Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/xZ0ngV7qly3Dc7pNuNrrwEu7hZc.roa
File:                     xZ0ngV7qly3Dc7pNuNrrwEu7hZc.roa (raw, json)
Hash identifier:          cpRybY55KxqlE8+sOj6sgNSvIDwbYveG7fkySc60vw0=
Subject key identifier:   C5:9D:27:81:5E:EA:97:2D:C3:73:BA:4D:B8:DA:EB:C0:4B:BB:85:97
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       56
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/xZ0ngV7qly3Dc7pNuNrrwEu7hZc.roa
Signing time:             Tue 07 Jun 2022 10:03:10 +0000
ROA not before:           Tue 07 Jun 2022 10:03:10 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        114.16.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:03:10 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=C59D27815EEA972DC373BA4DB8DAEBC04BBB8597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:14:7b:45:49:59:0d:aa:4c:52:97:33:78:5e:
                    f1:45:9e:b0:46:01:5b:de:c2:0a:d5:67:4c:20:17:
                    89:7d:9b:9c:62:13:3d:c5:30:7c:c7:a1:27:4d:cd:
                    15:da:8a:5e:e7:e5:ed:ef:70:78:7b:62:b6:4a:41:
                    5d:73:d8:d1:b3:cb:cc:61:f9:49:c0:b7:99:dd:8d:
                    c7:bc:93:84:dd:5c:d2:72:82:b8:86:20:18:b2:8a:
                    5c:8b:3d:be:ae:57:d9:78:6a:ec:f0:56:df:a3:11:
                    30:45:f2:c2:6a:e0:17:6e:a4:c6:eb:32:fc:ac:48:
                    fe:1b:92:b7:9b:f5:21:0f:45:11:7e:5f:1e:68:7c:
                    73:ed:f3:ee:4e:34:a2:71:4d:ea:d6:bc:e9:13:c9:
                    e2:14:c8:07:83:1a:85:78:ee:66:74:68:9d:9f:2e:
                    dc:f3:37:f6:4a:17:14:11:7c:ca:67:f8:79:21:af:
                    aa:48:9d:63:66:4f:d2:41:67:f2:9f:ac:08:f5:31:
                    42:7b:79:13:71:e9:b7:de:aa:a9:fc:ca:0e:71:71:
                    b3:dd:68:52:62:c7:e7:91:e2:06:df:fc:34:84:da:
                    f6:9b:72:a0:35:a4:55:31:cc:de:db:0b:8e:78:f0:
                    7f:2c:9c:33:84:aa:db:a9:79:43:a5:80:46:2c:db:
                    00:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:9D:27:81:5E:EA:97:2D:C3:73:BA:4D:B8:DA:EB:C0:4B:BB:85:97
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/xZ0ngV7qly3Dc7pNuNrrwEu7hZc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.16.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         91:15:d5:6c:53:95:4e:8a:e2:fc:97:2b:34:6f:8e:fa:3b:e0:
         8c:c3:a8:e4:95:a4:0c:3d:d1:0a:3e:d5:52:f7:0f:12:c1:5b:
         63:43:97:11:b6:58:d2:f4:87:86:fb:42:00:5f:cb:b8:d2:b6:
         1d:4f:34:85:89:16:8e:15:7e:aa:89:e9:f0:e4:88:88:0c:aa:
         a6:86:64:41:fa:b9:5b:a7:e9:07:17:0a:48:ff:b3:ad:c9:44:
         d8:4c:14:5c:d2:ad:34:ef:45:7b:92:94:6c:55:1f:a7:73:bf:
         20:43:64:15:33:8d:78:8b:9d:50:a1:01:bf:ab:20:da:6d:8b:
         e0:80:46:25:5e:e0:4b:c4:15:71:bc:82:8d:ea:b9:c4:ef:12:
         04:cb:f2:74:98:f3:e5:cb:2d:73:3d:1f:50:78:42:9d:43:f9:
         46:dc:f8:14:af:b7:03:b0:42:70:d6:0c:dd:af:2e:6b:a9:17:
         d1:3e:54:67:59:76:87:c2:95:02:cb:4b:10:a6:bb:8e:b4:d7:
         41:6c:86:0f:41:5a:c2:14:3e:a8:45:9b:4c:d3:2d:bf:18:7e:
         48:77:61:f1:1f:42:b9:1f:ae:67:76:9f:2c:bd:18:4c:53:fe:
         3c:2e:16:79:1a:ce:0b:3f:e1:42:d6:42:4b:b9:ef:71:8e:21:
         8c:d8:e9:a7
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIBVjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNUJG
QTNFNTNFNTkxNDkyMzlBMTY4REZEOTJDNzU3NDVBQjY2Q0I2MB4XDTIyMDYwNzEw
MDMxMFoXDTIzMDUxNTAxMzAwNFowMzExMC8GA1UEAxMoQzU5RDI3ODE1RUVBOTcy
REMzNzNCQTREQjhEQUVCQzA0QkJCODU5NzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJ8Ue0VJWQ2qTFKXM3he8UWesEYBW97CCtVnTCAXiX2bnGITPcUw
fMehJ03NFdqKXufl7e9weHtitkpBXXPY0bPLzGH5ScC3md2Nx7yThN1c0nKCuIYg
GLKKXIs9vq5X2Xhq7PBW36MRMEXywmrgF26kxusy/KxI/huSt5v1IQ9FEX5fHmh8
c+3z7k40onFN6ta86RPJ4hTIB4MahXjuZnRonZ8u3PM39koXFBF8ymf4eSGvqkid
Y2ZP0kFn8p+sCPUxQnt5E3Hpt96qqfzKDnFxs91oUmLH55HiBt/8NITa9ptyoDWk
VTHM3tsLjnjwfyycM4Sq26l5Q6WARizbAPcCAwEAAaOCAiMwggIfMB0GA1UdDgQW
BBTFnSeBXuqXLcNzuk242uvAS7uFlzAfBgNVHSMEGDAWgBQVv6PlPlkUkjmhaN/Z
LHV0WrZstjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTYxL0ZiLWo1VDVaRkpJNW9XamYyU3gxZEZxMmJMWS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZiLWo1VDVaRkpJNW9XamYyU3gxZEZx
MmJMWS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8xNjEveFowbmdWN3FseTNEYzdwTnVOcnJ3RXU3aFpjLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw
BQMDAHIQMA0GCSqGSIb3DQEBCwUAA4IBAQCRFdVsU5VOiuL8lys0b476O+CMw6jk
laQMPdEKPtVS9w8SwVtjQ5cRtljS9IeG+0IAX8u40rYdTzSFiRaOFX6qienw5IiI
DKqmhmRB+rlbp+kHFwpI/7OtyUTYTBRc0q0070V7kpRsVR+nc78gQ2QVM414i51Q
oQG/qyDabYvggEYlXuBLxBVxvIKN6rnE7xIEy/J0mPPlyy1zPR9QeEKdQ/lG3PgU
r7cDsEJw1gzdry5rqRfRPlRnWXaHwpUCy0sQpruOtNdBbIYPQVrCFD6oRZtM0y2/
GH5Id2HxH0K5H65ndp8svRhMU/48LhZ5Gs4LP+FC1kJLue9xjiGM2Omn
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:09 2023 by rpki-client on console-ams.rpki-client.org