Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/0JOxohclmyTbm9tK6-dqiHEQN9E.roa
File:                     0JOxohclmyTbm9tK6-dqiHEQN9E.roa (raw, json)
Hash identifier:          ByEmcxaYscO07/we5iiq7qMBnip3F1uuvEEz+KXo5qw=
Subject key identifier:   D0:93:B1:A2:17:25:9B:24:DB:9B:DB:4A:EB:E7:6A:88:71:10:37:D1
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       46
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/0JOxohclmyTbm9tK6-dqiHEQN9E.roa
Signing time:             Tue 07 Jun 2022 09:59:12 +0000
ROA not before:           Tue 07 Jun 2022 09:59:12 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        27.83.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 09:59:12 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=D093B1A217259B24DB9BDB4AEBE76A88711037D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:16:71:91:9b:88:4a:db:96:a7:86:bf:8b:0a:
                    02:42:00:c6:16:d0:2b:e6:1b:a9:df:fd:f5:01:49:
                    e0:f0:5f:61:9b:78:1d:f1:a9:60:1a:be:63:10:c7:
                    92:3b:d5:f7:78:83:56:43:1f:f4:c1:1a:f3:c7:64:
                    6f:67:ac:e7:60:99:5b:e6:34:b3:ee:c6:3d:d4:d6:
                    63:79:65:13:64:78:d2:bf:b3:b6:e4:b2:c0:6a:0f:
                    e9:a1:90:1a:66:4c:b9:43:65:e4:bd:89:69:0a:e0:
                    9e:62:50:5e:76:e7:87:d4:f6:9c:28:ad:8f:3d:f8:
                    57:fc:b6:b6:41:8d:aa:ed:2c:fa:37:e8:97:cd:c8:
                    e4:4e:9c:16:d5:ac:4b:4c:e8:18:67:e3:c5:e8:b8:
                    ed:6b:7e:f7:19:7c:0b:5f:d6:e1:63:10:15:62:f7:
                    5a:5c:23:d9:6d:a9:19:2b:c2:ad:bf:ec:d3:8b:32:
                    e5:d5:c1:fd:61:b1:ba:3e:d0:d2:49:52:45:27:0c:
                    d3:ac:e6:6e:5b:0f:1d:b5:de:72:28:0a:a8:41:e9:
                    df:27:eb:b7:9d:f3:91:b3:d5:fd:69:7b:89:6f:82:
                    fc:6e:a3:74:87:98:8d:3f:bd:50:24:f7:de:f8:98:
                    4b:5e:61:da:6d:09:1d:5f:5d:f4:41:ae:0e:11:1e:
                    d1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:93:B1:A2:17:25:9B:24:DB:9B:DB:4A:EB:E7:6A:88:71:10:37:D1
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/0JOxohclmyTbm9tK6-dqiHEQN9E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.83.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         71:71:f8:a9:d8:cf:f3:4a:a3:9c:33:32:2e:58:70:69:ac:42:
         8d:94:29:01:a1:06:cf:01:20:1f:2e:b1:af:de:2a:9b:ba:70:
         75:a5:8d:e2:fe:f6:d2:b5:fb:59:ba:e4:a1:96:fb:c5:e6:7b:
         f3:2a:ba:89:eb:54:0c:4d:51:10:b5:67:97:97:01:dc:1d:92:
         ae:ef:9c:04:9a:15:5e:a7:f6:9b:13:0a:4f:5d:ed:e9:ae:f0:
         21:c1:59:ae:8b:60:62:c4:66:05:2d:1e:7a:a3:f9:92:c7:0f:
         71:80:98:06:e7:7b:73:20:08:c3:cc:15:5e:42:74:3f:41:ab:
         22:ac:44:a8:b3:e1:56:be:f5:44:0d:8e:63:08:b2:eb:11:bf:
         52:42:45:dd:72:c7:6c:33:35:98:63:2b:bd:43:4b:27:fc:52:
         9b:8e:5c:0a:77:42:80:f1:84:b0:35:7e:60:5f:59:fb:f2:e8:
         88:58:e7:91:16:25:fe:58:61:1b:38:41:c4:49:ce:0f:a0:f6:
         b7:ca:51:ed:58:fa:69:13:6f:5c:1a:02:8c:97:fd:3c:b3:f5:
         f5:5f:10:09:b6:ea:0c:1a:81:35:5f:a5:f7:97:af:79:7d:d5:
         e4:7f:60:60:b7:59:94:80:ed:5a:ae:ee:06:87:79:a8:6d:bc:
         9a:65:57:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:08 2023 by rpki-client on console-ams.rpki-client.org