Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/H97I66TBrj7nCa_qTeP8IOggPtQ.roa
File:                     H97I66TBrj7nCa_qTeP8IOggPtQ.roa (raw, json)
Hash identifier:          l1OmOc+1+p2M45ae/cKLHG9gDEeqrneo2Hr66W7lT8s=
Subject key identifier:   1F:DE:C8:EB:A4:C1:AE:3E:E7:09:AF:EA:4D:E3:FC:20:E8:20:3E:D4
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       50
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/H97I66TBrj7nCa_qTeP8IOggPtQ.roa
Signing time:             Tue 07 Jun 2022 10:01:11 +0000
ROA not before:           Tue 07 Jun 2022 10:01:11 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        27.94.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:01:11 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=1FDEC8EBA4C1AE3EE709AFEA4DE3FC20E8203ED4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4c:de:7f:4b:85:b6:00:78:92:dd:54:2d:64:
                    4b:1e:0d:0d:86:e4:37:a9:5d:89:39:c6:18:f2:a6:
                    1d:93:53:89:62:f9:83:2b:11:58:54:58:57:e8:f9:
                    16:5b:8d:85:be:10:63:28:6e:2a:c8:4f:b5:58:b7:
                    b8:8a:83:22:40:e5:f6:52:68:17:82:2f:df:f6:77:
                    72:6e:ef:91:6e:21:82:bb:52:31:44:05:24:b7:24:
                    37:d0:d9:f6:4b:e1:1e:f2:5b:4e:f5:55:08:2f:38:
                    7a:84:88:35:33:e3:5d:ea:8f:4a:51:05:d7:7a:f5:
                    b5:60:bd:e6:f6:70:53:67:9d:4d:97:56:f2:03:96:
                    df:89:ce:2c:db:b9:2a:02:a6:4d:42:91:f1:53:e5:
                    75:91:40:1d:8f:e1:8c:b6:95:ac:a2:6b:84:81:83:
                    6e:c5:69:b4:e3:86:25:ea:47:27:9e:67:97:cf:38:
                    c5:73:ba:c0:ac:b2:09:3c:9f:a6:c1:0a:30:a6:c1:
                    dc:a8:38:a0:8b:ea:b3:fa:31:83:92:45:03:c8:9f:
                    6f:b3:e5:5e:b2:2a:4e:47:b4:12:0b:88:65:c4:83:
                    fb:a2:f5:a6:0e:8d:68:1a:76:98:cd:9e:fe:7f:51:
                    d3:5e:02:49:0b:be:80:b5:8b:e4:60:3f:7d:fc:5e:
                    f2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:DE:C8:EB:A4:C1:AE:3E:E7:09:AF:EA:4D:E3:FC:20:E8:20:3E:D4
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/H97I66TBrj7nCa_qTeP8IOggPtQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.94.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4a:94:ed:02:4f:25:73:b3:ef:ea:cf:73:37:b8:5d:7e:90:d4:
         61:6e:b2:b3:65:b6:67:cb:e4:8f:a2:b4:47:99:86:6d:f7:16:
         79:7a:b4:27:7e:65:fb:48:6d:ae:1d:49:67:0a:25:32:32:07:
         03:ce:83:ba:16:0f:f1:e5:39:ae:34:ab:d0:41:64:43:23:bc:
         f6:e8:19:c2:8c:8f:0e:f4:2d:9f:f8:ea:cf:ed:91:b1:e2:c5:
         9e:bb:f8:99:35:38:56:ef:54:dc:96:21:56:df:27:6b:02:79:
         be:46:9b:8c:a1:4b:31:c4:25:a8:65:0f:d5:0f:4b:50:1b:ab:
         f0:eb:9f:38:94:ee:8d:8f:2b:03:ef:e9:98:e2:fd:31:1d:cf:
         e6:04:02:bc:d7:6b:09:65:07:d5:9d:92:fc:12:8b:f2:54:cb:
         0d:87:91:7e:7c:03:35:ca:97:df:7b:30:b0:9b:ca:d3:d2:00:
         93:96:cf:c8:bc:ca:fe:0c:31:50:2f:ce:5c:d4:7d:72:6e:c8:
         7e:96:60:08:25:84:8a:56:88:b2:a5:6a:76:e7:3b:a6:57:31:
         d8:4b:d1:47:81:bf:3d:44:92:ec:43:ba:d1:1b:07:10:67:df:
         c4:34:56:6a:ca:0a:2f:b0:bc:2b:f6:f1:08:ff:ba:23:00:30:
         22:66:8b:26
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIBUDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNUJG
QTNFNTNFNTkxNDkyMzlBMTY4REZEOTJDNzU3NDVBQjY2Q0I2MB4XDTIyMDYwNzEw
MDExMVoXDTIzMDUxNTAxMzAwNFowMzExMC8GA1UEAxMoMUZERUM4RUJBNEMxQUUz
RUU3MDlBRkVBNERFM0ZDMjBFODIwM0VENDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMtM3n9LhbYAeJLdVC1kSx4NDYbkN6ldiTnGGPKmHZNTiWL5gysR
WFRYV+j5FluNhb4QYyhuKshPtVi3uIqDIkDl9lJoF4Iv3/Z3cm7vkW4hgrtSMUQF
JLckN9DZ9kvhHvJbTvVVCC84eoSINTPjXeqPSlEF13r1tWC95vZwU2edTZdW8gOW
34nOLNu5KgKmTUKR8VPldZFAHY/hjLaVrKJrhIGDbsVptOOGJepHJ55nl884xXO6
wKyyCTyfpsEKMKbB3Kg4oIvqs/oxg5JFA8ifb7PlXrIqTke0EguIZcSD+6L1pg6N
aBp2mM2e/n9R014CSQu+gLWL5GA/ffxe8h0CAwEAAaOCAiMwggIfMB0GA1UdDgQW
BBQf3sjrpMGuPucJr+pN4/wg6CA+1DAfBgNVHSMEGDAWgBQVv6PlPlkUkjmhaN/Z
LHV0WrZstjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTYxL0ZiLWo1VDVaRkpJNW9XamYyU3gxZEZxMmJMWS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZiLWo1VDVaRkpJNW9XamYyU3gxZEZx
MmJMWS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8xNjEvSDk3STY2VEJyajduQ2FfcVRlUDhJT2dnUHRRLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw
BQMDABteMA0GCSqGSIb3DQEBCwUAA4IBAQBKlO0CTyVzs+/qz3M3uF1+kNRhbrKz
ZbZny+SPorRHmYZt9xZ5erQnfmX7SG2uHUlnCiUyMgcDzoO6Fg/x5TmuNKvQQWRD
I7z26BnCjI8O9C2f+OrP7ZGx4sWeu/iZNThW71TcliFW3ydrAnm+RpuMoUsxxCWo
ZQ/VD0tQG6vw6584lO6NjysD7+mY4v0xHc/mBAK812sJZQfVnZL8EovyVMsNh5F+
fAM1ypffezCwm8rT0gCTls/IvMr+DDFQL85c1H1ybsh+lmAIJYSKVoiypWp25zum
VzHYS9FHgb89RJLsQ7rRGwcQZ9/ENFZqygovsLwr9vEI/7ojADAiZosm
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org