Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/tgurFPhr9I_aip6XHprNOPCh1EE.roa
File:                     tgurFPhr9I_aip6XHprNOPCh1EE.roa (raw, json)
Hash identifier:          sF+qXulZzk8Na2KWBeH9tSuijIZJOP3mHegqyx2RRP0=
Subject key identifier:   B6:0B:AB:14:F8:6B:F4:8F:DA:8A:9E:97:1E:9A:CD:38:F0:A1:D4:41
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       01CA
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/tgurFPhr9I_aip6XHprNOPCh1EE.roa
Signing time:             Mon 01 May 2023 01:32:16 +0000
ROA not before:           Mon 01 May 2023 01:32:15 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        111.105.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 458 (0x1ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:32:15 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=B60BAB14F86BF48FDA8A9E971E9ACD38F0A1D441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:99:05:af:e3:d6:61:e2:df:d4:94:76:51:d3:
                    2e:34:84:4e:f4:f5:51:a2:99:78:9b:d6:1c:05:c7:
                    66:db:9a:24:a2:4e:61:43:f5:6d:fe:cd:6b:cd:8c:
                    aa:a5:cc:a3:de:44:ac:99:35:3a:a5:f5:c8:32:f0:
                    07:ef:ac:df:7c:62:db:cd:eb:d9:a5:d2:33:c4:12:
                    6c:0b:a0:ae:42:6f:b3:87:d5:b3:ba:44:11:68:2d:
                    19:8c:a6:6d:bf:55:d6:87:88:1b:d1:83:73:f4:97:
                    14:17:be:84:1c:d2:63:9e:12:3d:14:7e:13:8b:8c:
                    16:74:3c:72:cf:c3:47:7e:c8:49:30:3e:61:ff:0e:
                    5e:75:9f:76:c6:f8:07:25:95:e2:be:3d:35:8d:e1:
                    be:f0:b0:e8:b1:f4:45:e0:69:77:3c:bb:d7:29:45:
                    e6:bc:ec:c3:61:c2:bd:14:9f:31:75:15:d8:ac:eb:
                    04:d8:5e:35:0f:82:30:62:7f:46:38:8a:87:44:35:
                    97:81:9a:6c:4e:03:7a:0b:33:d8:7c:75:73:47:56:
                    3f:60:91:cd:01:8f:a5:e9:30:da:18:4d:4b:df:a9:
                    bf:b0:e1:a9:4f:09:db:f1:e2:22:5d:ef:ee:0c:f3:
                    ff:86:05:93:3b:08:85:f9:0c:f4:9e:33:4b:0d:d2:
                    17:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:0B:AB:14:F8:6B:F4:8F:DA:8A:9E:97:1E:9A:CD:38:F0:A1:D4:41
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/tgurFPhr9I_aip6XHprNOPCh1EE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.105.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2b:0e:d3:25:11:0a:a4:76:30:9f:90:db:34:58:94:ec:48:fc:
         b2:b7:aa:49:b6:66:ef:10:19:45:73:fb:a6:38:4f:05:99:7a:
         57:5b:84:fd:82:5f:f4:a0:d8:85:b3:c9:e7:5c:b7:ad:8d:fd:
         83:b8:89:07:c8:2d:a9:3b:44:f5:17:e9:54:a0:aa:ed:4f:5f:
         78:11:0e:fa:9a:f6:50:1c:3a:6a:31:fd:38:73:76:7e:6b:58:
         54:6a:fe:df:89:1e:54:4b:ea:d5:91:d6:e0:3f:9c:e2:cc:34:
         01:4e:34:13:db:54:1e:3c:26:31:01:0f:1a:8a:ca:e6:52:aa:
         44:c8:b2:71:72:13:f3:87:05:1b:bb:27:39:42:d1:44:aa:6d:
         b8:c6:9c:89:2c:67:ed:ab:73:da:17:b5:0d:31:b3:43:e0:2e:
         3a:7e:0a:c3:68:2d:b3:37:7d:d5:12:1a:46:9d:c6:78:74:4f:
         17:f4:49:74:17:2e:90:13:b5:a3:fc:2e:00:83:4d:68:30:a5:
         3d:85:a5:f9:6c:c1:1c:c6:d4:e8:28:82:04:d7:b2:28:77:ad:
         dc:56:8a:30:ad:da:84:70:3b:4b:69:dd:91:08:a9:39:40:b6:
         00:c8:f9:ba:83:06:e7:32:14:c9:49:8f:3d:53:97:c2:38:eb:
         0a:1e:39:a5
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAcowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yMzA1MDEw
MTMyMTVaFw0yNDA0MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEI2MEJBQjE0Rjg2QkY0
OEZEQThBOUU5NzFFOUFDRDM4RjBBMUQ0NDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0mQWv49Zh4t/UlHZR0y40hE709VGimXib1hwFx2bbmiSiTmFD
9W3+zWvNjKqlzKPeRKyZNTql9cgy8AfvrN98YtvN69ml0jPEEmwLoK5Cb7OH1bO6
RBFoLRmMpm2/VdaHiBvRg3P0lxQXvoQc0mOeEj0UfhOLjBZ0PHLPw0d+yEkwPmH/
Dl51n3bG+AclleK+PTWN4b7wsOix9EXgaXc8u9cpRea87MNhwr0UnzF1Fdis6wTY
XjUPgjBif0Y4iodENZeBmmxOA3oLM9h8dXNHVj9gkc0Bj6XpMNoYTUvfqb+w4alP
Cdvx4iJd7+4M8/+GBZM7CIX5DPSeM0sN0hf7AgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUtgurFPhr9I/aip6XHprNOPCh1EEwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL3RndXJGUGhyOUlfYWlwNlhIcHJOT1BDaDFFRS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwBvaTANBgkqhkiG9w0BAQsFAAOCAQEAKw7TJREKpHYwn5DbNFiU7Ej8sreq
SbZm7xAZRXP7pjhPBZl6V1uE/YJf9KDYhbPJ51y3rY39g7iJB8gtqTtE9RfpVKCq
7U9feBEO+pr2UBw6ajH9OHN2fmtYVGr+34keVEvq1ZHW4D+c4sw0AU40E9tUHjwm
MQEPGorK5lKqRMiycXIT84cFG7snOULRRKptuMaciSxn7atz2he1DTGzQ+AuOn4K
w2gtszd91RIaRp3GeHRPF/RJdBcukBO1o/wuAINNaDClPYWl+WzBHMbU6CiCBNey
KHet3FaKMK3ahHA7S2ndkQipOUC2AMj5uoMG5zIUyUmPPVOXwjjrCh45pQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org