Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/jJTRhQxCTZCACMV53ixf0AZ3GTE.roa
File:                     jJTRhQxCTZCACMV53ixf0AZ3GTE.roa (raw, json)
Hash identifier:          TzmmCmgjHNKIzB9sGYGEToaseb3kZ8RImNo8PZgO/A0=
Subject key identifier:   8C:94:D1:85:0C:42:4D:90:80:08:C5:79:DE:2C:5F:D0:06:77:19:31
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       01DE
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/jJTRhQxCTZCACMV53ixf0AZ3GTE.roa
Signing time:             Mon 01 May 2023 01:33:41 +0000
ROA not before:           Mon 01 May 2023 01:33:41 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        106.190.0.0/15 maxlen: 15

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 478 (0x1de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:33:41 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=8C94D1850C424D908008C579DE2C5FD006771931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6e:c0:5c:db:1d:98:f2:32:b2:fc:7a:52:1b:
                    a2:ee:f5:52:2f:01:45:f0:92:7c:b4:ae:a2:c2:5b:
                    cc:11:45:12:53:cc:41:55:a2:3b:31:34:b0:60:31:
                    8b:af:65:1d:df:a3:6b:23:39:9a:fc:a9:64:78:ab:
                    da:56:9b:08:22:d1:b4:5e:41:3c:7b:0a:b8:2e:52:
                    ee:dc:f1:e5:55:c0:50:35:92:f8:a4:36:24:23:b6:
                    11:86:2f:6f:c6:7a:dd:53:b7:6b:58:44:2c:b7:80:
                    ca:6f:dd:34:73:dd:96:21:36:59:f7:5d:fa:b4:3e:
                    f6:c7:6f:1d:d4:7d:f2:1c:51:3c:4e:58:0a:99:aa:
                    cc:2e:f3:85:e7:6c:a1:ca:48:f8:2e:b9:43:33:99:
                    5a:66:a1:ff:cf:cd:01:6d:fd:65:cd:cd:74:de:03:
                    4f:9a:8e:c2:8b:30:70:85:52:dc:30:c2:9b:89:58:
                    93:9d:3f:29:cf:58:c2:fc:d1:67:9d:9c:1f:c2:e2:
                    8d:7e:92:a8:75:8c:ef:39:17:af:bf:1f:06:fb:09:
                    d0:4a:9a:1a:96:5c:7b:e0:19:9e:ea:22:e4:ff:f7:
                    74:f2:e3:b5:be:35:d0:e1:3e:89:a4:78:37:5b:38:
                    69:4b:bf:f8:b2:48:8e:99:8a:94:fe:80:16:f1:4b:
                    a5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:94:D1:85:0C:42:4D:90:80:08:C5:79:DE:2C:5F:D0:06:77:19:31
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/jJTRhQxCTZCACMV53ixf0AZ3GTE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.190.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         21:b6:6f:56:20:b6:3b:1e:a3:06:bf:85:46:2c:99:82:c6:f2:
         3c:49:9d:6d:44:f8:f6:43:35:57:64:b6:1c:09:2f:36:9a:d5:
         65:9a:c0:fb:bc:1c:93:6a:df:20:20:a6:13:52:d6:2d:4e:fa:
         26:5b:59:c8:49:44:78:21:10:c6:bf:f2:f5:41:9f:3f:0c:02:
         58:1e:a4:da:12:9b:7d:0d:2d:04:e6:9e:9e:32:f9:66:00:3c:
         33:1d:39:50:1d:2e:25:96:72:db:9a:fb:24:64:2c:8b:24:8d:
         b2:a7:f9:40:1b:98:f8:eb:f5:10:d6:e2:90:a8:a3:5c:7d:e1:
         81:4d:d6:0b:63:d7:b0:f3:19:12:1e:ee:9e:da:4d:80:69:d7:
         d9:fa:ca:bd:73:85:1f:16:74:d1:db:c1:16:ac:c0:48:f4:25:
         ed:71:0e:0c:9c:4b:97:3d:77:2b:b0:0e:2f:74:19:b8:de:56:
         ef:46:f8:f8:25:68:2a:8a:41:0f:dd:26:5e:5d:0c:28:28:d9:
         36:27:dc:06:5e:5c:2d:23:d8:f5:c3:8c:79:69:1e:e7:77:57:
         c5:b7:ad:17:0e:c5:90:d7:a1:c2:1a:61:a8:7d:92:6b:00:e1:
         dd:5f:ec:f3:d4:7a:b3:3d:5f:f2:7c:08:59:61:20:2f:30:e4:
         04:a4:8b:0d
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yMzA1MDEw
MTMzNDFaFw0yNDA0MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDhDOTREMTg1MEM0MjRE
OTA4MDA4QzU3OURFMkM1RkQwMDY3NzE5MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCjbsBc2x2Y8jKy/HpSG6Lu9VIvAUXwkny0rqLCW8wRRRJTzEFV
ojsxNLBgMYuvZR3fo2sjOZr8qWR4q9pWmwgi0bReQTx7CrguUu7c8eVVwFA1kvik
NiQjthGGL2/Get1Tt2tYRCy3gMpv3TRz3ZYhNln3Xfq0PvbHbx3UffIcUTxOWAqZ
qswu84XnbKHKSPguuUMzmVpmof/PzQFt/WXNzXTeA0+ajsKLMHCFUtwwwpuJWJOd
PynPWML80WednB/C4o1+kqh1jO85F6+/Hwb7CdBKmhqWXHvgGZ7qIuT/93Ty47W+
NdDhPomkeDdbOGlLv/iySI6ZipT+gBbxS6V5AgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUjJTRhQxCTZCACMV53ixf0AZ3GTEwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL2pKVFJoUXhDVFpDQUNNVjUzaXhmMEFaM0dURS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwFqvjANBgkqhkiG9w0BAQsFAAOCAQEAIbZvViC2Ox6jBr+FRiyZgsbyPEmd
bUT49kM1V2S2HAkvNprVZZrA+7wck2rfICCmE1LWLU76JltZyElEeCEQxr/y9UGf
PwwCWB6k2hKbfQ0tBOaenjL5ZgA8Mx05UB0uJZZy25r7JGQsiySNsqf5QBuY+Ov1
ENbikKijXH3hgU3WC2PXsPMZEh7untpNgGnX2frKvXOFHxZ00dvBFqzASPQl7XEO
DJxLlz13K7AOL3QZuN5W70b4+CVoKopBD90mXl0MKCjZNifcBl5cLSPY9cOMeWke
53dXxbetFw7FkNehwhphqH2SawDh3V/s89R6sz1f8nwIWWEgLzDkBKSLDQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org