Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/2H6g5qFuIS04rdGvA7XRbGIyNN8.roa
File:                     2H6g5qFuIS04rdGvA7XRbGIyNN8.roa (raw, json)
Hash identifier:          UUz7cVAIxnD5o+fwbXP5fWxX49yF0Er7M9XbnVwqn90=
Subject key identifier:   D8:7E:A0:E6:A1:6E:21:2D:38:AD:D1:AF:03:B5:D1:6C:62:32:34:DF
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0199
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/2H6g5qFuIS04rdGvA7XRbGIyNN8.roa
Signing time:             Mon 01 May 2023 01:30:33 +0000
ROA not before:           Mon 01 May 2023 01:30:33 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        121.106.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 409 (0x199)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:30:33 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=D87EA0E6A16E212D38ADD1AF03B5D16C623234DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d0:a7:78:65:72:7c:3c:e3:79:d7:60:60:34:
                    f5:c7:2f:81:5a:60:8e:6f:33:a4:23:3f:0e:01:88:
                    ce:58:ad:90:a6:5d:0e:95:0e:1e:1f:ac:bf:b5:a5:
                    71:05:bb:7f:a9:7e:c5:75:8a:16:be:24:55:46:72:
                    d2:64:2b:8b:6e:c4:85:42:6d:9b:14:09:41:2f:7a:
                    9b:a6:d9:7b:13:a9:7b:b0:f3:dd:9e:db:ac:b4:ec:
                    cc:26:91:c2:b1:08:1e:d6:e4:93:0c:a0:19:f6:ed:
                    61:45:d7:82:cc:9c:c5:d2:09:f5:ad:fc:c2:22:5b:
                    48:a1:63:ef:45:68:9c:d1:20:3a:7b:ec:76:14:b8:
                    40:4a:2f:ef:26:29:52:d3:f2:4c:3f:49:8d:17:37:
                    42:1e:8e:b7:b1:e0:82:03:d1:eb:a1:0b:21:27:bd:
                    0d:42:3b:ed:7b:9d:f2:90:b8:91:6b:91:92:1d:eb:
                    a2:f8:ad:1f:de:aa:a5:73:34:0c:8c:e4:00:ef:28:
                    ce:fc:51:22:e6:0c:8c:e6:d1:ea:c1:ea:99:e5:21:
                    d5:0c:93:d6:68:f6:cb:0e:a1:ab:05:8a:e8:50:3e:
                    8e:c7:24:8c:a2:61:fd:30:60:bc:65:f7:dd:5c:30:
                    8b:ba:8b:10:85:2d:e8:cf:17:f7:ca:0c:29:64:13:
                    3d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:7E:A0:E6:A1:6E:21:2D:38:AD:D1:AF:03:B5:D1:6C:62:32:34:DF
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/2H6g5qFuIS04rdGvA7XRbGIyNN8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.106.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         87:76:4c:42:68:31:47:50:3d:af:ba:73:8d:1f:7e:a7:ce:f5:
         57:55:6a:d4:65:3e:84:fa:57:0f:92:f2:11:41:35:b7:db:a2:
         6a:a8:21:be:f6:7a:02:6e:26:42:e7:a3:f8:cc:5b:29:4b:db:
         94:e3:22:be:c7:e9:f7:13:2a:e0:c1:4d:cf:34:22:88:7a:c8:
         55:26:c6:c0:ba:2a:f9:7a:0d:02:de:db:9a:13:96:06:58:e7:
         51:6a:d1:73:7b:18:18:81:8a:04:ea:28:27:66:96:67:5e:e7:
         71:88:6e:1b:9f:6d:65:77:dc:d0:cb:0e:9f:91:38:78:b6:fc:
         a6:d3:ba:b6:05:e2:50:59:bb:8f:de:2f:aa:ce:da:85:c6:41:
         0f:ef:27:d3:af:a2:42:41:42:01:a0:8c:7a:12:ae:ea:47:9b:
         30:74:67:ea:4b:ca:87:c4:43:42:28:89:18:10:5f:fc:14:67:
         b0:75:fd:9a:bd:2e:e2:fb:df:f8:40:cb:a5:2d:ba:a4:8d:8f:
         67:4c:a7:4b:b1:7a:aa:b7:67:cb:24:a6:54:61:e9:51:04:0a:
         3b:ba:b1:7f:bb:8b:3c:f4:53:9f:36:1f:0d:ec:43:f9:db:b1:
         36:4b:9b:33:e4:f9:13:fa:5b:8e:b4:bc:95:88:ec:0c:d8:bf:
         5e:64:d2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:37 2024 by rpki-client on console-ams.rpki-client.org