Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/tFp7Sy7nCu1lxvZVRKSDYW1EW8A.roa
File:                     tFp7Sy7nCu1lxvZVRKSDYW1EW8A.roa (raw, json)
Hash identifier:          qquDILFncaf+hNp7HZ/FFZrWzF7OBWOdJHqMvPkeQjE=
Subject key identifier:   B4:5A:7B:4B:2E:E7:0A:ED:65:C6:F6:55:44:A4:83:61:6D:44:5B:C0
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       93
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/tFp7Sy7nCu1lxvZVRKSDYW1EW8A.roa
Signing time:             Tue 07 Jun 2022 10:15:34 +0000
ROA not before:           Tue 07 Jun 2022 10:15:34 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        111.97.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:15:34 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=B45A7B4B2EE70AED65C6F65544A483616D445BC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:0d:81:b0:83:ad:fc:84:a4:26:a4:cf:81:2b:
                    c5:44:ca:6d:16:fc:b9:a4:d4:07:49:44:8e:1d:40:
                    bd:0e:5a:7e:e3:46:a8:7f:94:0b:e0:d2:28:82:82:
                    7b:13:21:00:41:cc:c3:27:a1:ee:f8:81:31:dd:13:
                    4c:16:8c:9e:b6:c8:43:71:16:23:70:25:9d:26:cc:
                    ae:08:1c:97:ae:f6:66:99:1e:f6:c4:1c:ad:75:aa:
                    93:b5:6b:ff:e0:35:93:db:ce:c3:1e:0b:5e:c5:1c:
                    79:36:34:80:0e:30:4e:81:d9:b5:f8:94:86:09:18:
                    e3:f8:a4:11:20:2a:f1:54:bb:7b:23:ce:6f:36:dd:
                    e6:b4:70:13:f2:41:0b:e0:0d:e2:1a:f7:e8:c2:9d:
                    a5:b4:37:bf:bb:fe:02:5d:ed:87:60:eb:95:ae:9b:
                    be:6b:f1:10:b9:7b:8e:78:de:e0:75:15:a5:b4:4b:
                    8f:38:ab:5e:3c:a3:8d:07:1a:09:65:cd:81:2e:30:
                    6f:12:64:7c:37:83:f1:03:65:26:83:f4:b0:7c:ae:
                    d1:19:53:fa:6d:68:f0:90:0c:6f:1f:c5:e7:97:15:
                    20:07:f4:2d:31:11:4b:50:31:88:d7:59:72:07:68:
                    a9:c2:5b:c8:b6:a4:7e:72:83:b3:a5:37:f1:cc:9e:
                    cb:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:5A:7B:4B:2E:E7:0A:ED:65:C6:F6:55:44:A4:83:61:6D:44:5B:C0
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/tFp7Sy7nCu1lxvZVRKSDYW1EW8A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.97.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4f:07:a9:77:09:32:0c:1f:3b:6f:11:c3:a1:1e:47:0a:69:cb:
         da:46:32:90:7c:25:4f:d6:ca:d4:77:1b:7b:80:46:61:c2:29:
         8b:ef:dd:97:d7:6a:4f:81:25:30:0d:7f:4b:41:3d:36:28:25:
         42:d1:84:14:25:48:b0:f1:a8:db:fb:15:36:42:82:d8:a6:f1:
         3b:e3:a8:b4:ac:4f:12:cb:5b:31:f6:4b:37:45:55:ae:75:16:
         ab:6f:1e:98:64:23:c1:6b:a9:ce:37:00:a1:94:5d:ae:af:06:
         0e:d5:e9:e0:b8:83:f2:98:c8:98:1c:c6:f0:a5:9f:ac:f9:9c:
         2c:29:30:0d:21:6c:35:26:f2:04:92:4e:a7:86:14:bc:88:30:
         d6:3e:21:4f:f2:83:3f:e3:0a:dd:d8:66:48:77:82:fd:98:70:
         0d:47:00:3c:fd:23:0b:a5:7e:67:54:ca:2c:10:90:f0:1e:6c:
         31:8f:b1:71:8f:71:81:dd:32:5e:68:38:84:74:e1:4e:da:d6:
         73:e4:14:d8:27:2f:b6:1a:36:58:de:02:8b:49:06:6f:09:69:
         97:be:3e:58:2b:c3:ba:12:13:f6:28:69:8c:b0:3b:f6:e1:a2:
         2c:62:51:1c:ef:e7:d9:de:8c:50:f2:7d:4f:d1:c0:ee:4b:b9:
         9d:92:f9:74
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yMjA2MDcx
MDE1MzRaFw0yMzA1MTUwMTMwMDRaMDMxMTAvBgNVBAMTKEI0NUE3QjRCMkVFNzBB
RUQ2NUM2RjY1NTQ0QTQ4MzYxNkQ0NDVCQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDtDYGwg638hKQmpM+BK8VEym0W/Lmk1AdJRI4dQL0OWn7jRqh/
lAvg0iiCgnsTIQBBzMMnoe74gTHdE0wWjJ62yENxFiNwJZ0mzK4IHJeu9maZHvbE
HK11qpO1a//gNZPbzsMeC17FHHk2NIAOME6B2bX4lIYJGOP4pBEgKvFUu3sjzm82
3ea0cBPyQQvgDeIa9+jCnaW0N7+7/gJd7Ydg65Wum75r8RC5e4543uB1FaW0S484
q148o40HGgllzYEuMG8SZHw3g/EDZSaD9LB8rtEZU/ptaPCQDG8fxeeXFSAH9C0x
EUtQMYjXWXIHaKnCW8i2pH5yg7OlN/HMnss/AgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUtFp7Sy7nCu1lxvZVRKSDYW1EW8AwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL3RGcDdTeTduQ3UxbHh2WlZSS1NEWVcxRVc4QS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwBvYTANBgkqhkiG9w0BAQsFAAOCAQEATwepdwkyDB87bxHDoR5HCmnL2kYy
kHwlT9bK1Hcbe4BGYcIpi+/dl9dqT4ElMA1/S0E9NiglQtGEFCVIsPGo2/sVNkKC
2KbxO+OotKxPEstbMfZLN0VVrnUWq28emGQjwWupzjcAoZRdrq8GDtXp4LiD8pjI
mBzG8KWfrPmcLCkwDSFsNSbyBJJOp4YUvIgw1j4hT/KDP+MK3dhmSHeC/ZhwDUcA
PP0jC6V+Z1TKLBCQ8B5sMY+xcY9xgd0yXmg4hHThTtrWc+QU2Ccvtho2WN4Ci0kG
bwlpl74+WCvDuhIT9ihpjLA79uGiLGJRHO/n2d6MUPJ9T9HA7ku5nZL5dA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org