Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/nVVn_l_kRNkXTkukrVq3B5pBZYw.roa
File:                     nVVn_l_kRNkXTkukrVq3B5pBZYw.roa (raw, json)
Hash identifier:          AEDRKQp+1GOh/X9IXKb7GRtLTDJpTkmHRqhrPJkn378=
Subject key identifier:   9D:55:67:FE:5F:E4:44:D9:17:4E:4B:A4:AD:5A:B7:07:9A:41:65:8C
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       C2
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/nVVn_l_kRNkXTkukrVq3B5pBZYw.roa
Signing time:             Tue 14 Jun 2022 09:13:58 +0000
ROA not before:           Tue 14 Jun 2022 09:13:58 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        111.101.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 194 (0xc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun 14 09:13:58 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=9D5567FE5FE444D9174E4BA4AD5AB7079A41658C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:84:b5:86:7e:20:05:39:97:90:dd:66:7c:3e:
                    6f:a2:03:fa:07:6f:c1:5a:b7:b8:70:a3:66:97:32:
                    c9:4a:ff:7d:d1:3b:f4:cf:3d:8d:d4:d4:b5:4b:7b:
                    0e:6b:40:05:b5:57:b1:cb:1f:88:3b:b8:05:1b:95:
                    6c:f1:c4:84:c8:cc:c3:60:06:bd:e3:4b:78:77:ba:
                    70:aa:d2:64:25:94:ab:3f:1d:b4:48:fb:f1:69:6e:
                    dd:76:c7:15:fb:78:fd:cf:df:84:d0:9c:8c:df:41:
                    b8:ce:c1:84:82:38:40:57:5a:ed:28:f2:b5:3d:f2:
                    64:a5:35:0d:c3:79:99:03:a0:49:16:99:70:6c:ec:
                    46:aa:45:65:84:f9:00:d0:8f:45:21:e3:b0:56:17:
                    af:99:43:46:68:bf:49:b4:f0:4c:58:88:38:9a:19:
                    05:82:38:e7:9b:65:aa:8a:fe:41:16:fd:5f:ac:31:
                    9f:82:41:63:1c:36:75:e2:dc:f5:21:69:9f:95:72:
                    d1:a9:7e:26:ed:39:e2:22:a1:2e:4e:15:d1:be:73:
                    da:99:fd:4e:a0:66:93:c0:85:85:3d:2f:99:7e:2c:
                    75:e2:46:f4:be:81:9c:90:6d:ab:10:bf:b9:c4:5a:
                    0c:3d:32:a9:c7:2c:5e:b7:4c:56:46:52:e8:9a:ba:
                    7e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:55:67:FE:5F:E4:44:D9:17:4E:4B:A4:AD:5A:B7:07:9A:41:65:8C
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/nVVn_l_kRNkXTkukrVq3B5pBZYw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.101.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         42:bc:c9:14:57:3f:f2:d2:b4:28:32:8f:89:fe:ef:bc:13:d3:
         9b:39:c8:52:b3:68:39:4e:2b:d8:e0:a0:eb:e4:c7:a0:53:c1:
         44:1a:f7:cb:03:11:1b:dd:19:aa:8c:04:a6:aa:d0:f8:2b:1d:
         2c:09:19:1f:09:84:b6:2b:38:1f:9c:ce:aa:b7:9c:00:56:9c:
         76:c7:63:6b:da:f2:46:5a:70:67:f5:2f:e6:1f:17:d0:ef:68:
         3f:e9:10:9b:45:18:a6:95:c0:53:4f:05:f9:30:6c:ba:75:cf:
         f3:59:6d:50:2b:65:40:9c:56:75:1d:82:b9:0a:7b:94:40:cc:
         04:ce:c6:80:e5:80:5c:66:6a:6c:5d:f0:17:08:9d:6c:61:e3:
         dd:51:ac:d7:b4:cb:62:10:e7:74:04:26:17:92:a3:e9:6a:cd:
         2c:f4:03:12:2c:15:80:9d:09:de:47:2d:69:52:5e:91:02:1c:
         09:46:00:f5:da:0a:5d:28:4a:3f:93:77:1b:a0:a4:1c:d6:17:
         79:bf:cf:f2:2e:f6:64:35:9b:8b:41:de:4e:2b:fd:d1:ed:15:
         55:d8:ce:28:74:02:90:f5:a9:d2:00:71:33:2c:4f:d1:e2:7c:
         d7:a1:15:dc:55:b5:f7:fd:53:1c:fe:f1:76:cc:f3:61:e0:93:
         37:aa:eb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:02 2023 by rpki-client on console-fra.rpki-client.org