Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/vCjWZPXc1GqT6wdR-e-CezBYIFc.roa
File:                     vCjWZPXc1GqT6wdR-e-CezBYIFc.roa (raw, json)
Hash identifier:          DoyzbGj23Wt00ob3svrF07ElHrQT6tabk6Z6tXTVhwk=
Subject key identifier:   BC:28:D6:64:F5:DC:D4:6A:93:EB:07:51:F9:EF:82:7B:30:58:20:57
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       B1
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/vCjWZPXc1GqT6wdR-e-CezBYIFc.roa
Signing time:             Tue 14 Jun 2022 09:09:51 +0000
ROA not before:           Tue 14 Jun 2022 09:09:51 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        210.249.0.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177 (0xb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun 14 09:09:51 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=BC28D664F5DCD46A93EB0751F9EF827B30582057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:75:08:82:30:e4:2a:78:45:1c:c7:ab:3b:e3:
                    e6:32:6b:bb:d9:15:5a:e2:05:c7:03:b1:c6:66:c8:
                    2f:07:b2:bb:2f:60:00:89:c5:70:dd:3d:45:73:00:
                    1f:82:3c:df:d2:5f:02:95:22:89:12:b9:25:30:b9:
                    7f:3a:28:be:97:6e:2e:dd:3d:c1:c0:1e:69:c8:8c:
                    ca:b3:78:85:22:f0:d7:4b:b5:31:54:88:47:61:a9:
                    78:22:97:49:c1:71:95:0d:bf:6d:75:54:b0:72:34:
                    35:d7:9f:34:8f:8c:87:4c:1c:28:95:53:07:fc:4c:
                    8f:c6:0e:95:c9:e8:fe:aa:e8:52:68:f0:77:ad:84:
                    66:a3:8d:72:dd:00:7c:bc:5c:50:a5:d2:ca:54:61:
                    72:e5:18:88:9e:d1:3c:50:97:bc:3b:85:d7:03:cf:
                    b9:d8:53:4d:62:59:ee:81:30:a0:20:14:75:64:44:
                    24:c4:95:45:c5:08:25:d1:14:3c:1e:49:cd:be:13:
                    fd:92:5e:36:34:5f:fc:74:d8:93:6a:ae:62:63:dc:
                    c8:95:d5:c4:47:46:b9:30:8c:6e:ed:3e:c3:ce:18:
                    ef:be:89:04:8d:04:ad:2a:fd:45:99:83:b8:61:01:
                    b4:fe:3b:98:1c:1a:f4:23:64:ef:8d:eb:d8:38:29:
                    8e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:28:D6:64:F5:DC:D4:6A:93:EB:07:51:F9:EF:82:7B:30:58:20:57
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/vCjWZPXc1GqT6wdR-e-CezBYIFc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.249.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         b1:28:63:e6:69:62:c7:10:d3:ec:2a:cb:ef:6d:1a:f0:a2:5b:
         2f:a8:10:4d:1b:2a:39:d6:47:f6:28:43:0e:aa:da:d4:12:83:
         5c:80:e7:b6:23:58:33:28:2f:da:38:cd:ec:33:62:53:06:dc:
         02:f4:7a:88:3a:c4:78:43:d7:bb:14:47:3e:fd:2b:05:26:0a:
         1e:8d:c6:20:45:c3:a6:b7:75:d9:ca:e4:eb:eb:31:b1:8b:2b:
         8e:c7:f6:c0:9d:c4:2c:15:c6:c7:91:60:1d:44:c0:92:89:ec:
         b6:40:21:60:f4:0f:83:50:c9:73:8e:de:28:32:a1:6c:40:53:
         ee:2f:9e:00:97:d6:b4:37:db:73:02:36:36:da:23:1e:9d:ff:
         0d:c4:ad:89:96:c1:50:57:0c:f1:78:f1:56:cf:9a:ac:93:e5:
         5a:35:f8:d9:bf:36:f8:5d:0a:0e:84:4b:3d:42:90:17:32:b8:
         90:13:21:95:17:1e:c9:d8:c2:db:a9:9b:7e:f4:72:d3:d4:42:
         76:23:26:cf:0d:c7:2f:44:71:a3:27:f8:bd:66:ee:63:c3:9b:
         c7:97:f6:85:1b:16:c6:8d:16:d5:bd:c0:e4:f2:bb:59:cb:fc:
         15:8d:e2:60:cb:52:4f:d7:83:46:11:da:fa:c5:c4:13:4b:89:
         9c:b9:98:db
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICALEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yMjA2MTQw
OTA5NTFaFw0yMzA1MTUwMTMwMDRaMDMxMTAvBgNVBAMTKEJDMjhENjY0RjVEQ0Q0
NkE5M0VCMDc1MUY5RUY4MjdCMzA1ODIwNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNdQiCMOQqeEUcx6s74+Yya7vZFVriBccDscZmyC8HsrsvYACJ
xXDdPUVzAB+CPN/SXwKVIokSuSUwuX86KL6Xbi7dPcHAHmnIjMqzeIUi8NdLtTFU
iEdhqXgil0nBcZUNv211VLByNDXXnzSPjIdMHCiVUwf8TI/GDpXJ6P6q6FJo8Het
hGajjXLdAHy8XFCl0spUYXLlGIie0TxQl7w7hdcDz7nYU01iWe6BMKAgFHVkRCTE
lUXFCCXRFDweSc2+E/2SXjY0X/x02JNqrmJj3MiV1cRHRrkwjG7tPsPOGO++iQSN
BK0q/UWZg7hhAbT+O5gcGvQjZO+N69g4KY6JAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUvCjWZPXc1GqT6wdR+e+CezBYIFcwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL3ZDaldaUFhjMUdxVDZ3ZFItZS1DZXpCWUlGYy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAfS+QAwDQYJKoZIhvcNAQELBQADggEBALEoY+ZpYscQ0+wqy+9tGvCiWy+o
EE0bKjnWR/YoQw6q2tQSg1yA57YjWDMoL9o4zewzYlMG3AL0eog6xHhD17sURz79
KwUmCh6NxiBFw6a3ddnK5OvrMbGLK47H9sCdxCwVxseRYB1EwJKJ7LZAIWD0D4NQ
yXOO3igyoWxAU+4vngCX1rQ323MCNjbaIx6d/w3ErYmWwVBXDPF48VbPmqyT5Vo1
+Nm/NvhdCg6ESz1CkBcyuJATIZUXHsnYwtupm370ctPUQnYjJs8Nxy9EcaMn+L1m
7mPDm8eX9oUbFsaNFtW9wOTyu1nL/BWN4mDLUk/Xg0YR2vrFxBNLiZy5mNs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:39 2024 by rpki-client on console-ams.rpki-client.org