Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/-gVxU7ZX-XOMU-Tpvh8h7oiGDys.roa
File:                     -gVxU7ZX-XOMU-Tpvh8h7oiGDys.roa (raw, json)
Hash identifier:          RbmMzmV6kcx8/h3RVW+oi1hsGDfF0NHDFQKs0MpLTsQ=
Subject key identifier:   FA:05:71:53:B6:57:F9:73:8C:53:E4:E9:BE:1F:21:EE:88:86:0F:2B
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0191
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/-gVxU7ZX-XOMU-Tpvh8h7oiGDys.roa
Signing time:             Mon 01 May 2023 01:30:29 +0000
ROA not before:           Mon 01 May 2023 01:30:29 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        118.159.0.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 401 (0x191)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:30:29 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=FA057153B657F9738C53E4E9BE1F21EE88860F2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:14:38:91:51:5c:9e:f7:29:0b:8b:95:24:73:
                    33:0c:bc:6c:7b:cf:d0:79:6c:1e:b5:f9:db:0f:e8:
                    1d:5c:70:09:f2:6e:21:07:56:e3:49:f9:ba:01:6b:
                    c5:31:67:95:30:3a:39:e2:f6:b4:ad:96:e6:9e:44:
                    f0:2d:96:13:5c:c2:7e:03:55:70:b2:8d:1c:24:3d:
                    6d:85:a1:3e:25:8e:17:c0:9c:a4:de:80:48:99:6e:
                    3c:1f:e9:d3:31:e4:18:11:62:c1:5b:d0:cd:35:9c:
                    16:cf:26:46:8b:13:75:d7:76:65:b4:af:a9:08:4c:
                    0c:23:1f:86:20:49:02:80:a1:13:41:fa:7e:b5:77:
                    f3:34:66:cd:10:9a:a8:60:75:de:39:26:01:8b:fe:
                    e6:16:0e:79:16:81:38:b1:57:e2:59:12:2f:3d:7a:
                    a9:ee:44:eb:73:d4:8b:90:a1:1b:13:c6:73:67:18:
                    a1:63:47:5e:50:4f:ad:cd:64:33:a2:b6:9a:d4:b7:
                    74:9e:b9:04:0b:4f:c6:6c:5f:16:b1:ca:a6:58:18:
                    87:e7:1c:c9:f0:fc:0a:05:52:55:ad:d0:09:d1:57:
                    ed:d9:7c:4c:79:9b:02:e9:bf:99:7a:a8:21:84:7a:
                    2c:12:c1:0c:e9:6d:1a:70:29:f2:2f:3b:f7:ec:6e:
                    1c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:05:71:53:B6:57:F9:73:8C:53:E4:E9:BE:1F:21:EE:88:86:0F:2B
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/-gVxU7ZX-XOMU-Tpvh8h7oiGDys.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.159.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         3a:42:97:17:76:06:4d:7a:11:d3:05:5d:6d:be:17:6a:58:ba:
         f1:46:45:4b:43:9f:4a:06:15:51:5b:45:4b:2e:aa:3b:1f:15:
         4e:32:b4:a1:af:f4:02:8c:37:19:ec:9f:b0:41:71:5c:ed:68:
         96:ce:b4:a2:bb:07:c2:51:72:27:11:2e:76:2b:32:e0:29:11:
         d9:bd:d3:e0:55:8d:8c:bd:27:f8:6f:ad:ec:64:22:4a:f7:83:
         67:ee:dc:aa:e9:0c:81:42:9e:82:61:be:1c:e3:49:9d:fb:61:
         c1:63:6c:64:fe:e8:93:ab:2e:f0:8f:80:29:7a:67:8c:40:81:
         48:6a:d4:3d:c1:7d:e5:93:01:b4:0d:bf:75:f8:cf:52:96:8b:
         52:32:86:14:97:6a:75:3e:9e:8b:7e:8f:a5:89:5f:eb:ed:9a:
         2f:a8:3e:ef:76:b1:39:29:f3:f5:12:e7:d2:ed:75:52:18:30:
         5f:e0:e1:72:47:a1:11:8d:8d:ae:73:b3:b8:29:68:ae:cd:48:
         ae:1d:18:4a:ae:0f:a8:3c:3e:02:80:da:8b:bf:b8:b0:7f:a1:
         48:d9:65:85:ba:1a:b1:c5:8f:b7:d6:6a:90:82:74:18:46:80:
         41:9a:96:71:f0:af:99:b2:62:09:a4:c6:5b:4a:7b:16:d8:69:
         a6:7d:2b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:37 2024 by rpki-client on console-ams.rpki-client.org