Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/g6AFhjnnQdzvAFP0N2-bzwQi9PI.roa
File:                     g6AFhjnnQdzvAFP0N2-bzwQi9PI.roa (raw, json)
Hash identifier:          YFskoPutS+CsbiqyJedqDIrsqWpnHaVcWJghw0Zn24s=
Subject key identifier:   83:A0:05:86:39:E7:41:DC:EF:00:53:F4:37:6F:9B:CF:04:22:F4:F2
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       FB
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/g6AFhjnnQdzvAFP0N2-bzwQi9PI.roa
Signing time:             Tue 14 Jun 2022 09:44:17 +0000
ROA not before:           Tue 14 Jun 2022 09:44:17 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        210.168.192.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251 (0xfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun 14 09:44:17 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=83A0058639E741DCEF0053F4376F9BCF0422F4F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:85:c9:2b:5b:50:8d:d9:ad:64:a8:79:27:60:
                    9c:d2:5c:59:04:f7:94:9d:d1:aa:17:ef:e5:a6:ba:
                    2a:95:0b:85:fa:67:3d:45:7d:75:27:a4:95:ac:d0:
                    55:03:52:ae:ac:51:3c:98:7a:cc:e6:60:26:f8:a3:
                    2f:0f:67:e7:c1:85:89:4e:75:f2:f0:86:d1:56:5b:
                    3c:dd:1b:13:63:67:37:55:5a:e2:9c:38:3f:81:b1:
                    5e:bd:04:67:d9:bf:26:fc:ba:bf:6c:ba:ed:f7:51:
                    08:b2:9b:6e:60:d4:39:c5:32:a2:fe:2a:76:0e:60:
                    82:35:36:aa:f7:bb:ae:ac:bf:d9:11:f9:a2:1d:fe:
                    e9:a2:1c:b4:d3:b6:d1:32:8e:a2:47:38:c9:3b:ca:
                    63:5e:24:96:fb:a3:89:4c:d6:68:7b:45:c3:99:5b:
                    c7:c1:10:6f:74:c0:e2:f7:cb:b3:84:1b:80:76:f5:
                    79:36:21:49:4b:19:a1:82:66:85:65:97:1d:c3:32:
                    90:a9:aa:f3:2c:a7:5d:67:99:77:c8:7a:ca:01:dd:
                    d6:ff:16:dd:3b:6b:85:b2:39:9a:20:df:86:f2:7e:
                    bb:f5:fe:2a:cb:1d:8f:f7:69:e0:ad:1b:44:92:ce:
                    6f:d7:7c:79:0b:00:fc:6a:31:4f:d5:7a:eb:11:66:
                    06:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A0:05:86:39:E7:41:DC:EF:00:53:F4:37:6F:9B:CF:04:22:F4:F2
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/g6AFhjnnQdzvAFP0N2-bzwQi9PI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.168.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         28:9d:aa:b8:3c:24:60:8d:62:c2:b1:c4:b4:c4:e3:55:00:ec:
         01:85:92:50:e3:94:12:15:a8:df:ba:a2:ab:47:5d:4f:24:1c:
         72:d2:88:31:f7:6c:9c:aa:3c:35:c3:7a:3f:2e:ac:ee:5e:cc:
         04:ca:e0:ea:a6:fc:ec:e3:38:90:2c:09:f5:36:1f:26:1a:78:
         43:88:aa:27:d2:fc:eb:e7:b8:df:d9:5d:93:27:3f:6b:b2:08:
         c9:fa:89:7f:07:b5:58:f2:00:32:8a:a0:0e:d1:10:cb:15:43:
         4c:9f:12:6a:6f:85:92:d9:79:a4:fd:25:47:db:a6:40:0f:33:
         5e:44:4b:e6:cf:62:4a:5b:64:fe:4d:14:5f:d7:02:07:4d:ee:
         7c:b7:3d:9f:ba:93:2c:93:14:2b:06:79:15:1e:23:37:cd:ab:
         30:60:bb:65:32:55:52:54:8a:c0:69:3f:5e:c1:fa:e9:8c:d7:
         24:a4:fc:3b:aa:d3:1c:f4:14:7e:bc:c0:b7:c7:47:21:f4:00:
         a0:4a:cd:a8:95:38:4d:8c:f5:c9:2b:f0:02:ed:e4:2f:fe:26:
         33:2e:70:24:0f:c2:78:64:56:fa:03:71:f5:36:40:87:c5:cc:
         ac:b1:e8:86:17:0a:4d:9f:ac:1d:20:e8:1c:70:3c:4c:e3:53:
         bf:9b:f8:29
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAPswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yMjA2MTQw
OTQ0MTdaFw0yMzA1MTUwMTMwMDRaMDMxMTAvBgNVBAMTKDgzQTAwNTg2MzlFNzQx
RENFRjAwNTNGNDM3NkY5QkNGMDQyMkY0RjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBhckrW1CN2a1kqHknYJzSXFkE95Sd0aoX7+WmuiqVC4X6Zz1F
fXUnpJWs0FUDUq6sUTyYeszmYCb4oy8PZ+fBhYlOdfLwhtFWWzzdGxNjZzdVWuKc
OD+BsV69BGfZvyb8ur9suu33UQiym25g1DnFMqL+KnYOYII1Nqr3u66sv9kR+aId
/umiHLTTttEyjqJHOMk7ymNeJJb7o4lM1mh7RcOZW8fBEG90wOL3y7OEG4B29Xk2
IUlLGaGCZoVllx3DMpCpqvMsp11nmXfIesoB3db/Ft07a4WyOZog34byfrv1/irL
HY/3aeCtG0SSzm/XfHkLAPxqMU/VeusRZgYlAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUg6AFhjnnQdzvAFP0N2+bzwQi9PIwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL2c2QUZoam5uUWR6dkFGUDBOMi1iendRaTlQSS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAbSqMAwDQYJKoZIhvcNAQELBQADggEBACidqrg8JGCNYsKxxLTE41UA7AGF
klDjlBIVqN+6oqtHXU8kHHLSiDH3bJyqPDXDej8urO5ezATK4Oqm/OzjOJAsCfU2
HyYaeEOIqifS/OvnuN/ZXZMnP2uyCMn6iX8HtVjyADKKoA7REMsVQ0yfEmpvhZLZ
eaT9JUfbpkAPM15ES+bPYkpbZP5NFF/XAgdN7ny3PZ+6kyyTFCsGeRUeIzfNqzBg
u2UyVVJUisBpP17B+umM1ySk/Duq0xz0FH68wLfHRyH0AKBKzaiVOE2M9ckr8ALt
5C/+JjMucCQPwnhkVvoDcfU2QIfFzKyx6IYXCk2frB0g6BxwPEzjU7+b+Ck=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org