Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/6tfjE_KPHoG9ykljaZtHPge5a80.roa
File:                     6tfjE_KPHoG9ykljaZtHPge5a80.roa (raw, json)
Hash identifier:          Er/7yvn/KGU+OJTOC6hDo8+gPlwnj8hyr95gr1OV0LA=
Subject key identifier:   EA:D7:E3:13:F2:8F:1E:81:BD:CA:49:63:69:9B:47:3E:07:B9:6B:CD
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       EF
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/6tfjE_KPHoG9ykljaZtHPge5a80.roa
Signing time:             Tue 14 Jun 2022 09:34:02 +0000
ROA not before:           Tue 14 Jun 2022 09:34:02 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        106.169.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 239 (0xef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun 14 09:34:02 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=EAD7E313F28F1E81BDCA4963699B473E07B96BCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3c:24:3e:64:0c:93:48:bc:1e:c8:de:09:9c:
                    a4:04:8c:20:c3:d0:f6:9c:dc:ab:fb:69:86:ad:32:
                    6c:e5:8f:a3:bb:82:e4:b6:9f:f4:c0:cf:13:1e:c0:
                    92:50:31:02:88:1b:02:c1:6a:de:26:b6:12:8b:d5:
                    29:58:dd:af:72:72:5e:53:53:32:22:e3:cf:7d:00:
                    fd:b1:c2:ba:88:11:ec:bc:7b:7e:d6:33:5f:ff:40:
                    bd:87:6d:a6:62:64:90:bd:bb:d6:31:1e:b3:e2:4a:
                    4d:d3:15:98:54:b9:13:e1:10:0a:e9:94:ee:85:70:
                    f3:f8:2e:aa:03:e7:16:0f:3f:c3:ab:26:4a:e0:2b:
                    af:57:67:7d:55:4b:da:39:82:e0:43:a9:79:fc:4a:
                    ed:2d:b3:a8:5d:e6:00:f4:a1:fe:b5:02:b0:59:27:
                    8f:57:b9:87:f9:6f:4d:6d:fb:38:f1:61:06:64:e8:
                    75:50:d1:6c:33:f2:c3:50:93:c1:da:30:70:2e:5f:
                    42:74:73:f2:c2:6c:ea:9a:8e:62:f5:5c:e3:5c:2a:
                    3b:c3:2a:81:51:2d:48:fd:09:86:66:30:a8:41:d9:
                    13:11:80:f2:d5:91:06:f9:be:3d:db:13:28:db:5c:
                    2e:09:76:de:99:c2:54:ef:33:ac:81:67:2d:94:cb:
                    4e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D7:E3:13:F2:8F:1E:81:BD:CA:49:63:69:9B:47:3E:07:B9:6B:CD
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/6tfjE_KPHoG9ykljaZtHPge5a80.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.169.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a4:f2:74:36:71:7c:c8:8f:19:9b:5d:2a:e5:17:db:33:28:56:
         4c:8d:68:41:ae:d6:03:0f:66:c5:2b:61:6a:cb:b4:ec:1c:21:
         91:cf:80:74:53:3c:35:e2:8b:57:78:30:cf:69:6e:d3:cd:b0:
         a0:01:30:f6:86:50:b8:98:e3:3d:eb:fa:f5:55:93:19:b8:9c:
         e8:3b:50:f0:38:5a:c5:25:c5:7d:d3:d6:fe:78:e8:f1:7b:2e:
         64:3f:2d:ad:52:86:d2:28:0d:59:28:51:a3:12:49:f1:77:68:
         b6:9f:1a:a2:c2:8a:0e:ad:6b:65:ad:2d:48:24:ec:70:0c:3d:
         b7:52:51:26:a4:d9:81:11:84:b4:8c:4f:97:70:39:01:ef:d0:
         65:08:d0:b2:e6:de:62:ce:8d:a3:91:74:4a:03:72:27:66:7f:
         85:b9:af:60:fa:81:e0:45:c2:80:32:e5:55:0d:c5:e5:8e:6a:
         52:3e:c2:1c:ec:8a:2e:46:70:d7:9f:cf:1c:bd:c9:98:69:55:
         af:14:a4:c4:b3:35:44:f5:77:ed:17:2f:0a:e2:68:51:ac:b4:
         38:2e:2f:53:51:16:51:53:5d:ef:f0:69:41:90:31:19:1d:e2:
         ad:cb:c0:ae:6f:d2:a1:95:d9:55:5a:79:b4:5c:92:dd:01:97:
         4c:9c:43:ee
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yMjA2MTQw
OTM0MDJaFw0yMzA1MTUwMTMwMDRaMDMxMTAvBgNVBAMTKEVBRDdFMzEzRjI4RjFF
ODFCRENBNDk2MzY5OUI0NzNFMDdCOTZCQ0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwPCQ+ZAyTSLweyN4JnKQEjCDD0Pac3Kv7aYatMmzlj6O7guS2
n/TAzxMewJJQMQKIGwLBat4mthKL1SlY3a9ycl5TUzIi4899AP2xwrqIEey8e37W
M1//QL2HbaZiZJC9u9YxHrPiSk3TFZhUuRPhEArplO6FcPP4LqoD5xYPP8OrJkrg
K69XZ31VS9o5guBDqXn8Su0ts6hd5gD0of61ArBZJ49XuYf5b01t+zjxYQZk6HVQ
0Wwz8sNQk8HaMHAuX0J0c/LCbOqajmL1XONcKjvDKoFRLUj9CYZmMKhB2RMRgPLV
kQb5vj3bEyjbXC4Jdt6ZwlTvM6yBZy2Uy04NAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQU6tfjE/KPHoG9ykljaZtHPge5a80wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxLzZ0ZmpFX0tQSG9HOXlrbGphWnRIUGdlNWE4MC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwBqqTANBgkqhkiG9w0BAQsFAAOCAQEApPJ0NnF8yI8Zm10q5RfbMyhWTI1o
Qa7WAw9mxSthasu07Bwhkc+AdFM8NeKLV3gwz2lu082woAEw9oZQuJjjPev69VWT
Gbic6DtQ8DhaxSXFfdPW/njo8XsuZD8trVKG0igNWShRoxJJ8Xdotp8aosKKDq1r
Za0tSCTscAw9t1JRJqTZgRGEtIxPl3A5Ae/QZQjQsubeYs6No5F0SgNyJ2Z/hbmv
YPqB4EXCgDLlVQ3F5Y5qUj7CHOyKLkZw15/PHL3JmGlVrxSkxLM1RPV37RcvCuJo
Uay0OC4vU1EWUVNd7/BpQZAxGR3ircvArm/SoZXZVVp5tFyS3QGXTJxD7g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org