Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/cRQN6o0eNnTIabLaiqRkvROnXnI.roa
File:                     cRQN6o0eNnTIabLaiqRkvROnXnI.roa (raw, json)
Hash identifier:          mOPooX93H8ugOEzFFE3RxafjIBYsoveBtRHrqCy/jpA=
Subject key identifier:   71:14:0D:EA:8D:1E:36:74:C8:69:B2:DA:8A:A4:64:BD:13:A7:5E:72
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0226
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/cRQN6o0eNnTIabLaiqRkvROnXnI.roa
Signing time:             Mon 01 May 2023 01:37:57 +0000
ROA not before:           Mon 01 May 2023 01:37:57 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        210.168.192.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 550 (0x226)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:37:57 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=71140DEA8D1E3674C869B2DA8AA464BD13A75E72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:88:33:ae:c9:4a:48:47:d3:ab:a9:82:6d:4e:
                    36:95:59:f7:b2:3a:bc:15:52:27:2d:e5:1a:31:46:
                    3b:48:5f:f3:8a:8d:ee:0d:ce:3b:63:c9:f2:e8:57:
                    69:38:d0:f8:9b:7f:da:12:e6:31:3d:a1:92:9c:1f:
                    34:e2:5d:0d:8a:03:f8:5a:83:a4:9e:21:66:4d:ac:
                    92:08:e4:37:50:98:c9:39:92:e4:b8:cd:e1:f7:c0:
                    0c:b0:bc:db:93:2a:e1:8e:c3:b2:55:3c:45:1d:13:
                    89:5b:e6:3f:87:32:f9:be:8c:03:ef:cb:d9:f7:ad:
                    04:da:62:73:de:ce:fb:ec:c2:cb:2f:98:9b:4a:b5:
                    fc:ae:b4:9a:b7:9d:ac:e2:7a:fb:e3:16:8d:2b:8c:
                    37:55:48:24:57:81:cd:a0:01:96:26:f1:1d:f8:bd:
                    a4:df:7e:19:40:1b:48:5c:43:7b:70:50:ba:38:7a:
                    e7:9b:45:15:a5:bb:76:b2:b6:e2:21:1a:87:b2:0e:
                    9f:e7:03:db:4a:bc:09:b1:b5:5e:b7:ff:df:37:97:
                    af:ed:76:47:4d:80:58:22:dd:d6:94:69:69:a8:d9:
                    53:77:6a:17:b4:e2:fc:17:46:16:6d:06:27:28:99:
                    d4:27:15:85:3e:75:71:c3:08:e0:bb:34:0f:4e:44:
                    d6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:14:0D:EA:8D:1E:36:74:C8:69:B2:DA:8A:A4:64:BD:13:A7:5E:72
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/cRQN6o0eNnTIabLaiqRkvROnXnI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.168.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         71:a0:3b:b6:26:b1:09:92:40:28:33:ef:63:07:cb:ea:c6:c1:
         e3:9c:a8:ad:b3:c2:ee:82:4c:a4:09:52:a3:a8:f5:9b:66:ba:
         ad:64:37:af:43:bc:c0:3a:88:35:0c:8b:9a:c8:67:9b:f1:ff:
         ed:f1:3f:66:f8:ca:a8:4a:82:6b:00:24:1b:ac:15:23:68:04:
         48:d2:95:6e:59:d3:8d:bf:50:e1:21:bf:b0:8c:f0:1b:87:39:
         1f:df:61:34:8f:b5:f8:05:34:ed:12:1e:d0:0b:d1:d6:bd:3c:
         4c:11:f8:78:4c:cd:01:e6:b3:b0:35:f8:e7:bc:3e:ad:97:47:
         fd:8c:b3:09:5a:ce:3c:65:7b:7b:47:5b:35:fd:7d:45:37:b4:
         aa:7e:62:2b:69:8f:8c:c0:40:29:2f:d5:5f:9d:6d:d3:8c:55:
         b6:f1:a3:31:67:61:71:f2:90:40:e3:ac:bd:c8:32:2e:d2:d2:
         bf:b7:2a:01:c1:b1:96:57:f1:ec:a6:97:c7:f0:a6:2e:98:91:
         1e:cc:d5:82:5c:af:10:3a:6e:40:74:75:dc:63:8f:96:44:f7:
         f0:5d:17:59:c9:1c:d3:39:ec:4d:58:02:75:72:48:fa:80:87:
         2b:91:69:39:5d:a9:97:1a:18:c2:3f:52:66:24:af:2a:44:1c:
         eb:44:74:87
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAiYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yMzA1MDEw
MTM3NTdaFw0yNDA0MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDcxMTQwREVBOEQxRTM2
NzRDODY5QjJEQThBQTQ2NEJEMTNBNzVFNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCiDOuyUpIR9OrqYJtTjaVWfeyOrwVUict5RoxRjtIX/OKje4N
zjtjyfLoV2k40Pibf9oS5jE9oZKcHzTiXQ2KA/hag6SeIWZNrJII5DdQmMk5kuS4
zeH3wAywvNuTKuGOw7JVPEUdE4lb5j+HMvm+jAPvy9n3rQTaYnPezvvswssvmJtK
tfyutJq3nazievvjFo0rjDdVSCRXgc2gAZYm8R34vaTffhlAG0hcQ3twULo4eueb
RRWlu3aytuIhGoeyDp/nA9tKvAmxtV63/983l6/tdkdNgFgi3daUaWmo2VN3ahe0
4vwXRhZtBicomdQnFYU+dXHDCOC7NA9ORNY/AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUcRQN6o0eNnTIabLaiqRkvROnXnIwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL2NSUU42bzBlTm5USWFiTGFpcVJrdlJPblhuSS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAbSqMAwDQYJKoZIhvcNAQELBQADggEBAHGgO7YmsQmSQCgz72MHy+rGweOc
qK2zwu6CTKQJUqOo9Ztmuq1kN69DvMA6iDUMi5rIZ5vx/+3xP2b4yqhKgmsAJBus
FSNoBEjSlW5Z042/UOEhv7CM8BuHOR/fYTSPtfgFNO0SHtAL0da9PEwR+HhMzQHm
s7A1+Oe8Pq2XR/2Mswlazjxle3tHWzX9fUU3tKp+Yitpj4zAQCkv1V+dbdOMVbbx
ozFnYXHykEDjrL3IMi7S0r+3KgHBsZZX8eyml8fwpi6YkR7M1YJcrxA6bkB0ddxj
j5ZE9/BdF1nJHNM57E1YAnVySPqAhyuRaTldqZcaGMI/UmYkrypEHOtEdIc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org