Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/tPbOkchPnCJyA9OarldvhzRzapM.roa
File:                     tPbOkchPnCJyA9OarldvhzRzapM.roa (raw, json)
Hash identifier:          1QwYScvrFEeiQeGdc/Vz7ahH4R7kPHF6+HjXEYm9jwk=
Subject key identifier:   B4:F6:CE:91:C8:4F:9C:22:72:03:D3:9A:AE:57:6F:87:34:73:6A:93
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       6F
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/tPbOkchPnCJyA9OarldvhzRzapM.roa
Signing time:             Tue 07 Jun 2022 10:07:17 +0000
ROA not before:           Tue 07 Jun 2022 10:07:17 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        106.160.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111 (0x6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:07:17 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=B4F6CE91C84F9C227203D39AAE576F8734736A93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:16:2f:f7:b5:b0:e4:1d:a8:73:b8:1c:52:61:
                    f4:e2:7c:bf:cf:30:bb:de:8b:2e:47:2f:31:3e:51:
                    1b:5d:fe:f2:38:a1:03:9d:2c:62:79:68:67:8a:9c:
                    0b:4c:a9:ff:c6:30:91:89:06:80:48:b7:4c:00:fc:
                    52:5c:0d:ce:83:63:2c:6b:a7:9a:7c:e7:bd:14:49:
                    bd:1f:dc:f2:6f:b3:27:32:ea:a4:46:1a:ba:c4:f9:
                    8e:72:91:b6:5a:30:17:d3:f7:81:ff:d3:b8:4f:5d:
                    67:93:45:26:5c:26:ce:65:35:50:b2:53:c2:8b:59:
                    66:4f:db:1b:a7:ab:31:b1:88:6a:26:f1:c4:a1:66:
                    b2:27:cd:f6:98:8b:02:1f:03:ed:bd:e9:a9:f8:d6:
                    d1:02:51:ea:61:46:f5:9a:82:70:1e:f9:75:74:cb:
                    76:56:4f:04:d4:43:26:03:99:1d:7d:83:f4:a8:fb:
                    1a:ae:c0:13:d3:17:69:93:33:a4:73:f2:85:a8:03:
                    f5:3d:2a:a2:61:68:77:ba:bd:47:b9:73:ce:27:4b:
                    81:fd:1f:e1:c0:a3:6d:58:86:a4:7e:c0:0a:0d:67:
                    5a:89:a8:77:61:66:35:f8:3a:35:e6:ce:98:b8:67:
                    9a:6d:7f:4b:01:71:0d:71:f6:38:58:a2:b5:cc:85:
                    a2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F6:CE:91:C8:4F:9C:22:72:03:D3:9A:AE:57:6F:87:34:73:6A:93
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/tPbOkchPnCJyA9OarldvhzRzapM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.160.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         51:22:f9:85:3b:ae:48:c9:48:fb:28:cf:36:4d:7e:a0:f5:44:
         64:13:63:31:c0:a6:dc:2f:2f:2b:47:d4:e2:ad:1c:49:41:f7:
         df:65:e2:0c:8f:bb:89:5f:c5:3a:eb:10:5b:3c:37:d1:52:d0:
         da:5c:c1:ef:a5:1d:fd:c1:b8:73:3f:70:fd:d0:e2:48:c9:35:
         4a:fc:5e:a7:84:7e:f5:be:2e:fb:5e:48:9d:7d:01:24:b0:14:
         6b:e2:a4:3b:68:b1:48:32:6f:10:59:3e:1d:4e:b4:4c:27:66:
         76:f2:5c:d1:11:4b:6d:30:80:f4:83:42:2f:18:f1:8c:3f:43:
         36:5a:a5:32:bc:44:9e:ff:f5:d2:ff:f7:97:2c:16:54:34:3e:
         7a:d5:d3:7f:06:6a:4e:b2:db:ba:50:0b:9d:ad:73:f5:1b:9a:
         2e:63:7f:fb:71:4c:1c:f6:4e:4a:34:99:46:76:f6:36:50:f8:
         35:ec:0c:4e:b4:95:0c:e8:6c:e7:fc:40:c0:b1:55:21:e1:97:
         0d:12:af:bb:59:b4:0d:a9:1a:69:47:99:49:9f:c1:b5:38:42:
         7b:2f:3d:a7:a7:dc:82:a8:8c:d3:69:70:f9:b0:0e:10:a1:65:
         e8:a9:22:21:29:a9:c2:d2:93:48:da:46:bc:2e:d5:07:47:d0:
         c4:0e:24:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:02 2023 by rpki-client on console-fra.rpki-client.org