Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/1-WH0BqCunZNOJCYBZNtkEpA-2A.roa
File:                     1-WH0BqCunZNOJCYBZNtkEpA-2A.roa (raw, json)
Hash identifier:          +a4GhL4IBNITCYSVqLE3mJfUX8Lb0+fIZg8XmxknJs4=
Subject key identifier:   D7:E5:87:D0:1A:82:BA:76:4D:38:90:98:05:93:6D:90:4A:40:FB:60
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       D9
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/1-WH0BqCunZNOJCYBZNtkEpA-2A.roa
Signing time:             Tue 14 Jun 2022 09:30:09 +0000
ROA not before:           Tue 14 Jun 2022 09:30:09 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        113.157.64.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 217 (0xd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun 14 09:30:09 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=D7E587D01A82BA764D38909805936D904A40FB60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:3a:bb:46:c0:e6:8e:b2:c4:26:34:58:84:7c:
                    b4:17:e4:6f:03:49:a3:26:67:5c:fe:36:cd:d8:15:
                    21:fb:fa:97:3f:ce:1b:4d:36:e3:c3:9e:a4:00:48:
                    2a:cb:06:6d:70:86:cc:7c:fe:e8:e6:91:26:39:94:
                    18:30:61:96:6e:1b:aa:3a:53:88:1b:61:cc:79:ca:
                    ae:b4:3e:6d:28:3e:85:33:18:d8:2c:18:fe:62:92:
                    23:88:b7:d4:7b:a2:a1:f7:c1:5f:82:b2:9c:b4:7c:
                    17:2a:a9:2d:9b:e3:dd:f2:1f:04:09:c9:d3:46:51:
                    a9:ad:08:24:a4:66:fe:17:ee:10:eb:21:38:e6:37:
                    b9:42:01:72:ca:f0:a8:b9:34:58:02:61:37:7b:0e:
                    8f:39:f9:b4:8a:c9:d2:9d:9b:b6:08:2f:27:16:49:
                    18:7a:68:2c:96:ce:c0:64:50:89:f4:2e:7a:53:79:
                    87:e8:d6:40:f0:d6:39:13:8b:2f:ba:50:2f:19:a1:
                    42:c9:55:b8:51:94:7e:a5:81:c3:5b:5d:f6:f1:6c:
                    46:77:4d:ae:63:c9:ba:7e:f9:8a:ff:3b:3d:e0:7c:
                    e6:9e:c5:f4:a3:48:15:97:fc:99:f2:10:99:fc:da:
                    7e:61:58:fc:65:85:ec:e6:b5:97:0c:86:3f:16:e5:
                    74:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E5:87:D0:1A:82:BA:76:4D:38:90:98:05:93:6D:90:4A:40:FB:60
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/1-WH0BqCunZNOJCYBZNtkEpA-2A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.157.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         5b:a1:bd:ad:d7:91:f7:df:24:3b:dc:9f:07:5d:a3:d8:01:24:
         90:0e:e6:85:ce:33:0a:bf:b2:14:60:da:08:c0:85:78:30:77:
         77:95:34:9f:ab:cc:31:6a:a3:6a:f7:13:b2:6c:78:53:2f:6e:
         51:d2:69:31:44:2c:9f:3d:65:af:a4:40:03:d3:2d:bd:60:cc:
         4d:17:1a:69:98:49:56:e0:1f:4b:1c:00:28:59:07:f0:26:3c:
         44:76:fa:cb:60:20:9a:33:88:e1:ec:3e:d6:f5:c6:35:43:fd:
         9a:1d:a3:e2:82:ac:1a:6f:5c:50:49:9f:08:89:80:97:1f:04:
         87:48:b3:18:70:30:51:e3:c7:f2:29:f7:16:13:73:b8:2e:53:
         c6:da:88:69:a8:e1:83:92:20:01:69:81:80:d4:c5:b7:9e:7a:
         1d:3a:0d:fa:57:0b:f4:db:20:74:e1:89:6e:2a:3f:79:66:7a:
         d4:81:61:4e:32:5b:6c:c2:fe:d3:a8:80:bd:74:ef:fa:ca:a5:
         75:bf:9b:93:93:70:b3:88:59:19:bd:bf:58:5e:5a:7a:96:b5:
         b0:c3:d6:99:e9:03:d0:d5:c3:d9:78:ec:8f:11:64:65:01:33:
         46:56:e1:5c:06:5a:9c:2f:e7:22:fb:53:7d:29:a7:79:13:9d:
         ab:72:52:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org