Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/usH516fRm_TpvdFgWjYCel9q-20.roa
File:                     usH516fRm_TpvdFgWjYCel9q-20.roa (raw, json)
Hash identifier:          O1UgdnK02PONZp0Jr8xJ0AU/6nlqOsrAnX/bGAVPQko=
Subject key identifier:   BA:C1:F9:D7:A7:D1:9B:F4:E9:BD:D1:60:5A:36:02:7A:5F:6A:FB:6D
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       01B3
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/usH516fRm_TpvdFgWjYCel9q-20.roa
Signing time:             Mon 01 May 2023 01:32:06 +0000
ROA not before:           Mon 01 May 2023 01:32:06 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        106.176.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 435 (0x1b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:32:06 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=BAC1F9D7A7D19BF4E9BDD1605A36027A5F6AFB6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:de:da:98:0f:39:f1:1d:4e:3c:0e:ad:89:73:
                    e0:11:f7:43:00:58:d1:e0:cf:cb:66:8d:ab:b0:ab:
                    20:ba:b9:b5:11:64:77:fc:ea:80:53:3a:d4:71:d9:
                    5e:08:d6:75:eb:a9:8e:b4:32:d2:bc:22:b9:bf:9e:
                    e8:92:68:32:ca:07:d2:f7:18:dd:27:95:68:da:7e:
                    a8:01:c0:40:0f:b4:3f:d8:16:06:d7:d7:32:7c:fd:
                    ca:88:a4:db:e6:a5:99:aa:84:11:07:7b:6a:a2:ba:
                    f8:52:15:19:36:9f:ef:f8:d7:ea:8a:12:c2:e0:a4:
                    39:46:49:79:8e:6b:3e:9c:88:b4:7e:08:1e:90:5d:
                    47:6b:f3:0c:39:dd:81:08:ac:e0:6d:23:c0:7c:40:
                    c6:75:4f:35:41:76:3e:80:67:51:50:c7:ae:ae:3a:
                    91:ac:58:23:d8:de:e8:e7:f2:f9:06:67:2b:a8:bb:
                    2d:cc:57:f9:47:9a:80:7c:80:0c:92:6b:95:77:2f:
                    56:52:96:8c:65:06:9e:a7:e8:80:79:56:ef:3e:e9:
                    84:95:ad:75:10:ac:d9:b1:f2:f4:da:50:40:37:c3:
                    52:96:d4:79:b0:8d:f2:d4:bd:a6:dc:67:9f:89:4d:
                    73:eb:81:68:b8:8b:c7:1c:cf:fa:eb:f9:5d:8f:46:
                    04:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C1:F9:D7:A7:D1:9B:F4:E9:BD:D1:60:5A:36:02:7A:5F:6A:FB:6D
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/usH516fRm_TpvdFgWjYCel9q-20.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.176.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b2:ed:eb:82:6d:04:4f:9d:48:b7:41:23:17:75:d5:f7:7c:35:
         33:63:fd:3e:00:b0:56:d2:c6:18:ee:37:51:5c:a2:8b:60:79:
         ca:0a:09:95:cf:46:7e:db:b0:51:fb:eb:09:e1:3d:c0:aa:9b:
         d0:2b:14:0d:43:44:6d:c4:96:2d:12:24:0a:8d:9e:1b:4a:15:
         e0:ae:98:d8:70:51:f0:b0:2d:52:e8:33:11:97:e2:ae:64:f9:
         a0:e8:8b:c9:31:6b:77:38:7b:ad:03:af:01:b1:54:44:a6:63:
         32:8c:7c:d2:02:4e:de:25:eb:a9:de:96:c6:3b:20:e6:77:78:
         8c:d5:96:c6:02:8a:6c:83:8a:06:28:6e:42:b9:bc:e4:c7:ae:
         0d:f8:a0:7b:49:9e:b1:5a:71:1f:ef:e8:0e:0d:0d:ef:8d:3c:
         b5:82:4a:bc:ea:50:ab:29:13:43:5b:1b:9f:1d:54:12:4b:04:
         02:7f:9f:e1:fa:ce:16:92:2b:bf:c2:c1:44:49:34:f8:45:b7:
         0f:ae:8e:1a:cf:00:89:28:dc:25:e6:b6:45:3a:f2:84:3a:f4:
         95:d4:c2:d2:db:fa:a9:f9:9d:d4:46:ec:d2:dd:1e:e5:3b:3b:
         6d:38:75:09:ce:00:c3:cb:51:3f:fe:b6:23:09:2f:cd:c1:4d:
         9e:d2:d3:be
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yMzA1MDEw
MTMyMDZaFw0yNDA0MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEJBQzFGOUQ3QTdEMTlC
RjRFOUJERDE2MDVBMzYwMjdBNUY2QUZCNkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC03tqYDznxHU48Dq2Jc+AR90MAWNHgz8tmjauwqyC6ubURZHf8
6oBTOtRx2V4I1nXrqY60MtK8Irm/nuiSaDLKB9L3GN0nlWjafqgBwEAPtD/YFgbX
1zJ8/cqIpNvmpZmqhBEHe2qiuvhSFRk2n+/41+qKEsLgpDlGSXmOaz6ciLR+CB6Q
XUdr8ww53YEIrOBtI8B8QMZ1TzVBdj6AZ1FQx66uOpGsWCPY3ujn8vkGZyuouy3M
V/lHmoB8gAySa5V3L1ZSloxlBp6n6IB5Vu8+6YSVrXUQrNmx8vTaUEA3w1KW1Hmw
jfLUvabcZ5+JTXPrgWi4i8ccz/rr+V2PRgSxAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUusH516fRm/TpvdFgWjYCel9q+20wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL3VzSDUxNmZSbV9UcHZkRmdXallDZWw5cS0yMC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwBqsDANBgkqhkiG9w0BAQsFAAOCAQEAsu3rgm0ET51It0EjF3XV93w1M2P9
PgCwVtLGGO43UVyii2B5ygoJlc9GftuwUfvrCeE9wKqb0CsUDUNEbcSWLRIkCo2e
G0oV4K6Y2HBR8LAtUugzEZfirmT5oOiLyTFrdzh7rQOvAbFURKZjMox80gJO3iXr
qd6Wxjsg5nd4jNWWxgKKbIOKBihuQrm85MeuDfige0mesVpxH+/oDg0N7408tYJK
vOpQqykTQ1sbnx1UEksEAn+f4frOFpIrv8LBREk0+EW3D66OGs8AiSjcJea2RTry
hDr0ldTC0tv6qfmd1Ebs0t0e5Ts7bTh1Cc4Aw8tRP/62IwkvzcFNntLTvg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org