Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/0UBehtUS6deQjdIldgwapNb8f7Y.roa
File:                     0UBehtUS6deQjdIldgwapNb8f7Y.roa (raw, json)
Hash identifier:          KvM1xHzmvgUHqaiqBd13szHy/q3iP3fnhWeYxoSK88g=
Subject key identifier:   D1:40:5E:86:D5:12:E9:D7:90:8D:D2:25:76:0C:1A:A4:D6:FC:7F:B6
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       01F4
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/0UBehtUS6deQjdIldgwapNb8f7Y.roa
Signing time:             Mon 01 May 2023 01:35:38 +0000
ROA not before:           Mon 01 May 2023 01:35:38 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        124.215.224.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 500 (0x1f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:35:38 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=D1405E86D512E9D7908DD225760C1AA4D6FC7FB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:07:14:c2:32:71:56:39:c8:b9:cd:49:5a:21:
                    93:b8:23:06:72:f1:6f:ce:a4:c6:39:37:13:48:f2:
                    a3:65:e2:37:e2:4c:d4:c5:98:44:d9:0b:e1:fc:c6:
                    f2:c0:02:c8:28:11:8f:0e:bf:19:ae:6f:81:84:ea:
                    2f:ec:28:b4:f3:83:b6:7c:12:62:9b:f7:d8:17:1e:
                    c8:12:f1:58:c6:90:03:b6:51:b5:c4:b4:2d:d1:de:
                    d6:f3:b8:6a:75:54:62:ed:dc:87:eb:eb:48:7d:cf:
                    fb:85:f8:1f:fe:a3:2d:27:eb:a2:85:53:4e:ad:82:
                    44:e0:c7:11:aa:f9:90:4e:2c:88:0c:51:ea:56:b4:
                    bc:aa:e8:89:13:de:00:cd:21:0d:b8:e3:be:3f:4b:
                    56:da:e0:f6:c9:5a:81:68:5b:fe:88:89:a7:fd:9e:
                    b9:09:89:b9:0d:c2:63:26:12:25:e2:09:d4:f1:a8:
                    d1:9e:0f:81:cd:9c:fa:1a:f5:74:70:00:f3:e4:14:
                    ca:9f:e6:06:82:9b:5f:66:eb:ef:7c:89:1f:a6:87:
                    f6:35:86:d0:c9:e2:b3:e5:6c:0a:b5:67:ed:9e:ac:
                    ef:8d:a4:8d:50:75:72:62:a7:b3:76:80:99:37:1c:
                    66:e5:81:6a:d2:6c:73:0b:69:52:62:93:56:4f:d5:
                    af:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:40:5E:86:D5:12:E9:D7:90:8D:D2:25:76:0C:1A:A4:D6:FC:7F:B6
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/0UBehtUS6deQjdIldgwapNb8f7Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.215.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7a:8c:65:03:b7:f6:96:9f:39:4e:ff:72:9f:8e:de:52:3f:99:
         ee:24:ec:2d:00:b6:d6:f6:5a:25:36:4b:b2:27:60:fb:44:7d:
         5c:f8:74:cc:32:17:f4:0a:60:2a:65:b5:d5:2e:cd:23:64:6e:
         49:20:9b:c8:37:f3:74:c4:69:b7:49:1f:a6:10:73:23:7c:9a:
         d8:95:63:45:10:dc:a0:d0:d1:c6:38:dc:4c:9f:4d:89:38:d7:
         45:a3:2e:f1:e5:43:18:b1:00:15:30:c9:9e:84:5b:01:d9:8c:
         df:94:e8:01:b2:9c:b7:87:23:32:4f:fa:fa:74:b9:c9:93:ed:
         75:74:7e:00:ec:b2:00:46:17:ab:43:68:f4:af:db:db:f3:e8:
         cb:89:fe:0d:2b:8f:76:97:ff:6e:46:c5:1c:63:74:d9:a9:04:
         8e:ba:d1:c2:bf:53:13:69:0c:8d:ed:dd:06:c7:e2:84:d8:20:
         48:bc:4b:f8:2d:2b:51:90:47:56:86:97:de:21:3f:6c:3f:81:
         28:3e:11:56:dd:6d:3f:6a:fe:72:a0:4e:8d:88:e2:ee:92:1b:
         81:8b:10:2d:c4:d5:56:8e:41:8e:cd:d1:3a:a6:7f:06:da:90:
         8b:f9:e1:6a:6b:55:99:84:68:24:13:ae:3d:3a:d4:c2:c6:bc:
         08:78:9e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:37 2024 by rpki-client on console-ams.rpki-client.org