Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/hFLNi57t2PFbkaSfikzDbdCk-Q8.roa
File:                     hFLNi57t2PFbkaSfikzDbdCk-Q8.roa (raw, json)
Hash identifier:          IMe9sDWb1f8ZhsvLlK0RelEcZ8pEE0YYYWRDCZgzaYM=
Subject key identifier:   84:52:CD:8B:9E:ED:D8:F1:5B:91:A4:9F:8A:4C:C3:6D:D0:A4:F9:0F
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       7D
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/hFLNi57t2PFbkaSfikzDbdCk-Q8.roa
Signing time:             Tue 07 Jun 2022 10:11:18 +0000
ROA not before:           Tue 07 Jun 2022 10:11:18 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        124.208.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125 (0x7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:11:18 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=8452CD8B9EEDD8F15B91A49F8A4CC36DD0A4F90F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:fd:c9:8b:88:fd:bf:33:a1:74:ec:da:e9:33:
                    2c:bd:59:ee:43:58:b4:dc:9b:89:5c:79:f0:04:d3:
                    da:a8:58:40:b9:f4:83:0f:46:e3:2c:83:0e:f1:8c:
                    96:1b:34:6b:e5:82:46:ed:ff:31:6a:3a:18:19:b6:
                    81:7b:da:9c:67:ff:f4:9f:d6:af:f8:f7:8c:b3:21:
                    2d:b1:5f:8e:b8:3b:ec:76:02:e3:2d:a0:61:50:bb:
                    82:4c:4c:1c:5a:d7:90:75:b3:36:07:44:d9:c4:17:
                    3e:4e:a5:dc:23:e7:66:3b:d3:04:31:d9:34:8d:90:
                    c5:8f:17:a5:3c:bb:c4:ce:99:1c:ce:d5:1a:2b:23:
                    4c:db:28:54:4c:9f:70:5a:c5:92:cc:8d:a7:3e:6d:
                    80:c7:ee:1a:00:f2:9c:68:d8:cb:b1:26:4a:32:6d:
                    cf:29:c6:86:81:38:0d:67:ac:93:3e:26:aa:54:97:
                    23:47:d1:b1:c8:ff:3f:17:8d:a0:0c:6c:f8:a7:b0:
                    5c:35:03:6b:6f:a5:74:6f:6f:df:23:c0:b3:a3:2a:
                    71:b6:75:0e:ae:60:74:03:2c:8c:27:de:73:0f:57:
                    cf:c9:33:f0:58:6a:c1:df:83:d1:8f:ab:bb:d2:ca:
                    ee:85:71:88:2e:8b:77:7f:0c:b7:f2:11:35:29:bf:
                    0d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:52:CD:8B:9E:ED:D8:F1:5B:91:A4:9F:8A:4C:C3:6D:D0:A4:F9:0F
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/hFLNi57t2PFbkaSfikzDbdCk-Q8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.208.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         88:48:7a:df:f6:f4:dd:64:a5:e9:f0:1f:f2:21:03:b7:1d:49:
         b0:cc:b2:11:e1:5a:e1:a3:50:33:46:4f:d3:dc:70:12:3d:35:
         aa:d0:23:47:a8:c9:88:88:e4:96:75:4a:35:6b:70:36:bc:5c:
         96:60:ef:bb:02:69:df:df:f6:bc:62:fd:05:29:eb:3d:7f:6d:
         f8:7a:87:71:8f:01:f9:a9:31:ab:9e:3d:04:5a:7e:6b:87:d1:
         44:c9:ae:fe:91:f2:63:3b:50:fb:aa:d0:7c:e0:ad:e5:2a:7c:
         46:34:a9:31:52:20:02:ff:97:83:a9:8e:bf:17:4b:8b:2b:10:
         1d:f2:dd:41:e9:a0:2b:e2:e4:9e:db:1b:72:6f:ee:1f:21:1a:
         91:51:4e:f4:17:f7:ed:e8:4e:05:82:5a:f8:90:b4:c3:7d:57:
         e5:65:42:bf:a4:c8:16:73:aa:86:fe:d4:21:d9:8b:cb:27:78:
         9d:b0:d1:62:64:c3:13:12:85:28:1c:8f:6c:85:eb:3a:89:f2:
         9a:81:9c:35:46:2f:e6:6b:21:ef:08:a5:41:ff:7e:ba:f6:e4:
         0c:e5:ae:1e:0d:7a:c4:b4:b8:9b:d6:7c:fe:05:84:2e:4e:a8:
         4c:a6:21:c7:84:33:2c:81:25:2b:44:0a:8c:92:43:1b:88:f5:
         5a:62:e3:93
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIBfTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNUJG
QTNFNTNFNTkxNDkyMzlBMTY4REZEOTJDNzU3NDVBQjY2Q0I2MB4XDTIyMDYwNzEw
MTExOFoXDTIzMDUxNTAxMzAwNFowMzExMC8GA1UEAxMoODQ1MkNEOEI5RUVERDhG
MTVCOTFBNDlGOEE0Q0MzNkREMEE0RjkwRjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOr9yYuI/b8zoXTs2ukzLL1Z7kNYtNybiVx58ATT2qhYQLn0gw9G
4yyDDvGMlhs0a+WCRu3/MWo6GBm2gXvanGf/9J/Wr/j3jLMhLbFfjrg77HYC4y2g
YVC7gkxMHFrXkHWzNgdE2cQXPk6l3CPnZjvTBDHZNI2QxY8XpTy7xM6ZHM7VGisj
TNsoVEyfcFrFksyNpz5tgMfuGgDynGjYy7EmSjJtzynGhoE4DWeskz4mqlSXI0fR
scj/PxeNoAxs+KewXDUDa2+ldG9v3yPAs6MqcbZ1Dq5gdAMsjCfecw9Xz8kz8Fhq
wd+D0Y+ru9LK7oVxiC6Ld38Mt/IRNSm/Dc0CAwEAAaOCAiMwggIfMB0GA1UdDgQW
BBSEUs2Lnu3Y8VuRpJ+KTMNt0KT5DzAfBgNVHSMEGDAWgBQVv6PlPlkUkjmhaN/Z
LHV0WrZstjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTYxL0ZiLWo1VDVaRkpJNW9XamYyU3gxZEZxMmJMWS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZiLWo1VDVaRkpJNW9XamYyU3gxZEZx
MmJMWS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8xNjEvaEZMTmk1N3QyUEZia2FTZmlrekRiZENrLVE4LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw
BQMDAHzQMA0GCSqGSIb3DQEBCwUAA4IBAQCISHrf9vTdZKXp8B/yIQO3HUmwzLIR
4Vrho1AzRk/T3HASPTWq0CNHqMmIiOSWdUo1a3A2vFyWYO+7Amnf3/a8Yv0FKes9
f234eodxjwH5qTGrnj0EWn5rh9FEya7+kfJjO1D7qtB84K3lKnxGNKkxUiAC/5eD
qY6/F0uLKxAd8t1B6aAr4uSe2xtyb+4fIRqRUU70F/ft6E4Fglr4kLTDfVflZUK/
pMgWc6qG/tQh2YvLJ3idsNFiZMMTEoUoHI9shes6ifKagZw1Ri/mayHvCKVB/366
9uQM5a4eDXrEtLib1nz+BYQuTqhMpiHHhDMsgSUrRAqMkkMbiPVaYuOT
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org