Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/0F31VkieCV5kgpIqjURumlJYBCA.roa
File:                     0F31VkieCV5kgpIqjURumlJYBCA.roa (raw, json)
Hash identifier:          v/QdhwdgN+X0uewpDgdRmZqKtSzLdF381s/LCNxzdhU=
Subject key identifier:   D0:5D:F5:56:48:9E:09:5E:64:82:92:2A:8D:44:6E:9A:52:58:04:20
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       43
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/0F31VkieCV5kgpIqjURumlJYBCA.roa
Signing time:             Tue 07 Jun 2022 09:59:11 +0000
ROA not before:           Tue 07 Jun 2022 09:59:11 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        113.147.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 09:59:11 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=D05DF556489E095E6482922A8D446E9A52580420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4c:7e:b2:f7:8b:4d:17:43:5b:c5:8f:3f:b1:
                    c2:34:2c:f3:5e:15:bb:f5:a9:f1:1e:8a:2e:1e:1f:
                    71:d4:75:11:23:82:c4:5f:61:06:9d:18:bf:03:1a:
                    1f:f8:3d:b4:5a:6c:61:f2:b7:36:3e:ba:3c:16:60:
                    41:e9:b3:03:9d:b9:9f:ea:90:85:30:5b:ec:bc:bf:
                    bd:fa:40:76:a5:2d:ce:d9:72:22:a2:9e:8b:bb:d2:
                    30:68:5c:5f:2d:b2:c3:35:e6:2f:4f:b2:f5:dd:1e:
                    f5:54:cb:33:6a:a2:96:61:13:d4:e4:ad:c5:88:9e:
                    f3:7a:5b:9b:3e:05:73:7a:f3:3c:15:22:c8:9c:a3:
                    c2:a9:9f:45:3e:e1:22:75:f5:ce:15:d2:37:c7:df:
                    c1:3a:f8:4a:ec:41:67:24:d3:80:2f:da:06:08:0a:
                    ed:dc:29:25:80:27:c3:1a:52:25:35:f8:32:e0:00:
                    ac:57:9b:db:88:b9:bc:a1:c0:c9:4e:26:6f:af:c4:
                    3f:a9:a5:27:65:69:ee:a6:b2:6e:ee:39:8e:93:ae:
                    70:1b:06:29:a3:39:6b:0c:ed:06:79:46:cb:2a:d1:
                    2a:62:50:18:5a:8e:cc:dc:3f:d2:47:bd:73:bc:2f:
                    5a:a2:a8:75:d6:76:bb:dc:fb:fa:44:00:55:4b:89:
                    ba:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:5D:F5:56:48:9E:09:5E:64:82:92:2A:8D:44:6E:9A:52:58:04:20
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/0F31VkieCV5kgpIqjURumlJYBCA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.147.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         01:02:75:95:b5:ed:e8:f4:4d:bb:d7:ab:16:cc:2a:92:00:e3:
         e4:35:55:d3:5e:58:64:e3:3f:ce:ae:71:f0:f1:fb:fd:88:32:
         ec:c3:27:64:69:3e:c2:42:a6:4a:54:ac:5a:58:04:3f:e3:71:
         a7:4d:52:42:53:71:a3:13:09:d3:4b:b3:bb:ea:3d:74:50:16:
         3e:0c:9c:f4:67:e3:6d:9f:70:51:cf:16:97:07:ce:4b:c8:17:
         96:db:4f:dc:83:8d:10:02:e5:08:01:6a:ee:82:5c:42:4e:14:
         cc:81:c5:38:95:5e:1a:44:da:79:30:64:fe:6c:14:2b:1b:b7:
         72:42:ab:f8:5f:70:e8:56:9f:b9:84:db:be:3c:a6:aa:19:16:
         26:21:7b:59:fa:59:75:dd:d1:04:14:7a:c1:b6:b2:0a:f7:61:
         c5:82:81:91:07:50:e0:80:d0:e9:8c:d8:49:5a:1f:a5:05:24:
         bc:24:13:8d:f8:0e:2d:af:8b:00:df:90:09:8f:41:9a:a8:c1:
         03:a6:11:ad:5b:99:eb:34:1c:0a:db:a0:f6:36:a4:e9:13:ef:
         19:07:ba:8f:31:2e:83:90:97:1d:1f:d7:a2:f0:f2:4e:16:27:
         73:6a:73:69:74:91:9e:59:82:df:91:4b:03:d0:98:f5:25:1a:
         ee:be:f9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:37 2024 by rpki-client on console-ams.rpki-client.org