Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/07PGF4el8GOXd7J_oGul6UOjdRI.roa
File:                     07PGF4el8GOXd7J_oGul6UOjdRI.roa (raw, json)
Hash identifier:          EZTQDYMfVzggmaoR5UTylZbGYagSuBHPJZ3sewVZ5Jo=
Subject key identifier:   D3:B3:C6:17:87:A5:F0:63:97:77:B2:7F:A0:6B:A5:E9:43:A3:75:12
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       017D
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/07PGF4el8GOXd7J_oGul6UOjdRI.roa
Signing time:             Mon 01 May 2023 01:28:50 +0000
ROA not before:           Mon 01 May 2023 01:28:50 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        27.95.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 381 (0x17d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:28:50 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=D3B3C61787A5F0639777B27FA06BA5E943A37512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:79:19:ca:b8:16:b2:cc:9c:1e:9b:eb:ad:bc:
                    10:21:47:eb:c5:11:a1:70:68:dd:91:a1:a8:40:e1:
                    09:fc:61:26:5c:79:78:79:2c:12:20:72:53:9b:5c:
                    b9:dd:6b:ae:34:c3:18:69:22:09:db:8b:8a:bc:6e:
                    6b:0e:6d:46:bd:de:29:0c:23:29:99:0c:40:95:d9:
                    29:84:a6:d4:6d:08:8f:4b:ab:1c:ae:93:09:05:df:
                    38:3b:7b:08:5e:5c:fa:b3:87:b5:3d:25:e6:15:d0:
                    b4:31:96:c1:25:4b:c2:2b:87:c9:9b:18:eb:f0:68:
                    86:79:4a:bd:4b:dc:c4:27:eb:2d:91:3e:89:6c:9a:
                    52:46:ab:b3:62:95:31:f9:a8:72:29:a0:73:ea:5f:
                    ea:c3:cf:3e:33:0a:2d:80:30:43:62:5e:dc:88:ad:
                    ec:b3:ed:12:1d:46:69:d4:36:14:e4:64:52:c2:ff:
                    78:6b:4b:21:d1:10:b0:ad:83:29:99:08:67:f6:8e:
                    ce:e2:c2:af:c9:84:6b:31:6d:5f:e5:16:23:78:a9:
                    8d:39:00:34:fa:0b:90:b8:d4:93:4b:78:52:90:a6:
                    f1:17:56:26:10:8f:92:7c:18:f3:ae:d4:39:71:90:
                    44:d9:e3:bb:8c:e6:3c:45:3e:56:43:39:a0:d2:b8:
                    98:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:B3:C6:17:87:A5:F0:63:97:77:B2:7F:A0:6B:A5:E9:43:A3:75:12
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/07PGF4el8GOXd7J_oGul6UOjdRI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.95.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         08:97:8b:7b:55:e0:c9:5c:85:62:9d:eb:d2:2c:14:e3:54:7f:
         e0:86:cc:d5:a6:8e:ad:5c:67:1e:37:d2:39:4b:02:fb:7f:81:
         b1:08:72:3b:0f:a5:6b:76:2b:b6:3a:cf:2a:53:62:6b:88:52:
         a8:ea:4a:ab:c3:c1:76:8c:2a:a6:4a:3b:ef:59:30:83:82:48:
         f6:3e:a7:13:27:b0:ef:fe:ef:f2:8b:7f:ff:46:60:db:18:7a:
         85:74:df:3e:c4:cc:7e:bb:2b:24:78:df:cf:03:e7:8d:d4:f9:
         d9:f4:ce:4f:e5:9f:4f:ae:48:a5:a5:37:74:20:aa:d2:9a:af:
         ef:a2:c1:b5:fc:87:26:b6:ac:38:3f:b2:09:12:02:29:5d:5c:
         6f:b6:a3:39:00:05:84:c7:fc:e3:4b:f9:c7:eb:de:1b:5c:4f:
         86:73:71:71:94:2f:1b:b1:d3:70:96:24:b4:c4:c8:ea:2b:73:
         bc:00:6f:cd:1a:89:18:2e:21:fe:78:8f:e6:19:da:c4:57:c4:
         0d:36:7b:13:46:a9:94:1e:15:55:3d:b5:9e:ee:e4:b5:8e:ad:
         4f:c3:7b:5b:81:e2:90:be:b2:fa:5d:8a:b7:2b:f1:2b:5b:01:
         0d:ef:f2:82:8f:5d:8a:cc:5f:b5:1c:af:af:22:da:13:71:51:
         4b:39:85:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:37 2024 by rpki-client on console-ams.rpki-client.org