b8:46:5e:68:08:4b:6b:
         c5:79:c9:84:d6:67:33:76:4b:fd:1b:c8:1f:32:f8:83:5a:d2:
         0e:40:8d:ee:4d:05:12:cc:b8:af:46:a0:e5:23:1c:20:f9:38:
         91:25:63:14:83:9e:b6:ed:b7:41:c0:53:49:24:84:d8:62:e2:
         0a:dc:1a:5a:67:d3:64:98:da:bd:8e:8e:36:49:44:96:08:05:
         15:d4:3a:4a:9e:8a:d3:c3:be:6e:2c:a9:df:32:d7:2c:b9:05:
         fe:f4:3d:44:e8:95:2e:e8:9a:61:2b:ee:a7:5d:d2:c1:dd:c4:
         44:12:c3:88:bb:db:d5:0e:5e:52:3b:ec:f7:00:7b:81:c2:e7:
         ae:95:61:ff
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICALQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yMjA2MTQw
OTExNDlaFw0yMzA1MTUwMTMwMDRaMDMxMTAvBgNVBAMTKEREODc1NjFCMTRGMEU0
QjFEQ0NFRjVCMzBBNkQxQ0YzOUI4MjIzOUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMx2CDVNig1/UZxWqTCQLZI4atO+wcUIK0SPE8fi48nt2BizEM
JHl/szhOsVucDfiCVHO4CWwcXKJNZXNgMKlLjqvduL0PaCTJXz1jXvsFc3bQ5nWO
C+FvGmCjmwjIlqa23JfvMqXtsdz3JuMUqTQWuDL42cZMUPCyCMJX4ZctxWZ/wQaX
IJZcqpe0dfnioxFV7CUh3FVFS65zEvzsNcvpr+/43oSLfodg8taNDiGuK5JP+Q7Q
lXIN07LKMGYtiV/28tmRuXtc//Qy8KR+nL15NWno7FKSzu/Zq3Wwh6fdtr1U0xDD
MIjuxL7CC6NpNIMvpuXr9TJCWOaWopaYyPspAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU3YdWGxTw5LHczvWzCm0c85uCI50wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxLzNZZFdHeFR3NUxIY3p2V3pDbTBjODV1Q0k1MC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAfS/wAwDQYJKoZIhvcNAQELBQADggEBAFELdoElAXJc7h1Oq6LeGFFvj7WQ
RDYDk0wLmCOkY2roW1iTIcfr99PMT5gIxWXtudIJcS8XbQyVO84M80hSzkRB+Cwx
vfVZAllRVVFGKbvEoVB/Oi+olizJsmk1ooZIR2UYr5FV3cM2RmyYMKNYX17LzEif
obZPuEZeaAhLa8V5yYTWZzN2S/0byB8y+INa0g5Aje5NBRLMuK9GoOUjHCD5OJEl
YxSDnrbtt0HAU0kkhNhi4grcGlpn02SY2r2OjjZJRJYIBRXUOkqeitPDvm4sqd8y
1yy5Bf70PUTolS7ommEr7qdd0sHdxEQSw4i729UOXlI77PcAe4HC566VYf8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:37 2024 by rpki-client on console-ams.rpki-client.org