Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/_sKQOdhjL7M-gY0VdC93MtQsYqk.roa
File:                     _sKQOdhjL7M-gY0VdC93MtQsYqk.roa (raw, json)
Hash identifier:          yo+iSrDA+WczD9+v9+CWWT2DVgvhTyqNkApcYhd+okg=
Subject key identifier:   FE:C2:90:39:D8:63:2F:B3:3E:81:8D:15:74:2F:77:32:D4:2C:62:A9
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0101
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/_sKQOdhjL7M-gY0VdC93MtQsYqk.roa
Signing time:             Tue 14 Jun 2022 09:56:00 +0000
ROA not before:           Tue 14 Jun 2022 09:56:00 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        210.230.0.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 257 (0x101)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun 14 09:56:00 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=FEC29039D8632FB33E818D15742F7732D42C62A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:86:e5:55:96:b8:11:11:f1:eb:e1:e6:1b:75:
                    87:a7:6a:7c:19:71:72:76:44:30:87:8f:14:31:27:
                    d2:ec:d8:43:a1:bd:67:c1:eb:fd:93:bc:c3:aa:6e:
                    3d:f5:32:62:11:54:89:79:de:a9:fe:e5:bf:99:b7:
                    dd:7d:38:42:22:27:11:ec:05:31:c0:07:5b:c9:f8:
                    d5:c1:53:db:98:10:ab:83:0e:bf:72:07:ed:92:2b:
                    10:22:1d:42:16:cc:f9:35:64:96:bf:fc:38:4a:bf:
                    73:d5:9b:dd:7e:9d:6f:71:6c:7e:af:05:82:80:f5:
                    4a:1c:0c:56:9e:2c:a3:4b:ea:e5:b3:d2:f1:3c:11:
                    e9:d4:2e:b4:0b:0c:4b:df:7c:65:46:c6:57:26:d7:
                    a3:50:cd:43:4b:a0:42:a3:80:73:07:d5:63:f5:20:
                    10:03:4b:3d:d0:03:07:94:33:51:7c:57:6b:e7:52:
                    08:49:d9:e8:74:96:d3:3b:ef:50:eb:2b:70:dc:4b:
                    13:52:34:22:87:7c:ba:d1:2e:70:53:b6:3e:48:7f:
                    2d:f4:85:ef:2e:11:5b:29:1d:83:da:d1:04:dd:40:
                    96:a8:a2:35:fa:e3:11:80:aa:4b:ee:6f:8f:c1:99:
                    fa:0f:85:72:0b:9f:0a:18:0d:68:91:b5:cb:41:32:
                    cf:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:C2:90:39:D8:63:2F:B3:3E:81:8D:15:74:2F:77:32:D4:2C:62:A9
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/_sKQOdhjL7M-gY0VdC93MtQsYqk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.230.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         06:a8:50:00:65:fa:b1:fd:f8:19:13:41:97:ba:97:ea:13:a1:
         cb:fa:b0:20:eb:72:b5:f9:73:6a:69:60:33:ff:1d:a6:d6:e2:
         c8:d7:ed:7f:f0:70:b5:1e:1f:72:56:89:01:14:38:1e:1a:3e:
         10:29:32:d8:ed:97:6d:00:7a:89:d0:ab:4a:29:4a:d9:2c:a8:
         f9:cc:ae:1d:8c:cf:34:75:f1:ef:2a:2f:68:27:ac:f8:b8:4a:
         79:32:ae:c3:b5:5b:cc:16:5f:41:db:38:eb:a9:07:6d:48:f0:
         a7:e8:f5:06:ca:71:7a:50:ee:dd:0d:a8:f0:ef:90:79:08:49:
         1e:51:e8:6f:31:7f:b3:2b:d4:9a:ab:b0:78:11:82:73:67:8c:
         37:46:4c:a4:27:1f:25:3f:66:69:d9:4a:26:9c:80:dc:fd:1a:
         8d:f3:a7:b9:28:28:d8:02:b6:91:97:ac:86:aa:2d:2c:03:88:
         9b:72:11:83:d2:6c:38:86:e0:fa:48:cb:b0:e6:7b:e0:bb:73:
         2a:ae:42:41:e9:52:3f:41:d9:a0:05:9b:ae:66:c6:3c:c6:60:
         19:10:bc:fe:d2:f9:22:40:7c:2c:30:f3:ba:9e:c0:20:19:41:
         a9:0a:a6:76:e4:f4:e4:1a:e9:b6:61:de:08:9b:9d:9d:aa:4f:
         f9:4b:31:44
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yMjA2MTQw
OTU2MDBaFw0yMzA1MTUwMTMwMDRaMDMxMTAvBgNVBAMTKEZFQzI5MDM5RDg2MzJG
QjMzRTgxOEQxNTc0MkY3NzMyRDQyQzYyQTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2huVVlrgREfHr4eYbdYenanwZcXJ2RDCHjxQxJ9Ls2EOhvWfB
6/2TvMOqbj31MmIRVIl53qn+5b+Zt919OEIiJxHsBTHAB1vJ+NXBU9uYEKuDDr9y
B+2SKxAiHUIWzPk1ZJa//DhKv3PVm91+nW9xbH6vBYKA9UocDFaeLKNL6uWz0vE8
EenULrQLDEvffGVGxlcm16NQzUNLoEKjgHMH1WP1IBADSz3QAweUM1F8V2vnUghJ
2eh0ltM771DrK3DcSxNSNCKHfLrRLnBTtj5Ify30he8uEVspHYPa0QTdQJaoojX6
4xGAqkvub4/BmfoPhXILnwoYDWiRtctBMs+JAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU/sKQOdhjL7M+gY0VdC93MtQsYqkwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL19zS1FPZGhqTDdNLWdZMFZkQzkzTXRRc1lxay5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAfS5gAwDQYJKoZIhvcNAQELBQADggEBAAaoUABl+rH9+BkTQZe6l+oTocv6
sCDrcrX5c2ppYDP/HabW4sjX7X/wcLUeH3JWiQEUOB4aPhApMtjtl20AeonQq0op
StksqPnMrh2MzzR18e8qL2gnrPi4SnkyrsO1W8wWX0HbOOupB21I8Kfo9QbKcXpQ
7t0NqPDvkHkISR5R6G8xf7Mr1JqrsHgRgnNnjDdGTKQnHyU/ZmnZSiacgNz9Go3z
p7koKNgCtpGXrIaqLSwDiJtyEYPSbDiG4PpIy7Dme+C7cyquQkHpUj9B2aAFm65m
xjzGYBkQvP7S+SJAfCww87qewCAZQakKpnbk9OQa6bZh3gibnZ2qT/lLMUQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org