Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/u7XMW0kC6IJRf_jqFYStQU2ZCzE.roa
File:                     u7XMW0kC6IJRf_jqFYStQU2ZCzE.roa (raw, json)
Hash identifier:          js/Fp8F9t8e0trpAUZiNWErJXTbIwrp5eZFP0gbBURk=
Subject key identifier:   BB:B5:CC:5B:49:02:E8:82:51:7F:F8:EA:15:84:AD:41:4D:99:0B:31
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       FF
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/u7XMW0kC6IJRf_jqFYStQU2ZCzE.roa
Signing time:             Tue 14 Jun 2022 09:54:02 +0000
ROA not before:           Tue 14 Jun 2022 09:54:02 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        210.172.64.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 255 (0xff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun 14 09:54:02 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=BBB5CC5B4902E882517FF8EA1584AD414D990B31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:21:03:c2:5a:04:55:70:a7:1f:00:23:a1:c8:
                    a0:00:de:ce:86:11:d8:fc:1e:36:13:3f:9b:9f:40:
                    0b:27:1e:34:e6:af:9b:d6:c1:bc:09:84:29:89:8a:
                    5f:bc:1b:db:11:d0:99:a8:f2:82:3f:07:76:6f:ab:
                    61:40:fb:7e:07:15:8f:1d:4b:03:62:db:15:b7:73:
                    ff:c3:b4:a6:ab:99:c6:5d:ac:77:0c:6a:be:72:e0:
                    16:94:e2:c8:37:75:a1:f8:c2:cd:1c:4e:bd:a7:29:
                    b6:db:b8:80:54:60:8c:9e:28:fa:ce:c5:d2:d7:5d:
                    b6:4d:62:3f:f6:22:f1:ee:74:90:34:ce:6a:54:8c:
                    83:d9:c4:dc:cf:4c:e6:b6:a8:e0:c1:22:3e:72:3d:
                    5b:d3:88:9a:47:4c:91:33:04:7b:e6:83:f5:f9:07:
                    cc:d7:6f:8e:46:16:b0:50:c3:f0:4c:3d:a8:c4:3e:
                    25:ee:17:c7:d5:6b:fd:ad:13:de:60:e6:3d:0f:69:
                    b8:46:7e:91:8e:6a:12:be:4b:ce:93:8d:e1:ce:8d:
                    b3:50:5e:88:4e:a3:6e:a8:d5:04:d4:ae:6d:15:6e:
                    fa:e7:cb:9f:e1:d0:f3:68:9d:ae:80:d0:45:29:3a:
                    c2:89:23:4f:12:2f:67:d4:1c:4b:90:1d:bf:d8:bf:
                    f8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B5:CC:5B:49:02:E8:82:51:7F:F8:EA:15:84:AD:41:4D:99:0B:31
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/u7XMW0kC6IJRf_jqFYStQU2ZCzE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.172.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         29:58:49:3a:9d:66:1a:22:51:95:b4:f7:bc:00:91:b7:f9:ea:
         32:73:81:4c:4d:8b:1e:bd:ba:f1:3e:9a:26:96:af:fc:66:2a:
         c2:63:9f:1b:9d:e5:e1:88:ef:eb:6f:f2:18:3a:4a:e1:77:95:
         c3:80:01:78:78:74:b6:b2:5a:66:41:86:96:43:00:88:21:cb:
         b2:bb:e7:b6:c4:78:b0:f6:8a:6c:cb:9c:98:47:17:53:5e:f4:
         69:88:a0:0a:4b:3c:94:a3:a7:87:5a:88:fc:ff:35:78:ce:44:
         7c:bf:dc:9f:92:91:37:b4:ca:54:db:d1:72:b8:c9:87:a3:ab:
         c0:35:94:36:08:43:b4:3a:70:59:7a:6a:ac:1b:c8:d4:7b:7b:
         b2:39:3d:d9:9c:c7:c3:ed:3b:ef:17:30:9e:45:6b:a1:4b:4c:
         52:35:3b:1d:7e:04:c5:a9:7b:bf:e8:62:87:dd:c1:5a:a4:e9:
         d7:44:f3:6d:82:32:1f:ac:47:fd:22:68:20:66:dc:83:e3:d6:
         1b:eb:d8:24:bd:08:d8:12:09:e3:5a:9f:ef:22:a4:4f:88:69:
         c1:ac:a6:86:84:d3:78:5c:d6:1b:4f:dd:28:d2:47:58:25:ff:
         4a:0c:d3:ec:2d:d3:7a:08:41:79:c8:0b:79:80:57:df:ab:69:
         10:f3:63:cf
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yMjA2MTQw
OTU0MDJaFw0yMzA1MTUwMTMwMDRaMDMxMTAvBgNVBAMTKEJCQjVDQzVCNDkwMkU4
ODI1MTdGRjhFQTE1ODRBRDQxNEQ5OTBCMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDZIQPCWgRVcKcfACOhyKAA3s6GEdj8HjYTP5ufQAsnHjTmr5vW
wbwJhCmJil+8G9sR0Jmo8oI/B3Zvq2FA+34HFY8dSwNi2xW3c//DtKarmcZdrHcM
ar5y4BaU4sg3daH4ws0cTr2nKbbbuIBUYIyeKPrOxdLXXbZNYj/2IvHudJA0zmpU
jIPZxNzPTOa2qODBIj5yPVvTiJpHTJEzBHvmg/X5B8zXb45GFrBQw/BMPajEPiXu
F8fVa/2tE95g5j0PabhGfpGOahK+S86TjeHOjbNQXohOo26o1QTUrm0Vbvrny5/h
0PNona6A0EUpOsKJI08SL2fUHEuQHb/Yv/iLAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUu7XMW0kC6IJRf/jqFYStQU2ZCzEwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL3U3WE1XMGtDNklKUmZfanFGWVN0UVUyWkN6RS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAbSrEAwDQYJKoZIhvcNAQELBQADggEBAClYSTqdZhoiUZW097wAkbf56jJz
gUxNix69uvE+miaWr/xmKsJjnxud5eGI7+tv8hg6SuF3lcOAAXh4dLayWmZBhpZD
AIghy7K757bEeLD2imzLnJhHF1Ne9GmIoApLPJSjp4daiPz/NXjORHy/3J+SkTe0
ylTb0XK4yYejq8A1lDYIQ7Q6cFl6aqwbyNR7e7I5Pdmcx8PtO+8XMJ5Fa6FLTFI1
Ox1+BMWpe7/oYofdwVqk6ddE822CMh+sR/0iaCBm3IPj1hvr2CS9CNgSCeNan+8i
pE+IacGspoaE03hc1htP3SjSR1gl/0oM0+wt03oIQXnIC3mAV9+raRDzY88=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org