Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Q1EUsv98wMstUfIujHSKJm-TadA.roa
File:                     Q1EUsv98wMstUfIujHSKJm-TadA.roa (raw, json)
Hash identifier:          DmqcGCskcAoIJJFjua9Fl296UK9vYMFDJChTPeW1MiU=
Subject key identifier:   43:51:14:B2:FF:7C:C0:CB:2D:51:F2:2E:8C:74:8A:26:6F:93:69:D0
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       58
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Q1EUsv98wMstUfIujHSKJm-TadA.roa
Signing time:             Tue 07 Jun 2022 10:03:10 +0000
ROA not before:           Tue 07 Jun 2022 10:03:10 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        114.17.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:03:10 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=435114B2FF7CC0CB2D51F22E8C748A266F9369D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7c:3e:e3:68:fd:85:fe:81:70:69:91:37:65:
                    b2:32:ac:02:7f:ae:ff:04:ca:5b:3c:55:f1:d5:c8:
                    35:35:fa:c0:85:a8:0a:d6:ad:1b:30:2d:2a:d1:e8:
                    99:86:26:c5:24:6c:4d:7f:13:ea:38:55:0a:b5:a1:
                    da:98:59:3c:8a:a8:2d:ca:89:f2:e4:8c:c9:f2:37:
                    5b:81:5c:71:ae:b5:46:ba:12:0e:16:3e:2a:91:9a:
                    60:7b:3d:1e:58:37:3c:5c:ac:29:78:8b:18:16:36:
                    61:c0:d3:62:0a:0d:65:35:ba:64:7d:ab:ae:ed:48:
                    53:f1:9b:15:e6:98:c0:9e:05:bc:4d:a6:12:db:3c:
                    c4:44:d6:d0:05:e6:dd:15:31:c2:d1:4a:e9:26:d0:
                    20:1d:7c:1a:c1:f5:81:3c:22:4a:f8:24:cd:95:49:
                    e2:43:1a:36:d3:d0:bd:b9:61:e6:f4:65:40:f6:05:
                    c8:79:d0:f9:4c:ca:37:d4:ce:20:27:6f:65:df:ac:
                    94:ce:d7:f9:b6:a9:01:e8:4f:d0:96:8e:48:61:91:
                    86:c0:e0:81:b4:98:46:77:eb:ef:c0:76:eb:2b:af:
                    6f:4d:7d:54:18:ac:7f:a3:b1:da:82:a4:20:c1:45:
                    0b:ad:61:51:56:4a:2b:fd:f5:44:6f:96:f4:ea:9b:
                    38:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:51:14:B2:FF:7C:C0:CB:2D:51:F2:2E:8C:74:8A:26:6F:93:69:D0
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Q1EUsv98wMstUfIujHSKJm-TadA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.17.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         33:00:61:1c:01:ae:10:64:f3:4f:c0:14:0c:c8:75:e6:4c:c4:
         a9:2b:29:b1:ed:c3:ea:c1:ee:1a:97:ed:17:b2:46:35:56:a6:
         9a:af:d1:4b:1e:f9:08:3a:db:d6:bc:65:28:bb:de:df:b6:39:
         4d:bf:ab:86:a6:cb:74:58:c8:05:93:ca:b0:c5:3f:f1:fc:65:
         ba:ea:1b:05:70:7e:b3:7b:57:fb:a3:fd:9d:fb:89:9b:b2:8e:
         49:59:28:57:9a:88:f4:3a:cf:92:31:07:c3:34:76:ad:73:c8:
         6c:82:21:71:de:87:71:37:32:8d:16:f6:db:b1:b3:0c:ff:99:
         82:b3:c5:90:dc:cf:b0:fc:44:1b:01:35:6d:73:b2:a9:7e:7f:
         98:22:ba:62:49:78:e4:fc:63:4a:c4:a9:ba:06:cf:64:5e:99:
         b1:96:08:c3:92:69:f5:08:22:05:b7:ff:89:56:15:44:61:39:
         9e:fd:bd:99:26:0a:da:31:fc:7a:0e:28:c3:95:45:3f:11:e1:
         88:a6:b2:66:48:4e:b3:4f:05:11:6a:7e:f3:03:f7:77:40:53:
         dc:4f:87:cd:5c:b9:f0:06:0a:e6:34:c8:57:08:2d:01:89:c3:
         7a:32:87:7e:99:d9:d8:37:e4:a8:62:52:39:57:2e:44:2f:a5:
         6e:ba:39:69
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIBWDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNUJG
QTNFNTNFNTkxNDkyMzlBMTY4REZEOTJDNzU3NDVBQjY2Q0I2MB4XDTIyMDYwNzEw
MDMxMFoXDTIzMDUxNTAxMzAwNFowMzExMC8GA1UEAxMoNDM1MTE0QjJGRjdDQzBD
QjJENTFGMjJFOEM3NDhBMjY2RjkzNjlEMDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALh8PuNo/YX+gXBpkTdlsjKsAn+u/wTKWzxV8dXINTX6wIWoCtat
GzAtKtHomYYmxSRsTX8T6jhVCrWh2phZPIqoLcqJ8uSMyfI3W4Fcca61RroSDhY+
KpGaYHs9Hlg3PFysKXiLGBY2YcDTYgoNZTW6ZH2rru1IU/GbFeaYwJ4FvE2mEts8
xETW0AXm3RUxwtFK6SbQIB18GsH1gTwiSvgkzZVJ4kMaNtPQvblh5vRlQPYFyHnQ
+UzKN9TOICdvZd+slM7X+bapAehP0JaOSGGRhsDggbSYRnfr78B26yuvb019VBis
f6Ox2oKkIMFFC61hUVZKK/31RG+W9OqbODMCAwEAAaOCAiMwggIfMB0GA1UdDgQW
BBRDURSy/3zAyy1R8i6MdIomb5Np0DAfBgNVHSMEGDAWgBQVv6PlPlkUkjmhaN/Z
LHV0WrZstjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTYxL0ZiLWo1VDVaRkpJNW9XamYyU3gxZEZxMmJMWS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZiLWo1VDVaRkpJNW9XamYyU3gxZEZx
MmJMWS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8xNjEvUTFFVXN2OTh3TXN0VWZJdWpIU0tKbS1UYWRBLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw
BQMDAHIRMA0GCSqGSIb3DQEBCwUAA4IBAQAzAGEcAa4QZPNPwBQMyHXmTMSpKymx
7cPqwe4al+0XskY1Vqaar9FLHvkIOtvWvGUou97ftjlNv6uGpst0WMgFk8qwxT/x
/GW66hsFcH6ze1f7o/2d+4mbso5JWShXmoj0Os+SMQfDNHatc8hsgiFx3odxNzKN
FvbbsbMM/5mCs8WQ3M+w/EQbATVtc7Kpfn+YIrpiSXjk/GNKxKm6Bs9kXpmxlgjD
kmn1CCIFt/+JVhVEYTme/b2ZJgraMfx6DijDlUU/EeGIprJmSE6zTwURan7zA/d3
QFPcT4fNXLnwBgrmNMhXCC0BicN6Mod+mdnYN+SoYlI5Vy5EL6Vuujlp
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:08 2023 by rpki-client on console-ams.rpki-client.org