Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/z-G9OvEdTxFFY2gWtk7RfiT4O4c.roa
File:                     z-G9OvEdTxFFY2gWtk7RfiT4O4c.roa (raw, json)
Hash identifier:          FK2/lzcILRhBD3a2QOjdX5guxGP5Pltwx9e3eyGA6xw=
Subject key identifier:   CF:E1:BD:3A:F1:1D:4F:11:45:63:68:16:B6:4E:D1:7E:24:F8:3B:87
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       C3
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/z-G9OvEdTxFFY2gWtk7RfiT4O4c.roa
Signing time:             Tue 14 Jun 2022 09:13:58 +0000
ROA not before:           Tue 14 Jun 2022 09:13:58 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        124.211.0.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195 (0xc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun 14 09:13:58 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=CFE1BD3AF11D4F1145636816B64ED17E24F83B87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:57:6e:6c:97:4d:60:41:63:78:51:39:8a:48:
                    a9:60:5c:e7:fc:d6:2b:7a:32:be:00:5e:f3:69:cc:
                    ba:ff:d7:ee:01:eb:b0:17:93:ef:74:32:b6:01:66:
                    f6:1c:01:ea:e7:5b:72:ba:ae:fa:49:c4:0b:88:80:
                    51:c5:23:96:2d:1e:fe:49:ad:ae:5a:78:17:6a:49:
                    91:00:5e:69:6b:f6:d9:4b:97:d4:c6:8b:28:3d:93:
                    95:85:ae:ed:57:6e:0b:ef:b3:fd:ab:9d:4a:e0:54:
                    fb:70:39:63:f8:f0:b2:8a:30:10:23:03:9b:e4:59:
                    3e:11:2b:ee:b3:12:07:15:af:31:7a:dd:53:eb:1f:
                    12:6f:77:ca:99:46:42:75:c7:c8:ee:91:29:35:7a:
                    88:a9:fe:46:d4:38:3f:f8:6e:0b:d4:22:e1:09:f3:
                    9b:52:2c:ed:b3:49:2b:0d:d5:e7:b3:d7:d5:50:c1:
                    ca:ec:0d:76:d3:ff:64:b4:4e:52:bd:8e:5f:ee:6c:
                    af:59:c7:4e:4d:f7:f8:f5:5d:a3:0e:48:53:b5:2d:
                    c0:f0:b1:6c:f3:58:84:f2:a3:01:4a:5b:42:61:7f:
                    69:80:fe:b9:01:f3:87:d2:34:74:de:49:48:36:88:
                    1a:77:34:26:ff:42:16:57:49:fa:3c:da:7d:a2:3f:
                    e3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:E1:BD:3A:F1:1D:4F:11:45:63:68:16:B6:4E:D1:7E:24:F8:3B:87
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/z-G9OvEdTxFFY2gWtk7RfiT4O4c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.211.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9c:8c:f6:35:37:20:30:f9:75:f9:00:fe:ca:2e:0e:e0:3c:42:
         1a:ed:f3:4d:01:8c:f5:aa:15:06:82:4a:e8:78:f8:81:0f:66:
         d5:bb:99:81:10:b8:8d:3e:ad:23:c7:98:d2:2a:d9:3e:07:fe:
         7b:de:2a:25:2e:07:95:4d:8e:1d:2c:b7:cb:c5:cb:b6:58:79:
         3b:c8:fc:40:13:a6:e0:47:5b:ed:14:3b:fb:43:25:56:d8:17:
         39:3b:21:f0:87:40:1b:95:0e:fd:46:3e:be:ea:f1:39:30:18:
         40:53:76:1e:f9:fe:d8:91:67:3c:7d:02:ce:8b:12:39:69:ba:
         0d:03:8e:ba:d1:4f:77:ef:21:e9:ae:ad:21:b5:64:40:97:45:
         ce:9c:76:14:a1:b0:1f:c7:30:85:4c:8c:34:10:cc:fa:bd:4d:
         43:90:65:15:7e:56:ea:ec:9f:00:d7:9d:2b:70:14:ed:cf:d8:
         38:d0:5f:0c:f8:38:0a:fb:57:ef:20:c3:cc:11:e2:7d:a0:d5:
         86:0b:dc:3d:27:c7:fc:79:d5:28:17:b9:a5:1f:83:0b:b1:1b:
         49:54:f3:91:a3:1d:39:9f:cb:ef:b3:0c:0c:72:55:58:ee:44:
         29:81:86:c8:04:4b:ca:d3:2a:e6:0b:b9:96:dd:bd:0e:92:d1:
         50:1b:bc:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----