Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/8L4BGEHm8pSKULbWz-DZp_DH1IM.roa
File:                     8L4BGEHm8pSKULbWz-DZp_DH1IM.roa (raw, json)
Hash identifier:          NMjj8BOHu9H1T8j2wqUXdr50UjkhOU3fb/MCNmjrWzk=
Subject key identifier:   F0:BE:01:18:41:E6:F2:94:8A:50:B6:D6:CF:E0:D9:A7:F0:C7:D4:83
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0161
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/8L4BGEHm8pSKULbWz-DZp_DH1IM.roa
Signing time:             Thu 13 Apr 2023 09:50:43 +0000
ROA not before:           Thu 13 Apr 2023 09:50:43 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        106.179.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 353 (0x161)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Apr 13 09:50:43 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=F0BE011841E6F2948A50B6D6CFE0D9A7F0C7D483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6c:c0:70:af:c9:c9:ed:02:a3:67:3b:cd:55:
                    60:73:fa:c4:39:6c:30:a9:38:1b:c3:1c:31:98:37:
                    27:d4:a4:2f:3a:ea:c0:fe:94:4e:9f:13:ab:94:5a:
                    51:2b:9a:4d:a9:cf:d4:78:b2:d8:1d:cc:9c:51:30:
                    ef:2d:0f:7f:dc:24:53:58:f7:2d:bf:ba:ec:69:e4:
                    df:ba:a1:bb:71:44:1a:10:c9:29:67:70:88:d1:62:
                    5e:72:73:3a:ec:4a:96:24:f4:63:54:11:5c:48:18:
                    f4:55:35:29:2d:78:b5:a1:ff:13:ec:0f:6d:8a:39:
                    f1:25:93:40:c6:57:56:0d:2d:ad:c1:b5:d1:fa:43:
                    a5:48:14:f4:7f:aa:fe:60:b4:9b:11:46:7d:68:9a:
                    2f:d6:76:3c:80:08:ab:49:13:02:e3:5e:d8:9f:b4:
                    34:86:84:97:a8:90:d8:cb:d6:15:59:23:61:52:d2:
                    e6:79:81:22:a2:d0:de:8e:71:3a:10:54:28:1a:a1:
                    63:f2:a3:95:fd:b2:45:b0:3f:83:ce:ba:6d:5e:1a:
                    2e:7a:10:fa:6c:d7:20:a8:22:57:b9:34:ea:d9:1c:
                    3a:11:70:35:1c:b9:23:18:31:27:1a:c6:a9:41:7d:
                    11:e0:ec:d5:2f:d2:da:4e:2e:70:cc:a7:37:5c:0b:
                    42:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:BE:01:18:41:E6:F2:94:8A:50:B6:D6:CF:E0:D9:A7:F0:C7:D4:83
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/8L4BGEHm8pSKULbWz-DZp_DH1IM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.179.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         43:1f:75:e1:72:13:cd:d7:3c:22:49:83:02:17:d8:7b:25:d2:
         f8:f0:ee:ce:bb:20:33:1d:1b:1c:19:e9:19:a5:f0:54:85:8d:
         62:99:e9:34:81:1d:f4:22:af:83:43:f2:7c:dd:52:1c:7a:cb:
         1a:2d:15:8a:7a:56:30:0d:ed:00:f6:0b:b6:57:9e:8a:32:05:
         b9:f4:37:0a:3f:60:14:79:38:b4:f9:33:c2:a9:78:f9:b5:0c:
         2b:56:82:4a:b7:cc:0b:8d:21:1c:23:3d:5d:6f:2f:86:3a:30:
         ac:bb:0f:8c:a0:14:02:d7:fb:1c:89:6b:09:57:95:da:d7:02:
         a1:cc:1a:70:27:c9:84:dc:66:97:c2:c6:67:7a:c0:82:a8:f2:
         23:48:1d:1b:c7:ae:0e:34:0b:10:e4:a3:49:be:6b:82:4a:c6:
         d6:56:ef:16:06:d4:73:fd:cc:c9:e1:14:9f:3c:e1:4c:95:05:
         71:2c:89:3d:a7:f2:d2:94:20:0b:ac:1f:e8:58:93:99:9b:89:
         cb:1e:d8:b9:6d:8f:6c:9a:fd:51:dd:40:35:ef:7d:ef:37:b0:
         00:4f:af:d8:e4:0e:f8:c0:7b:7e:75:9c:8a:12:50:41:80:f5:
         e3:f7:8f:14:b5:d7:fc:95:17:32:e2:81:74:5b:6d:06:f9:59:
         21:ff:f7:fa
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yMzA0MTMw
OTUwNDNaFw0yNDAzMTQwMTMwMDJaMDMxMTAvBgNVBAMTKEYwQkUwMTE4NDFFNkYy
OTQ4QTUwQjZENkNGRTBEOUE3RjBDN0Q0ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9bMBwr8nJ7QKjZzvNVWBz+sQ5bDCpOBvDHDGYNyfUpC866sD+
lE6fE6uUWlErmk2pz9R4stgdzJxRMO8tD3/cJFNY9y2/uuxp5N+6obtxRBoQySln
cIjRYl5yczrsSpYk9GNUEVxIGPRVNSkteLWh/xPsD22KOfElk0DGV1YNLa3BtdH6
Q6VIFPR/qv5gtJsRRn1omi/WdjyACKtJEwLjXtiftDSGhJeokNjL1hVZI2FS0uZ5
gSKi0N6OcToQVCgaoWPyo5X9skWwP4POum1eGi56EPps1yCoIle5NOrZHDoRcDUc
uSMYMScaxqlBfRHg7NUv0tpOLnDMpzdcC0LXAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQU8L4BGEHm8pSKULbWz+DZp/DH1IMwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxLzhMNEJHRUhtOHBTS1VMYld6LURacF9ESDFJTS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwBqszANBgkqhkiG9w0BAQsFAAOCAQEAQx914XITzdc8IkmDAhfYeyXS+PDu
zrsgMx0bHBnpGaXwVIWNYpnpNIEd9CKvg0PyfN1SHHrLGi0VinpWMA3tAPYLtlee
ijIFufQ3Cj9gFHk4tPkzwql4+bUMK1aCSrfMC40hHCM9XW8vhjowrLsPjKAUAtf7
HIlrCVeV2tcCocwacCfJhNxml8LGZ3rAgqjyI0gdG8euDjQLEOSjSb5rgkrG1lbv
FgbUc/3MyeEUnzzhTJUFcSyJPafy0pQgC6wf6FiTmZuJyx7YuW2PbJr9Ud1ANe99
7zewAE+v2OQO+MB7fnWcihJQQYD14/ePFLXX/JUXMuKBdFttBvlZIf/3+g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org