Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/N2jIaSBZMnIQdzUwl_Z3VFFiZT8.roa
File:                     N2jIaSBZMnIQdzUwl_Z3VFFiZT8.roa (raw, json)
Hash identifier:          tW8FjD5rH+DKJ6BPViRY5B/owD2xRABlbG8O72bCtow=
Subject key identifier:   37:68:C8:69:20:59:32:72:10:77:35:30:97:F6:77:54:51:62:65:3F
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       40
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/N2jIaSBZMnIQdzUwl_Z3VFFiZT8.roa
Signing time:             Tue 07 Jun 2022 09:57:08 +0000
ROA not before:           Tue 07 Jun 2022 09:57:08 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        113.144.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 09:57:08 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=3768C869205932721077353097F677545162653F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:fc:59:38:69:55:71:e5:0c:c6:c0:4c:d9:96:
                    52:d0:49:93:b7:c2:5f:b6:ae:3b:e1:ef:63:09:20:
                    12:c1:03:62:27:0f:75:1c:79:91:9e:a0:83:ad:70:
                    7b:5e:44:ee:a0:b1:30:01:6f:bc:f7:e5:55:66:1e:
                    07:9a:34:6b:e6:ca:be:22:5a:0c:49:5d:c9:6a:3a:
                    30:56:19:b6:2d:d1:6c:21:4a:8c:37:bf:db:e5:75:
                    3a:f9:b2:b3:32:6b:04:14:3f:2c:da:71:1b:71:a2:
                    39:eb:d8:bc:85:07:50:cf:57:d1:b0:31:54:6f:e7:
                    e0:8f:49:3f:b0:e6:d1:bb:f6:c3:87:31:69:2d:ca:
                    9b:61:83:bc:69:e9:cb:a7:fd:6e:36:a4:39:53:3f:
                    28:80:8a:7b:39:94:ff:62:45:9d:fa:88:00:b3:33:
                    7c:b3:0f:46:03:e2:74:1b:b1:e7:e5:7b:33:35:2d:
                    87:e8:0a:05:18:cc:72:3d:ef:e6:19:3f:eb:6f:bc:
                    f7:ca:dd:58:27:ff:04:b5:76:c7:8b:d4:1e:f3:7e:
                    b2:b3:ef:36:5b:df:c4:8a:c3:af:92:c9:de:9c:34:
                    ab:bc:5e:61:c7:54:4a:f6:fc:a5:e3:9c:e8:e4:90:
                    b4:da:4f:29:e7:00:52:6f:dd:ca:06:51:1b:8f:28:
                    68:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:68:C8:69:20:59:32:72:10:77:35:30:97:F6:77:54:51:62:65:3F
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/N2jIaSBZMnIQdzUwl_Z3VFFiZT8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.144.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         03:e6:d3:d2:5a:44:5f:54:ee:1f:bd:14:2d:45:76:74:67:ff:
         96:3a:99:1e:b8:39:12:0a:d6:b4:eb:54:a2:63:d5:87:fa:77:
         f7:5c:45:6d:44:69:28:3f:66:02:83:47:a4:ad:ed:7a:6f:86:
         69:06:65:08:d2:4e:b3:d4:f9:dd:95:45:40:51:3c:d4:dc:4b:
         2b:95:35:11:17:c2:fd:36:9d:a6:28:dd:2d:2e:c1:e1:8d:e9:
         ce:31:f0:10:9a:cc:78:bb:f2:86:26:1e:74:4d:19:81:c7:18:
         62:8c:b2:71:ca:77:44:70:cd:9c:c7:00:64:ad:55:da:06:ac:
         34:61:57:87:57:1d:68:60:fc:89:2d:89:dc:22:35:31:7c:8a:
         99:b9:f9:7d:45:36:f9:05:fa:0c:ad:fd:dd:c7:99:10:01:ef:
         c0:5e:6c:02:58:bf:be:d0:36:4d:56:16:fc:68:aa:7d:cf:83:
         2c:79:4b:e6:b1:2d:f7:04:85:bb:5f:50:9c:4b:54:72:fa:94:
         ef:9e:81:56:a8:4c:80:50:84:b0:23:b5:33:d8:7a:b5:c5:92:
         9a:20:c5:b9:60:65:02:35:80:12:b8:b6:3d:25:af:89:85:d1:
         d8:a3:00:6f:e6:be:89:71:0e:58:21:28:cf:3d:5a:15:75:38:
         fa:f4:dc:7f
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIBQDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNUJG
QTNFNTNFNTkxNDkyMzlBMTY4REZEOTJDNzU3NDVBQjY2Q0I2MB4XDTIyMDYwNzA5
NTcwOFoXDTIzMDUxNTAxMzAwNFowMzExMC8GA1UEAxMoMzc2OEM4NjkyMDU5MzI3
MjEwNzczNTMwOTdGNjc3NTQ1MTYyNjUzRjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOH8WThpVXHlDMbATNmWUtBJk7fCX7auO+HvYwkgEsEDYicPdRx5
kZ6gg61we15E7qCxMAFvvPflVWYeB5o0a+bKviJaDEldyWo6MFYZti3RbCFKjDe/
2+V1OvmyszJrBBQ/LNpxG3GiOevYvIUHUM9X0bAxVG/n4I9JP7Dm0bv2w4cxaS3K
m2GDvGnpy6f9bjakOVM/KICKezmU/2JFnfqIALMzfLMPRgPidBux5+V7MzUth+gK
BRjMcj3v5hk/62+898rdWCf/BLV2x4vUHvN+srPvNlvfxIrDr5LJ3pw0q7xeYcdU
Svb8peOc6OSQtNpPKecAUm/dygZRG48oaN8CAwEAAaOCAiMwggIfMB0GA1UdDgQW
BBQ3aMhpIFkychB3NTCX9ndUUWJlPzAfBgNVHSMEGDAWgBQVv6PlPlkUkjmhaN/Z
LHV0WrZstjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTYxL0ZiLWo1VDVaRkpJNW9XamYyU3gxZEZxMmJMWS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZiLWo1VDVaRkpJNW9XamYyU3gxZEZx
MmJMWS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8xNjEvTjJqSWFTQlpNbklRZHpVd2xfWjNWRkZpWlQ4LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw
BQMDAHGQMA0GCSqGSIb3DQEBCwUAA4IBAQAD5tPSWkRfVO4fvRQtRXZ0Z/+WOpke
uDkSCta061SiY9WH+nf3XEVtRGkoP2YCg0ekre16b4ZpBmUI0k6z1PndlUVAUTzU
3EsrlTURF8L9Np2mKN0tLsHhjenOMfAQmsx4u/KGJh50TRmBxxhijLJxyndEcM2c
xwBkrVXaBqw0YVeHVx1oYPyJLYncIjUxfIqZufl9RTb5BfoMrf3dx5kQAe/AXmwC
WL++0DZNVhb8aKp9z4MseUvmsS33BIW7X1CcS1Ry+pTvnoFWqEyAUISwI7Uz2Hq1
xZKaIMW5YGUCNYASuLY9Ja+JhdHYowBv5r6JcQ5YISjPPVoVdTj69Nx/
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:08 2023 by rpki-client on console-ams.rpki-client.org