Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/3P5RXQdLZEMrKJB4_Zrt25wwNeY.roa
File:                     3P5RXQdLZEMrKJB4_Zrt25wwNeY.roa (raw, json)
Hash identifier:          9EUfva4ytutD3Tw5ovkWwY/2ZdEfeUA6Sfi7qlbOl0o=
Subject key identifier:   DC:FE:51:5D:07:4B:64:43:2B:28:90:78:FD:9A:ED:DB:9C:30:35:E6
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       FA
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/3P5RXQdLZEMrKJB4_Zrt25wwNeY.roa
Signing time:             Tue 14 Jun 2022 09:42:12 +0000
ROA not before:           Tue 14 Jun 2022 09:42:12 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        210.157.128.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 250 (0xfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun 14 09:42:12 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=DCFE515D074B64432B289078FD9AEDDB9C3035E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:94:b3:96:33:30:17:cf:aa:55:b8:1f:98:c9:
                    1e:e7:e4:4f:0e:fd:6c:7c:63:cb:88:ed:89:dc:d4:
                    c9:d1:f1:9c:31:f2:23:b3:d4:6e:4d:d1:00:40:d5:
                    30:2a:11:f3:06:60:fd:3a:1b:2d:60:05:0e:61:e8:
                    d8:60:83:99:92:f9:a2:6c:b0:91:ca:dd:32:87:e7:
                    10:60:1f:8f:7f:1b:32:47:60:57:0c:62:74:db:bd:
                    87:ce:53:ca:28:07:d0:c5:6b:52:d6:28:58:f9:2c:
                    00:27:e2:78:c1:7a:77:08:9e:70:49:96:b0:49:e7:
                    ee:c2:9e:6a:ef:b3:b9:79:0e:06:d5:cd:cd:ad:60:
                    b6:1c:12:36:a6:95:e7:a3:0f:e4:58:45:c2:0f:e6:
                    64:1c:87:6d:2c:67:ab:91:2b:f4:6e:9c:2d:16:d1:
                    dc:2c:e6:2b:fa:38:23:af:a0:d1:fa:54:56:d2:17:
                    47:18:05:1f:28:cb:39:52:db:8e:aa:3d:52:0a:4e:
                    6a:21:8e:e5:a4:af:a5:b3:cb:d8:a8:97:77:63:66:
                    5f:ff:ea:21:55:12:76:0e:9a:6d:a4:10:d1:8c:9b:
                    90:c8:e7:da:4f:61:37:d0:b5:5a:ce:90:de:99:0c:
                    11:3b:4d:a1:8e:79:65:cc:9e:0b:81:49:80:00:9f:
                    58:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:FE:51:5D:07:4B:64:43:2B:28:90:78:FD:9A:ED:DB:9C:30:35:E6
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/3P5RXQdLZEMrKJB4_Zrt25wwNeY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.157.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         03:0a:10:23:68:db:6b:c2:89:cf:00:f7:46:2b:cf:02:4f:d1:
         ad:d0:21:e0:62:8c:ab:1c:3b:d0:9d:ea:b2:71:4c:a2:bd:a5:
         f7:a5:47:03:2b:de:73:73:ab:b8:a1:bc:78:ae:35:2b:5b:08:
         4c:33:2a:03:7e:2a:42:7b:e2:4e:63:29:a6:ff:47:20:4a:14:
         f6:9c:66:82:84:3d:cf:a6:98:db:80:4d:26:c8:08:54:e6:be:
         34:3f:c5:c9:81:4d:50:68:dd:e6:ec:d0:99:3c:7e:33:12:e1:
         0a:c5:80:ce:6a:27:c0:79:13:05:74:28:bb:51:c5:66:3d:94:
         7a:35:2d:0d:96:8c:34:e1:8d:90:b5:61:a1:5b:fa:a9:05:c6:
         d6:61:05:42:4b:f5:5f:19:0d:d5:61:a7:f6:b8:8b:be:22:b9:
         be:c8:12:59:3b:e2:b6:d7:92:02:11:84:f3:49:60:58:62:9e:
         af:6e:1e:e7:23:52:f5:7e:c8:11:68:56:1d:e3:33:4f:04:f9:
         81:62:f5:09:20:9f:29:3a:0d:5e:8e:98:a7:c5:24:75:a2:3e:
         a6:8b:f4:e2:27:94:88:4b:e4:94:a3:d5:51:56:52:6a:ba:a1:
         84:c8:43:1f:20:05:71:95:11:0b:43:1b:2f:31:da:69:3a:3d:
         b3:21:7d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org