Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/eGtErMggW_cO-ORDNqSBbPakUPg.roa
File:                     eGtErMggW_cO-ORDNqSBbPakUPg.roa (raw, json)
Hash identifier:          VqO1uGpK2jV5HCR3v+vjOeDSHc2fkMWVMVs2r0uQK1o=
Subject key identifier:   78:6B:44:AC:C8:20:5B:F7:0E:F8:E4:43:36:A4:81:6C:F6:A4:50:F8
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       01C9
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/eGtErMggW_cO-ORDNqSBbPakUPg.roa
Signing time:             Mon 01 May 2023 01:32:15 +0000
ROA not before:           Mon 01 May 2023 01:32:15 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        222.1.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 457 (0x1c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:32:15 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=786B44ACC8205BF70EF8E44336A4816CF6A450F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:91:e3:f1:56:9c:ec:2f:9c:2c:9c:e1:a2:81:
                    e8:bc:18:d2:ce:56:bd:05:63:d4:a1:38:1f:64:71:
                    4c:94:1e:96:05:0e:3e:06:48:f6:bd:8b:68:24:97:
                    bd:cc:c3:d7:46:56:57:24:73:07:08:cb:d8:55:69:
                    e1:30:e5:43:eb:70:2e:f7:71:14:e7:c4:71:c7:fc:
                    33:f5:f1:f8:1f:27:30:31:a8:63:6b:c7:9d:c5:f6:
                    cc:29:c3:13:f8:ab:6a:be:bd:1f:83:7b:c5:ff:b9:
                    bc:30:ce:e0:df:8a:7b:58:c9:67:dc:28:5c:22:5b:
                    14:9b:ec:59:10:a0:9a:9d:97:f9:2a:91:50:61:6d:
                    b8:23:46:24:0d:0c:00:ab:69:c1:b9:a9:78:c3:e7:
                    f1:b2:42:ce:f2:bf:b9:af:ba:9f:ef:c7:20:78:1b:
                    21:8e:23:c9:9f:39:15:9a:1a:e1:67:85:57:65:8a:
                    80:2c:01:d5:fe:fe:94:eb:d2:c8:e3:0e:1c:09:87:
                    e5:09:c8:f9:df:d4:0c:82:86:b2:eb:04:3e:d1:78:
                    bf:7b:8a:6c:01:e3:05:0e:6b:2e:1f:cb:71:bf:b6:
                    64:8f:e3:e9:77:77:f2:bb:32:5e:84:49:c5:3c:63:
                    d0:e7:76:29:8c:00:02:d4:59:2e:44:1f:0b:04:6c:
                    d1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:6B:44:AC:C8:20:5B:F7:0E:F8:E4:43:36:A4:81:6C:F6:A4:50:F8
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/eGtErMggW_cO-ORDNqSBbPakUPg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.1.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         24:f1:d1:be:c0:6e:61:dd:c0:02:85:2d:6d:15:40:a3:5e:68:
         cc:8d:49:99:f9:c6:4d:6b:4e:d6:9f:aa:0a:c8:ee:40:73:89:
         0e:58:4f:35:6d:22:b3:d1:fc:d4:fd:4c:b9:8b:2c:78:f7:ae:
         4c:2c:55:a1:c3:c8:36:bd:ae:a7:3b:0a:9f:14:3d:05:4e:a8:
         56:c3:61:b9:5c:00:fc:ec:31:db:73:12:62:cd:41:87:31:4a:
         d8:59:d3:70:60:9f:6a:91:56:bb:58:29:ce:8a:5b:04:9b:25:
         0f:ec:a7:6e:f2:2b:44:7b:54:ac:c4:83:39:b2:f1:81:86:b3:
         00:55:28:fb:c8:b8:cb:37:60:20:4a:91:fd:3d:f9:be:a1:39:
         32:81:0f:1f:5a:9a:cb:f8:c1:94:74:77:28:78:d8:c5:2e:b2:
         90:ff:af:63:eb:9e:94:28:50:51:8c:7a:15:ec:f6:81:3b:26:
         95:6c:3b:e4:32:74:b4:ce:ab:cd:0c:4c:ec:6a:30:bf:15:ca:
         a9:28:61:28:53:a9:07:e6:e0:ad:b9:65:d8:33:59:83:c6:ba:
         be:4c:17:f3:9d:5c:a9:8a:b9:08:da:f7:29:83:26:5f:18:a3:
         41:fd:5c:ae:d8:4b:6f:00:ed:8d:db:88:29:c5:0c:dd:c0:04:
         9e:ed:cc:b6
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAckwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yMzA1MDEw
MTMyMTVaFw0yNDA0MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDc4NkI0NEFDQzgyMDVC
RjcwRUY4RTQ0MzM2QTQ4MTZDRjZBNDUwRjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIkePxVpzsL5wsnOGigei8GNLOVr0FY9ShOB9kcUyUHpYFDj4G
SPa9i2gkl73Mw9dGVlckcwcIy9hVaeEw5UPrcC73cRTnxHHH/DP18fgfJzAxqGNr
x53F9swpwxP4q2q+vR+De8X/ubwwzuDfintYyWfcKFwiWxSb7FkQoJqdl/kqkVBh
bbgjRiQNDACracG5qXjD5/GyQs7yv7mvup/vxyB4GyGOI8mfORWaGuFnhVdlioAs
AdX+/pTr0sjjDhwJh+UJyPnf1AyChrLrBD7ReL97imwB4wUOay4fy3G/tmSP4+l3
d/K7Ml6EScU8Y9DndimMAALUWS5EHwsEbNFpAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUeGtErMggW/cO+ORDNqSBbPakUPgwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL2VHdEVyTWdnV19jTy1PUkROcVNCYlBha1VQZy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwDeATANBgkqhkiG9w0BAQsFAAOCAQEAJPHRvsBuYd3AAoUtbRVAo15ozI1J
mfnGTWtO1p+qCsjuQHOJDlhPNW0is9H81P1MuYssePeuTCxVocPINr2upzsKnxQ9
BU6oVsNhuVwA/Owx23MSYs1BhzFK2FnTcGCfapFWu1gpzopbBJslD+ynbvIrRHtU
rMSDObLxgYazAFUo+8i4yzdgIEqR/T35vqE5MoEPH1qay/jBlHR3KHjYxS6ykP+v
Y+uelChQUYx6Fez2gTsmlWw75DJ0tM6rzQxM7GowvxXKqShhKFOpB+bgrbll2DNZ
g8a6vkwX851cqYq5CNr3KYMmXxijQf1crthLbwDtjduIKcUM3cAEnu3Mtg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org