Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/PbcLa-QGDjLxRe78vE1jVDvKZTc.roa
File:                     PbcLa-QGDjLxRe78vE1jVDvKZTc.roa (raw, json)
Hash identifier:          Ld/YvNGdUJpzyrze7nqa0FnMIcJn4xeZJmF6QolQa9U=
Subject key identifier:   3D:B7:0B:6B:E4:06:0E:32:F1:45:EE:FC:BC:4D:63:54:3B:CA:65:37
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       9E
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/PbcLa-QGDjLxRe78vE1jVDvKZTc.roa
Signing time:             Tue 07 Jun 2022 10:21:16 +0000
ROA not before:           Tue 07 Jun 2022 10:21:16 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        222.1.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158 (0x9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:21:16 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=3DB70B6BE4060E32F145EEFCBC4D63543BCA6537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:d0:f6:63:cb:fe:f2:21:56:5a:49:b4:13:3f:
                    3a:db:54:56:bb:04:5d:fd:94:55:49:b0:da:58:14:
                    4b:95:6d:48:ef:fd:12:27:bb:be:ad:61:41:b3:73:
                    e2:c1:6b:1a:cd:d7:9a:f5:6a:62:a9:79:94:e3:b8:
                    b8:0c:d2:7a:7e:f0:fc:7a:20:46:37:28:ab:93:11:
                    e8:e1:d4:dc:4b:20:92:38:58:6e:9b:7a:dd:22:f2:
                    7d:27:da:71:93:4b:be:34:f9:f9:16:b6:84:9f:02:
                    a2:ec:88:82:ec:74:9b:78:4a:a9:ab:9b:ad:32:e1:
                    7b:9e:0a:2d:1d:a3:ed:23:67:9f:02:95:5a:42:25:
                    99:48:1a:e6:a3:af:3a:26:78:7d:b5:0d:5f:59:59:
                    16:cf:9c:51:9b:81:8e:67:6c:e8:f1:34:f2:61:cd:
                    44:9a:2b:8a:65:87:df:4c:79:e3:40:70:c5:a1:36:
                    ed:16:f4:78:1c:4f:e3:67:39:2b:f8:fb:61:66:bf:
                    82:30:c5:82:ef:f4:45:c8:14:79:f0:25:19:e0:68:
                    7a:a5:63:0c:ee:ab:42:e7:e8:ef:b1:8d:8c:da:de:
                    98:dc:33:69:bf:ab:3f:0f:de:6d:81:d9:8f:cd:b1:
                    33:52:75:45:d7:26:81:d8:e9:8d:21:b5:6f:de:df:
                    57:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B7:0B:6B:E4:06:0E:32:F1:45:EE:FC:BC:4D:63:54:3B:CA:65:37
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/PbcLa-QGDjLxRe78vE1jVDvKZTc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.1.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6c:48:81:0d:73:3b:d3:bd:7f:62:fd:ae:3c:04:f2:a5:52:fd:
         18:29:27:3f:46:f1:6c:74:74:d3:3e:7c:41:b7:a5:35:b5:29:
         f9:04:15:4d:d5:a4:f4:6c:7b:4b:25:64:b8:4e:16:4a:2d:8b:
         93:b4:b9:b4:dd:62:86:9a:4d:d8:a1:37:92:3b:e6:ac:80:cc:
         a7:ab:37:e5:eb:24:18:9e:f8:7c:a1:be:4a:10:98:3e:50:9a:
         b6:52:e5:cf:1b:02:71:58:46:88:d4:f6:77:12:e4:2e:94:06:
         e7:d4:97:84:a8:88:89:f5:7e:af:27:0f:75:83:b2:1a:2c:55:
         aa:12:c4:71:6c:24:de:51:ee:45:f7:fb:da:8d:27:2c:81:94:
         63:79:a9:04:49:91:cd:06:4d:d1:f1:26:75:d6:ea:db:94:66:
         2e:fe:cf:1b:d5:48:cf:0c:d5:4c:48:c5:1a:b9:58:59:7d:40:
         54:76:cb:5c:9f:ec:81:95:95:12:bc:12:9d:93:d6:80:51:e1:
         2a:4d:b7:7d:5b:55:6d:87:c8:ca:cb:fd:7c:5c:27:e9:62:a6:
         27:83:d8:44:20:a2:2e:73:40:1c:ac:b1:4b:c8:5d:10:d0:a6:
         55:82:c5:bf:60:1e:1e:6f:42:c3:20:19:0c:c0:c2:6d:f9:3e:
         ec:1b:0f:6d
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yMjA2MDcx
MDIxMTZaFw0yMzA1MTUwMTMwMDRaMDMxMTAvBgNVBAMTKDNEQjcwQjZCRTQwNjBF
MzJGMTQ1RUVGQ0JDNEQ2MzU0M0JDQTY1MzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDq0PZjy/7yIVZaSbQTPzrbVFa7BF39lFVJsNpYFEuVbUjv/RIn
u76tYUGzc+LBaxrN15r1amKpeZTjuLgM0np+8Px6IEY3KKuTEejh1NxLIJI4WG6b
et0i8n0n2nGTS740+fkWtoSfAqLsiILsdJt4Sqmrm60y4XueCi0do+0jZ58ClVpC
JZlIGuajrzomeH21DV9ZWRbPnFGbgY5nbOjxNPJhzUSaK4plh99MeeNAcMWhNu0W
9HgcT+NnOSv4+2Fmv4IwxYLv9EXIFHnwJRngaHqlYwzuq0Ln6O+xjYza3pjcM2m/
qz8P3m2B2Y/NsTNSdUXXJoHY6Y0htW/e31cLAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUPbcLa+QGDjLxRe78vE1jVDvKZTcwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL1BiY0xhLVFHRGpMeFJlNzh2RTFqVkR2S1pUYy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwDeATANBgkqhkiG9w0BAQsFAAOCAQEAbEiBDXM7071/Yv2uPATypVL9GCkn
P0bxbHR00z58QbelNbUp+QQVTdWk9Gx7SyVkuE4WSi2Lk7S5tN1ihppN2KE3kjvm
rIDMp6s35eskGJ74fKG+ShCYPlCatlLlzxsCcVhGiNT2dxLkLpQG59SXhKiIifV+
rycPdYOyGixVqhLEcWwk3lHuRff72o0nLIGUY3mpBEmRzQZN0fEmddbq25RmLv7P
G9VIzwzVTEjFGrlYWX1AVHbLXJ/sgZWVErwSnZPWgFHhKk23fVtVbYfIysv9fFwn
6WKmJ4PYRCCiLnNAHKyxS8hdENCmVYLFv2AeHm9CwyAZDMDCbfk+7BsPbQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org