Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/sO85yqEvF1O8Mx9u0VfEquLxGME.roa
File:                     sO85yqEvF1O8Mx9u0VfEquLxGME.roa (raw, json)
Hash identifier:          uMto6CoDP/g3V4HmC9Cl6LvsXFSfU2jpqkiJayI2ccM=
Subject key identifier:   B0:EF:39:CA:A1:2F:17:53:BC:33:1F:6E:D1:57:C4:AA:E2:F1:18:C1
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       A4
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/sO85yqEvF1O8Mx9u0VfEquLxGME.roa
Signing time:             Tue 07 Jun 2022 10:21:17 +0000
ROA not before:           Tue 07 Jun 2022 10:21:17 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        222.5.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164 (0xa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:21:17 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=B0EF39CAA12F1753BC331F6ED157C4AAE2F118C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a3:74:a2:06:9b:46:f4:38:d4:04:d8:82:ab:
                    91:d5:48:b2:84:7b:8b:1a:bf:3f:92:b2:27:ff:ac:
                    cb:5a:2c:56:da:b2:fd:b0:99:ad:0f:ba:13:6e:7d:
                    dc:2c:1d:69:5c:0b:40:b9:c7:13:ce:68:74:a6:71:
                    ad:f0:48:ab:4e:5c:d5:a3:b9:dd:ec:f0:31:36:66:
                    a2:30:23:5d:d4:da:61:6e:b5:74:18:9c:cc:8e:d0:
                    a8:a7:82:4b:c2:85:65:cb:c4:92:b2:2e:10:a8:25:
                    b6:e9:34:1e:b5:eb:fd:67:3b:5e:78:8b:a3:9a:20:
                    6e:c9:1e:23:22:2b:e8:6a:a8:e9:7a:d7:cc:93:2d:
                    2c:c6:49:46:e2:f8:a9:ae:30:68:a8:50:32:20:31:
                    72:5f:f5:76:a3:32:62:58:d2:88:15:45:9f:60:87:
                    ed:3d:0a:d2:6c:ff:03:f1:59:e7:f1:4c:68:0c:88:
                    a5:67:95:1d:ff:20:d4:20:45:f3:f4:b8:72:9d:a7:
                    a1:01:b4:3e:a6:0b:87:81:ec:74:e8:ec:3a:73:4a:
                    85:5a:e6:01:2c:c3:66:92:c5:b1:28:ac:45:46:e3:
                    e8:43:03:e4:13:53:57:00:5f:ca:ac:d4:e6:69:6b:
                    ac:18:66:df:0d:de:e3:ee:33:e5:4f:d0:31:b5:a9:
                    fe:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:EF:39:CA:A1:2F:17:53:BC:33:1F:6E:D1:57:C4:AA:E2:F1:18:C1
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/sO85yqEvF1O8Mx9u0VfEquLxGME.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.5.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         20:22:16:4e:0b:68:b6:0c:af:1f:b0:25:14:13:1a:19:ff:6f:
         72:66:8c:51:d6:7d:51:02:13:3a:59:67:fb:64:86:63:83:01:
         86:52:e7:9a:77:77:3a:66:65:6b:8d:00:2e:a1:02:2c:96:bc:
         7a:db:c8:38:2c:c0:28:27:ab:9d:c4:3f:78:a1:a2:9a:2b:4e:
         71:68:b6:96:4e:39:10:eb:30:45:d5:15:5f:dd:33:c8:9b:b5:
         78:b7:6b:c6:63:61:84:b6:c1:3f:a2:ce:34:49:f9:cf:71:7d:
         80:33:81:5c:18:8d:85:0f:ff:e2:40:37:08:a9:59:5b:a0:08:
         42:44:95:a0:1f:17:ad:f7:0a:1e:a6:8e:57:f6:e9:d1:00:e7:
         c6:d5:ad:5d:e1:87:67:6a:fa:a9:95:87:ac:6c:d5:83:8d:b3:
         a2:4d:9a:af:2b:65:ff:cd:d9:b0:2b:3e:f6:38:92:23:e4:4d:
         08:42:3a:c5:e8:02:12:03:a8:a6:cb:e7:27:0e:60:6e:1f:6a:
         3d:f4:7a:8c:a0:8c:a5:98:c5:d8:c3:bc:e8:33:4a:25:6c:94:
         95:a3:ca:2d:4d:bc:ef:7a:ab:66:97:42:3a:a8:23:dd:c4:b5:
         5c:3c:72:2e:ab:aa:ae:7f:94:88:fe:61:03:2b:91:ea:11:e3:
         cd:35:69:02
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yMjA2MDcx
MDIxMTdaFw0yMzA1MTUwMTMwMDRaMDMxMTAvBgNVBAMTKEIwRUYzOUNBQTEyRjE3
NTNCQzMzMUY2RUQxNTdDNEFBRTJGMTE4QzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFo3SiBptG9DjUBNiCq5HVSLKEe4savz+Ssif/rMtaLFbasv2w
ma0PuhNufdwsHWlcC0C5xxPOaHSmca3wSKtOXNWjud3s8DE2ZqIwI13U2mFutXQY
nMyO0KingkvChWXLxJKyLhCoJbbpNB616/1nO154i6OaIG7JHiMiK+hqqOl618yT
LSzGSUbi+KmuMGioUDIgMXJf9XajMmJY0ogVRZ9gh+09CtJs/wPxWefxTGgMiKVn
lR3/INQgRfP0uHKdp6EBtD6mC4eB7HTo7DpzSoVa5gEsw2aSxbEorEVG4+hDA+QT
U1cAX8qs1OZpa6wYZt8N3uPuM+VP0DG1qf4LAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUsO85yqEvF1O8Mx9u0VfEquLxGMEwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL3NPODV5cUV2RjFPOE14OXUwVmZFcXVMeEdNRS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwDeBTANBgkqhkiG9w0BAQsFAAOCAQEAICIWTgtotgyvH7AlFBMaGf9vcmaM
UdZ9UQITOlln+2SGY4MBhlLnmnd3OmZla40ALqECLJa8etvIOCzAKCerncQ/eKGi
mitOcWi2lk45EOswRdUVX90zyJu1eLdrxmNhhLbBP6LONEn5z3F9gDOBXBiNhQ//
4kA3CKlZW6AIQkSVoB8XrfcKHqaOV/bp0QDnxtWtXeGHZ2r6qZWHrGzVg42zok2a
rytl/83ZsCs+9jiSI+RNCEI6xegCEgOopsvnJw5gbh9qPfR6jKCMpZjF2MO86DNK
JWyUlaPKLU2873qrZpdCOqgj3cS1XDxyLquqrn+UiP5hAyuR6hHjzTVpAg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org