Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/1kFyeZQrjv7JVXljiaP3IpAwDC4.roa
File:                     1kFyeZQrjv7JVXljiaP3IpAwDC4.roa (raw, json)
Hash identifier:          mOqOOOVCqH+k06xhDYOubMwz86jol8xDaKm76ux6SDU=
Subject key identifier:   D6:41:72:79:94:2B:8E:FE:C9:55:79:63:89:A3:F7:22:90:30:0C:2E
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0184
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/1kFyeZQrjv7JVXljiaP3IpAwDC4.roa
Signing time:             Mon 01 May 2023 01:28:52 +0000
ROA not before:           Mon 01 May 2023 01:28:52 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        59.134.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 388 (0x184)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:28:52 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=D6417279942B8EFEC955796389A3F72290300C2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:86:92:7b:d6:fc:4f:06:d2:9b:7b:22:7b:bb:
                    6c:50:fa:07:d8:23:5e:35:25:d2:f8:8d:df:97:1d:
                    40:3e:29:31:2b:c2:b0:fc:cb:e7:f3:70:05:3d:4c:
                    54:17:2e:cf:dc:04:c1:fd:97:8d:6d:8e:53:86:6e:
                    f0:f7:60:8c:ab:1e:f7:7d:83:06:e8:08:55:fc:ba:
                    87:c3:39:52:00:f0:0f:32:da:5f:35:03:81:7d:6f:
                    c0:e2:c1:78:af:99:33:8c:23:e2:c5:41:16:ac:34:
                    8d:cc:71:26:a0:ac:f3:88:d4:3a:02:95:ac:50:6e:
                    3b:67:b8:6f:b8:8d:2e:e8:e0:4f:17:ba:5d:23:68:
                    3c:45:a1:3d:f5:be:c3:0c:a2:10:b0:a0:d1:0b:25:
                    3d:8b:28:15:61:f0:8f:14:1c:2b:6e:82:9b:14:d4:
                    e7:12:97:03:b7:82:0e:98:8d:9e:85:44:94:10:13:
                    72:7f:06:b3:57:25:a5:b0:f5:b1:1c:4e:ef:f1:e4:
                    2a:5f:18:cc:80:fe:8f:d7:58:bb:19:9c:a1:e0:db:
                    b9:c4:5d:72:77:ba:41:47:ea:7e:e7:92:0b:8c:c6:
                    81:be:1a:54:7d:e2:cb:c5:9d:01:ed:ef:0e:09:6a:
                    ef:59:82:bf:d6:f5:fa:05:b4:08:f0:b7:fa:c6:c9:
                    e8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:41:72:79:94:2B:8E:FE:C9:55:79:63:89:A3:F7:22:90:30:0C:2E
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/1kFyeZQrjv7JVXljiaP3IpAwDC4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.134.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3a:a8:81:67:f1:d1:ad:f7:ed:0f:50:55:54:0f:a0:b7:9d:fa:
         c1:10:37:07:81:89:84:ab:a4:22:4a:70:8c:3e:34:f4:36:23:
         32:1b:05:4b:f4:16:87:93:18:6b:d7:72:74:cd:76:3a:0c:42:
         96:59:2b:0d:cc:f2:ae:bc:a5:19:ea:8c:17:67:5d:b5:98:aa:
         b7:f8:b6:e2:de:4f:c0:cb:36:09:05:b7:21:30:ba:f3:7d:68:
         a1:db:9a:b2:45:7b:9e:ba:6b:95:a8:1e:13:e1:67:24:72:aa:
         20:62:27:96:57:45:16:8a:0b:dc:95:0f:f8:a9:b4:42:75:db:
         65:14:d4:9a:27:d6:4e:c5:88:e1:d9:df:9e:56:a0:6f:4c:c7:
         44:08:9e:97:3d:21:dc:4c:e4:4d:cc:30:48:fb:1e:ea:db:18:
         57:7e:2f:9f:8c:22:9d:ec:e0:c9:f7:20:f6:30:aa:5a:07:35:
         07:86:c8:b9:c4:56:63:c3:0a:8f:17:49:e3:f1:c9:e5:45:98:
         3b:02:24:55:a7:d2:91:b5:1c:ec:4e:49:5e:50:05:74:15:e9:
         d5:e9:69:ef:da:f9:c0:8b:3c:d3:0c:f2:bb:6d:ad:4c:61:99:
         db:3f:93:05:d7:60:b8:dd:87:24:94:68:8b:69:11:0f:02:0b:
         ab:c3:d6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org