Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/avMeRddeHmV0L6QTK2xjISjXtWA.roa
File:                     avMeRddeHmV0L6QTK2xjISjXtWA.roa (raw, json)
Hash identifier:          WIq1wpxBr9MUnFHclZSwTg8gsOPSOk4kNY5BLQqkxD8=
Subject key identifier:   6A:F3:1E:45:D7:5E:1E:65:74:2F:A4:13:2B:6C:63:21:28:D7:B5:60
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       78
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/avMeRddeHmV0L6QTK2xjISjXtWA.roa
Signing time:             Tue 07 Jun 2022 10:11:16 +0000
ROA not before:           Tue 07 Jun 2022 10:11:16 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        106.168.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:11:16 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=6AF31E45D75E1E65742FA4132B6C632128D7B560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cd:5b:30:46:94:ea:36:cc:c7:18:06:44:4f:
                    e0:a0:33:63:42:52:08:f4:68:7d:ae:08:15:30:da:
                    b0:e4:d4:40:05:2a:e9:52:11:3e:03:49:d9:7f:44:
                    7e:07:3e:54:b8:8f:49:34:a4:42:e2:d6:6c:87:b2:
                    b3:98:7e:cf:ec:8d:8b:9d:f1:b0:e1:8a:5b:90:6a:
                    fa:e8:09:43:1b:23:f9:b2:64:e3:87:b6:5a:de:6b:
                    cb:14:36:37:46:bb:55:c9:ae:15:aa:1e:0e:64:8e:
                    d3:ad:fa:ad:40:0c:80:1b:12:b2:91:a0:a5:ba:be:
                    30:cf:95:4e:ba:68:fe:ca:fa:79:90:16:af:79:72:
                    7d:17:c3:8f:49:74:c8:cd:c4:b8:97:d3:d8:67:3f:
                    b7:d2:90:4e:5f:2f:c9:76:03:d3:93:8f:28:f5:e3:
                    82:cb:16:8d:a9:93:30:ac:f9:6a:a3:b7:c3:b2:53:
                    ab:c1:a8:c1:20:fb:2c:f2:4f:67:0f:f4:c6:3a:45:
                    25:38:a6:a2:76:3c:80:fb:73:00:cb:87:92:6d:c0:
                    89:ff:c4:fd:23:52:66:a4:d9:df:cf:2b:e5:d1:a6:
                    a3:8f:34:67:60:12:18:32:53:2c:30:e5:ce:de:46:
                    09:0e:bf:cb:bb:f1:b0:c9:4d:f7:61:1d:4b:a2:1c:
                    52:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F3:1E:45:D7:5E:1E:65:74:2F:A4:13:2B:6C:63:21:28:D7:B5:60
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/avMeRddeHmV0L6QTK2xjISjXtWA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.168.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         35:e0:a4:03:ca:d8:40:a9:a4:d6:f0:eb:4e:5d:60:22:0e:a1:
         d4:cf:03:67:2f:ca:b1:fa:91:33:15:27:fc:27:17:73:d5:f7:
         12:68:3e:cf:6d:95:54:eb:53:96:3c:1b:e5:53:1c:dd:14:fd:
         b6:16:38:98:39:e8:5d:34:55:ec:0e:cd:75:9e:1c:ed:ba:1d:
         dc:2c:e6:c8:6c:51:33:39:e4:b3:2b:04:b6:54:56:b0:57:e7:
         97:01:d6:7a:21:52:4a:c0:f8:61:36:ce:75:75:6d:08:1b:96:
         53:c1:8a:59:4c:22:29:ad:92:35:5b:88:ab:b8:9f:a3:1d:49:
         6a:5f:dc:0f:1a:00:3d:ea:bb:c9:23:56:43:10:18:0f:d9:f6:
         92:18:ba:0e:ad:78:1e:5f:20:5a:61:c2:74:06:24:5c:38:e3:
         19:e0:8c:3b:e0:9c:56:3c:5e:b6:50:2f:67:6b:c8:b6:87:7c:
         d8:a3:32:e5:92:28:5f:5f:f8:77:6d:1f:ec:76:2f:5a:05:42:
         8d:50:a4:09:fe:84:90:91:93:02:0e:15:0e:97:4d:58:db:8b:
         da:2e:1b:ae:a8:8a:d3:32:87:1d:5f:ae:d0:ec:5d:fd:44:39:
         64:04:1e:82:10:d1:bb:1c:5f:7e:03:92:84:f7:88:27:33:e1:
         d1:cf:40:fa
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIBeDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNUJG
QTNFNTNFNTkxNDkyMzlBMTY4REZEOTJDNzU3NDVBQjY2Q0I2MB4XDTIyMDYwNzEw
MTExNloXDTIzMDUxNTAxMzAwNFowMzExMC8GA1UEAxMoNkFGMzFFNDVENzVFMUU2
NTc0MkZBNDEzMkI2QzYzMjEyOEQ3QjU2MDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALDNWzBGlOo2zMcYBkRP4KAzY0JSCPRofa4IFTDasOTUQAUq6VIR
PgNJ2X9Efgc+VLiPSTSkQuLWbIeys5h+z+yNi53xsOGKW5Bq+ugJQxsj+bJk44e2
Wt5ryxQ2N0a7VcmuFaoeDmSO0636rUAMgBsSspGgpbq+MM+VTrpo/sr6eZAWr3ly
fRfDj0l0yM3EuJfT2Gc/t9KQTl8vyXYD05OPKPXjgssWjamTMKz5aqO3w7JTq8Go
wSD7LPJPZw/0xjpFJTimonY8gPtzAMuHkm3Aif/E/SNSZqTZ388r5dGmo480Z2AS
GDJTLDDlzt5GCQ6/y7vxsMlN92EdS6IcUksCAwEAAaOCAiMwggIfMB0GA1UdDgQW
BBRq8x5F114eZXQvpBMrbGMhKNe1YDAfBgNVHSMEGDAWgBQVv6PlPlkUkjmhaN/Z
LHV0WrZstjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTYxL0ZiLWo1VDVaRkpJNW9XamYyU3gxZEZxMmJMWS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZiLWo1VDVaRkpJNW9XamYyU3gxZEZx
MmJMWS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8xNjEvYXZNZVJkZGVIbVYwTDZRVEsyeGpJU2pYdFdBLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw
BQMDAGqoMA0GCSqGSIb3DQEBCwUAA4IBAQA14KQDythAqaTW8OtOXWAiDqHUzwNn
L8qx+pEzFSf8Jxdz1fcSaD7PbZVU61OWPBvlUxzdFP22FjiYOehdNFXsDs11nhzt
uh3cLObIbFEzOeSzKwS2VFawV+eXAdZ6IVJKwPhhNs51dW0IG5ZTwYpZTCIprZI1
W4iruJ+jHUlqX9wPGgA96rvJI1ZDEBgP2faSGLoOrXgeXyBaYcJ0BiRcOOMZ4Iw7
4JxWPF62UC9na8i2h3zYozLlkihfX/h3bR/sdi9aBUKNUKQJ/oSQkZMCDhUOl01Y
24vaLhuuqIrTMocdX67Q7F39RDlkBB6CENG7HF9+A5KE94gnM+HRz0D6
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org