Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/6QpVwijeYM_DGyLw_72JtSWRvUE.roa
File:                     6QpVwijeYM_DGyLw_72JtSWRvUE.roa (raw, json)
Hash identifier:          gXe00mQvLF8faZYv5B7VpCth/qljRX2lez7TRhUcgfU=
Subject key identifier:   E9:0A:55:C2:28:DE:60:CF:C3:1B:22:F0:FF:BD:89:B5:25:91:BD:41
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       6A
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/6QpVwijeYM_DGyLw_72JtSWRvUE.roa
Signing time:             Tue 07 Jun 2022 10:07:16 +0000
ROA not before:           Tue 07 Jun 2022 10:07:16 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        61.198.128.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:07:16 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=E90A55C228DE60CFC31B22F0FFBD89B52591BD41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:bc:a1:75:a0:2c:a5:fe:74:93:4d:0b:55:89:
                    2e:58:f0:dc:ae:dc:a1:2a:ab:4d:be:23:5a:81:cd:
                    10:68:8d:9e:fa:83:47:40:12:e4:2c:c1:02:f3:82:
                    1e:30:f7:96:9b:46:fc:e4:c7:88:e9:87:90:54:aa:
                    2c:bd:19:c4:18:0a:f9:29:94:40:fc:e8:c8:8d:f9:
                    e7:d1:9a:96:ef:7e:8c:58:36:c6:07:c5:da:6a:e5:
                    44:92:8d:ea:f7:c1:19:1f:44:02:c1:e7:bf:74:52:
                    dc:75:e4:e6:64:3e:f6:2b:8c:f1:4a:a7:00:f3:fb:
                    e1:dc:36:0a:12:ad:ba:9b:4b:7d:63:e1:4d:ba:d8:
                    55:55:b9:a1:a4:91:20:2c:9b:ca:c9:7d:f9:19:82:
                    f4:be:4e:8b:ff:71:02:ac:2c:e9:10:3d:dc:0c:e9:
                    1c:f3:9d:9d:0d:16:72:59:83:f3:30:db:fe:08:5d:
                    55:bc:a4:14:7a:2e:87:cf:95:db:c3:f2:bd:57:d3:
                    eb:74:ef:ed:1c:b2:8f:ec:1f:9a:15:3a:09:03:a7:
                    37:1b:38:f0:41:3f:5a:73:61:e3:c7:4e:47:41:af:
                    c6:d8:d0:15:01:50:fd:34:95:a1:a3:3d:0b:1f:a1:
                    80:5b:c2:fd:44:ba:be:b9:1b:8d:1d:20:b3:c4:04:
                    38:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:0A:55:C2:28:DE:60:CF:C3:1B:22:F0:FF:BD:89:B5:25:91:BD:41
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/6QpVwijeYM_DGyLw_72JtSWRvUE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.198.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         53:54:75:b9:78:3b:f6:e3:2b:be:9e:f1:ee:0e:e2:ee:8b:e3:
         a8:dd:a7:0a:a7:31:c6:25:e8:10:03:8b:05:37:4b:0c:d6:a6:
         31:5b:42:ad:9c:a1:c4:67:f1:b9:0e:8c:91:53:b3:61:20:f6:
         6f:58:97:fa:90:71:c2:54:22:e4:84:ad:f4:e0:01:e9:b0:0d:
         e1:55:5b:17:b0:cc:ee:d6:14:bd:56:f2:bb:a8:34:41:34:2d:
         37:33:37:16:d4:ec:be:fb:90:fc:2c:93:ae:84:54:6c:51:14:
         06:37:73:31:2b:04:20:dc:76:b5:9d:7f:da:f2:e4:39:1f:f1:
         30:62:89:42:86:0c:14:70:aa:27:2e:ef:3b:db:04:96:f6:0d:
         ee:2a:85:5e:ff:d7:be:3b:50:05:9e:39:16:e4:80:df:d0:07:
         93:c0:ff:cf:93:62:1a:2c:4f:57:8b:61:c8:43:4f:7b:69:28:
         18:fb:5e:f3:f2:99:d1:33:87:8f:d4:f1:0b:45:77:27:e8:a6:
         5b:1b:68:51:b2:c9:2c:f1:aa:43:54:55:31:25:0e:97:82:e0:
         4a:89:e7:49:37:86:68:72:db:27:bc:9f:85:55:b8:71:ee:b8:
         c9:10:7c:90:91:82:e7:11:38:9b:7b:94:37:aa:2f:66:71:76:
         90:45:30:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----