Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/44j_FWiEn7n7PwH5mxW36OKdsnc.roa
File:                     44j_FWiEn7n7PwH5mxW36OKdsnc.roa (raw, json)
Hash identifier:          CyCfThZ7XCF3BmYNdIk9yIqxIVknQF/HVmNtPRcqpn0=
Subject key identifier:   E3:88:FF:15:68:84:9F:B9:FB:3F:01:F9:9B:15:B7:E8:E2:9D:B2:77
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       31
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/44j_FWiEn7n7PwH5mxW36OKdsnc.roa
Signing time:             Thu 28 Apr 2022 09:06:41 +0000
ROA not before:           Thu 28 Apr 2022 09:06:41 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     2516
IP address blocks:        59.130.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Apr 28 09:06:41 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=E388FF1568849FB9FB3F01F99B15B7E8E29DB277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:64:ea:0b:58:cc:a4:42:96:5e:cb:b2:90:36:
                    14:09:d5:ec:5d:6c:a4:7d:eb:44:f3:e4:98:04:9b:
                    50:ee:9f:8f:58:93:5b:cb:a7:f3:68:f0:21:d2:3c:
                    b7:ba:ea:f4:e5:80:59:35:9b:d0:44:40:84:13:36:
                    b7:1d:c6:e3:db:b3:73:1d:4d:f7:c1:93:4f:75:ca:
                    32:ce:39:93:4b:44:5b:5d:86:0d:9e:3c:93:00:ef:
                    bc:3b:fa:25:8d:a4:fa:f8:53:74:6b:48:c5:bc:02:
                    fb:b2:be:df:22:67:d4:fe:7d:58:4b:33:61:4a:5a:
                    81:74:f7:dc:72:08:57:c8:a9:6a:8d:bf:f2:45:94:
                    78:90:98:c3:0f:c4:ab:8f:d8:c5:42:d2:6c:5f:83:
                    cc:6b:ee:2c:29:58:0b:13:31:64:8e:ea:0d:6e:b2:
                    79:94:59:05:52:b2:38:37:cc:24:f8:7b:b3:1e:ac:
                    b9:9b:bb:cd:aa:69:c3:fa:7b:e3:ec:3f:84:0f:bd:
                    a7:38:cc:17:3b:e0:92:41:cd:2a:0e:a2:93:51:74:
                    eb:5c:7e:ba:ab:a2:50:a2:84:6b:62:59:1d:21:aa:
                    3e:26:4d:86:cd:ba:3b:db:c0:00:49:80:09:f2:04:
                    6f:01:9b:d2:c1:ed:1e:e7:c8:f2:c8:14:65:31:94:
                    18:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:88:FF:15:68:84:9F:B9:FB:3F:01:F9:9B:15:B7:E8:E2:9D:B2:77
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/44j_FWiEn7n7PwH5mxW36OKdsnc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.130.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         02:54:e5:a4:e7:f4:68:ab:2f:95:fc:ee:b4:1a:8d:59:1f:b9:
         70:b0:29:c1:33:48:94:c7:bb:d0:5f:fe:06:94:61:12:fd:42:
         4d:31:41:d1:54:17:35:45:4b:b1:db:0c:42:d2:cf:d8:65:c8:
         2d:de:1c:3d:a5:98:9c:ea:6b:c2:4e:1c:d2:6f:5e:78:30:6c:
         c2:33:79:ba:dd:92:1d:af:dd:66:19:48:b6:c2:c9:c7:39:d6:
         56:b3:61:12:a5:01:7d:37:26:eb:2a:b0:45:d4:a8:98:33:a4:
         0e:04:61:85:e7:5d:f6:eb:9c:c3:c3:fd:d1:16:69:ca:84:7f:
         fc:5f:1c:04:46:53:af:bc:7b:03:c0:84:1d:82:54:ac:63:d2:
         34:57:6a:ee:8a:73:7c:cb:24:c0:58:c0:db:17:c1:ae:c6:28:
         b7:5d:8a:01:39:6a:5a:d1:93:87:84:fa:4f:0d:92:43:b3:b2:
         7e:fb:0e:9c:b6:ed:01:1b:43:38:a6:d1:bf:ee:1e:2e:6c:e9:
         13:6e:09:9c:1a:51:3f:de:6d:83:6b:3a:2e:34:72:0e:59:7f:
         a3:0b:9c:42:85:e8:c3:8c:73:da:cc:4e:6b:33:84:8f:00:18:
         38:5b:7f:22:46:8c:3a:23:d6:56:de:d3:f5:0f:3c:7f:0e:c7:
         a0:3c:7a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org