Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/xOTB-op1cK3EJ0h7ZyDo5E-Cn6g.roa
File:                     xOTB-op1cK3EJ0h7ZyDo5E-Cn6g.roa (raw, json)
Hash identifier:          O99Vqwv2doVBZ9kGcsBTNLX9nMjA52suH4EgLvzz8+o=
Subject key identifier:   C4:E4:C1:FA:8A:75:70:AD:C4:27:48:7B:67:20:E8:E4:4F:82:9F:A8
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       71
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/xOTB-op1cK3EJ0h7ZyDo5E-Cn6g.roa
Signing time:             Tue 07 Jun 2022 10:07:18 +0000
ROA not before:           Tue 07 Jun 2022 10:07:18 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        106.163.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:07:18 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=C4E4C1FA8A7570ADC427487B6720E8E44F829FA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e7:30:44:d6:e0:75:0d:e1:6d:09:01:41:c2:
                    42:dd:f9:a2:c1:a7:0b:67:9c:80:a8:4e:34:6e:78:
                    bf:ef:d6:db:a4:e9:fb:33:4a:69:07:21:76:d0:97:
                    fd:df:c2:ec:9f:80:0e:c6:1e:53:45:a4:eb:5d:bf:
                    a3:96:25:81:5e:da:34:1f:2a:54:c7:a0:0b:c1:ca:
                    93:f9:1a:44:48:61:8d:37:84:4a:83:89:3c:01:da:
                    46:fb:89:7f:ff:a7:80:67:c4:dc:51:db:9d:ec:4f:
                    60:9e:dd:a5:36:f6:62:21:3b:1e:d8:89:ec:73:d4:
                    ad:d3:d7:98:b2:0a:f1:30:d2:a1:10:56:77:4f:44:
                    dd:78:96:eb:db:fc:04:08:67:a1:ab:2d:ec:a9:28:
                    81:fe:bc:d8:24:ba:5c:09:1a:a0:69:ce:7f:6e:09:
                    ee:ac:72:2c:f7:f2:c5:b8:53:78:a4:82:29:0e:9a:
                    39:68:8a:5e:da:b1:66:d0:a7:12:43:3e:28:71:03:
                    15:10:d8:1f:d3:29:38:0f:66:cd:e4:4b:77:97:25:
                    29:5a:e8:7a:8b:ca:a1:a6:a5:30:5d:9c:09:e2:25:
                    c1:ab:34:d5:ce:6d:48:e5:30:c1:c8:6a:6d:d7:c0:
                    1d:ff:6a:39:76:72:c0:43:02:5b:49:90:c4:f6:15:
                    49:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:E4:C1:FA:8A:75:70:AD:C4:27:48:7B:67:20:E8:E4:4F:82:9F:A8
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/xOTB-op1cK3EJ0h7ZyDo5E-Cn6g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.163.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         19:94:07:30:e5:58:07:fc:e0:94:64:e9:e3:4b:dc:1a:41:be:
         dd:06:05:7c:e6:be:ec:60:e2:bc:db:f5:ad:ac:85:9f:11:3f:
         f5:29:ee:9f:ea:6d:a3:b2:fc:48:c9:71:80:89:f8:43:e6:5c:
         93:53:e8:13:9f:fd:71:11:d4:1e:a0:f3:65:95:eb:8f:9c:90:
         f2:b7:4e:7b:82:30:04:e0:54:9a:bd:eb:d8:7b:87:63:cb:6c:
         6f:08:32:f9:3e:2a:bb:43:91:b0:db:51:6d:26:94:96:c1:2f:
         e9:6c:43:db:77:3a:74:7a:b2:e6:a5:fd:78:01:1d:1e:29:69:
         37:0b:4f:98:02:e4:04:98:95:a5:b6:07:b6:07:0b:53:70:98:
         4f:5d:62:dd:d5:df:06:2a:27:90:b6:19:8e:95:1a:da:78:bf:
         74:95:aa:89:d2:92:6a:12:d1:bb:64:9c:d2:4b:86:ce:c3:1a:
         c1:ee:f1:9c:69:5d:3f:9a:e9:aa:c6:3c:4e:a5:cb:10:f0:48:
         32:a1:7e:3c:eb:1d:57:59:11:f3:84:3d:c4:64:82:c8:c5:43:
         37:7b:df:37:6e:48:01:f7:32:f5:2b:a0:84:37:71:eb:1b:8c:
         71:3d:0f:eb:03:9e:01:e2:5c:94:e1:33:7d:10:5f:42:c6:13:
         32:a4:d8:ae
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIBcTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNUJG
QTNFNTNFNTkxNDkyMzlBMTY4REZEOTJDNzU3NDVBQjY2Q0I2MB4XDTIyMDYwNzEw
MDcxOFoXDTIzMDUxNTAxMzAwNFowMzExMC8GA1UEAxMoQzRFNEMxRkE4QTc1NzBB
REM0Mjc0ODdCNjcyMEU4RTQ0RjgyOUZBODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANnnMETW4HUN4W0JAUHCQt35osGnC2ecgKhONG54v+/W26Tp+zNK
aQchdtCX/d/C7J+ADsYeU0Wk612/o5YlgV7aNB8qVMegC8HKk/kaREhhjTeESoOJ
PAHaRvuJf/+ngGfE3FHbnexPYJ7dpTb2YiE7HtiJ7HPUrdPXmLIK8TDSoRBWd09E
3XiW69v8BAhnoast7Kkogf682CS6XAkaoGnOf24J7qxyLPfyxbhTeKSCKQ6aOWiK
XtqxZtCnEkM+KHEDFRDYH9MpOA9mzeRLd5clKVroeovKoaalMF2cCeIlwas01c5t
SOUwwchqbdfAHf9qOXZywEMCW0mQxPYVSVsCAwEAAaOCAiMwggIfMB0GA1UdDgQW
BBTE5MH6inVwrcQnSHtnIOjkT4KfqDAfBgNVHSMEGDAWgBQVv6PlPlkUkjmhaN/Z
LHV0WrZstjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTYxL0ZiLWo1VDVaRkpJNW9XamYyU3gxZEZxMmJMWS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZiLWo1VDVaRkpJNW9XamYyU3gxZEZx
MmJMWS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8xNjEveE9UQi1vcDFjSzNFSjBoN1p5RG81RS1DbjZnLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw
BQMDAGqjMA0GCSqGSIb3DQEBCwUAA4IBAQAZlAcw5VgH/OCUZOnjS9waQb7dBgV8
5r7sYOK82/WtrIWfET/1Ke6f6m2jsvxIyXGAifhD5lyTU+gTn/1xEdQeoPNlleuP
nJDyt057gjAE4FSavevYe4djy2xvCDL5Piq7Q5Gw21FtJpSWwS/pbEPbdzp0erLm
pf14AR0eKWk3C0+YAuQEmJWltge2BwtTcJhPXWLd1d8GKieQthmOlRraeL90laqJ
0pJqEtG7ZJzSS4bOwxrB7vGcaV0/mumqxjxOpcsQ8EgyoX486x1XWRHzhD3EZILI
xUM3e983bkgB9zL1K6CEN3HrG4xxPQ/rA54B4lyU4TN9EF9CxhMypNiu
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:09 2023 by rpki-client on console-ams.rpki-client.org