Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/SqKFy_YvqMF-wVfRSiDnUGVyO2A.roa
File:                     SqKFy_YvqMF-wVfRSiDnUGVyO2A.roa (raw, json)
Hash identifier:          i5NN6aZ/SpfYWm7++AcX8xptMLr7WLYq8CloYMIM6Cg=
Subject key identifier:   4A:A2:85:CB:F6:2F:A8:C1:7E:C1:57:D1:4A:20:E7:50:65:72:3B:60
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       35
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/SqKFy_YvqMF-wVfRSiDnUGVyO2A.roa
Signing time:             Thu 28 Apr 2022 09:16:41 +0000
ROA not before:           Thu 28 Apr 2022 09:16:41 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     2516
IP address blocks:        106.179.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Apr 28 09:16:41 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=4AA285CBF62FA8C17EC157D14A20E75065723B60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fb:39:63:18:f9:9f:8f:b7:59:d4:58:fa:c0:
                    40:51:f7:56:0a:14:43:53:67:f6:f8:54:d5:5b:0b:
                    2c:83:90:6b:c2:e5:9a:e8:21:27:ea:11:d3:0a:9b:
                    36:6c:73:f1:5f:61:26:39:ec:3b:a4:fc:91:e7:0d:
                    46:c0:64:55:11:64:b7:5e:0b:b0:18:fa:f3:f4:5c:
                    4f:b3:48:28:7e:84:ad:5b:f5:7e:5c:44:25:b7:86:
                    45:6b:5b:f4:a6:88:ba:d9:a0:cb:04:a0:e2:a5:09:
                    0c:f3:78:13:35:8e:02:1c:ca:58:28:b9:be:84:6d:
                    d6:28:2e:fe:fd:53:e0:c9:51:36:82:a0:04:9b:ca:
                    5e:27:a4:b1:c7:9e:47:72:7f:d4:1f:39:b3:2b:f2:
                    e4:06:60:e1:ec:9b:5d:c9:e7:84:e5:2b:c1:99:a3:
                    0e:48:99:23:d2:a8:bd:cb:83:e0:b6:db:d9:86:46:
                    f8:8a:35:82:f4:ba:0c:5b:d2:a4:94:72:33:9e:2b:
                    37:8c:42:40:2e:87:56:91:7d:c4:b0:65:04:1c:b0:
                    a9:60:39:e7:4a:bc:77:2d:99:1e:e6:07:b9:e3:11:
                    f0:94:e3:7a:ef:7d:59:e6:57:de:68:32:6a:ab:4d:
                    36:8c:f6:ba:11:43:64:d9:0c:dc:29:4d:5b:52:4c:
                    6e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A2:85:CB:F6:2F:A8:C1:7E:C1:57:D1:4A:20:E7:50:65:72:3B:60
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/SqKFy_YvqMF-wVfRSiDnUGVyO2A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.179.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         73:f9:cd:09:f1:1f:6e:0e:c0:95:f5:62:65:32:80:2e:cc:7f:
         ac:40:e8:e6:2c:43:df:92:6c:a1:57:d3:54:bb:6e:ba:80:ab:
         72:d5:03:5c:c8:e6:cd:bf:c7:1c:39:43:d1:62:57:56:0b:8a:
         6a:d0:a9:e8:f3:a7:2c:06:59:12:08:ef:f2:ac:7f:8e:01:6d:
         52:ea:ff:6d:c0:74:1d:35:22:98:bb:63:48:94:7b:2e:d3:17:
         fc:8b:6c:d3:61:9c:4c:eb:fd:fa:7c:47:61:a7:ee:1d:97:b1:
         06:a7:0d:99:9f:9f:be:1c:77:2b:7c:cd:3f:8d:f7:fe:2f:7d:
         8b:db:bb:bc:9b:03:76:d8:43:bc:c4:8a:4b:f9:cc:49:7d:73:
         04:a4:9c:2c:79:c5:cd:6a:fa:38:eb:c1:1e:a2:bf:5e:da:da:
         53:35:4c:bb:c1:52:5b:28:52:66:4e:35:64:2c:11:2c:79:15:
         84:3d:68:c7:f6:05:1f:15:b9:94:e7:d1:0d:b5:c6:17:cd:8f:
         02:a2:f4:10:2c:9e:4f:4b:e3:b4:db:b3:09:66:7d:3a:cb:82:
         67:d6:2a:e4:cc:2c:15:da:5d:83:4f:67:62:33:6a:8c:5f:03:
         6d:72:b1:cb:d7:66:c5:42:5b:b8:ad:c2:b0:fa:d5:07:46:de:
         04:da:b7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----