Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/4oFXgEK-dpa9gHOIr3rgkixSIFY.roa
File:                     4oFXgEK-dpa9gHOIr3rgkixSIFY.roa (raw, json)
Hash identifier:          v5mkhszCfwpGzN0W4Ps1mH43zSufAbYfAHe1ZtkzRxk=
Subject key identifier:   E2:81:57:80:42:BE:76:96:BD:80:73:88:AF:7A:E0:92:2C:52:20:56
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       AF
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/4oFXgEK-dpa9gHOIr3rgkixSIFY.roa
Signing time:             Tue 14 Jun 2022 09:09:51 +0000
ROA not before:           Tue 14 Jun 2022 09:09:51 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        106.188.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175 (0xaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun 14 09:09:51 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=E281578042BE7696BD807388AF7AE0922C522056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a7:2d:34:77:9b:8a:43:89:e7:c3:25:2d:cb:
                    bf:20:0c:64:b9:9b:42:65:b3:33:aa:45:77:23:4e:
                    8d:fe:fe:e7:85:80:fd:f0:8e:8c:96:0d:4f:44:b8:
                    1c:e8:06:67:e5:c2:47:f0:4e:ab:e7:2b:e3:03:8b:
                    10:ff:aa:80:cf:50:ac:ad:6f:91:1e:4c:04:be:3b:
                    07:7f:8f:0d:f6:fa:ad:2d:d6:b6:f2:2a:c6:0f:ff:
                    75:74:0c:37:1f:b4:d0:df:98:c9:fe:d1:3b:d1:ef:
                    a7:fd:07:2f:50:72:03:b5:b8:ca:b7:e2:c2:af:bf:
                    72:33:99:8c:e1:f4:4a:45:33:ec:ba:d6:69:f9:a6:
                    0c:44:ad:d6:84:68:d7:81:9c:62:45:73:0c:ef:43:
                    27:c2:91:a1:c7:83:82:19:6e:7b:a2:da:53:72:aa:
                    ce:b2:ee:88:98:65:8c:8e:b0:6c:63:3a:e7:42:77:
                    b2:58:c4:ec:81:c0:30:3a:ad:d8:86:54:bc:08:48:
                    0f:da:af:40:ba:45:84:18:70:ae:be:54:d6:f1:eb:
                    36:0f:e0:b1:fd:36:4e:1c:4e:4a:c2:7e:c8:6b:92:
                    ac:42:65:47:22:33:9e:7d:45:df:77:24:09:7d:af:
                    cf:5d:f0:86:9e:35:1a:38:47:00:6f:3d:30:2d:38:
                    ff:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:81:57:80:42:BE:76:96:BD:80:73:88:AF:7A:E0:92:2C:52:20:56
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/4oFXgEK-dpa9gHOIr3rgkixSIFY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.188.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6c:31:4c:98:68:d8:2a:71:c3:ea:ca:aa:f4:84:8e:ef:72:ba:
         fa:44:e3:e6:a1:da:ff:6b:24:0b:f1:f9:e2:6d:52:1a:53:40:
         5d:fe:a7:a7:46:2a:a4:20:e6:03:cd:90:db:42:fd:c6:07:90:
         c7:42:6a:03:d0:4b:e3:2f:58:a3:87:b8:86:1c:c9:bd:f5:35:
         3e:48:d7:fd:81:f3:4e:97:68:8c:0f:dd:e2:30:0c:6c:42:5d:
         ff:6d:60:bb:40:52:56:61:34:6f:fb:a9:33:94:d4:3f:8b:fc:
         60:9f:30:31:13:0e:3b:3d:e8:24:34:c0:cc:3c:cc:de:be:5a:
         9e:5d:96:c2:71:5c:e5:1a:7c:7c:91:6b:6e:b4:97:b0:c5:01:
         56:9c:82:f9:4f:8b:a4:b9:80:04:05:a3:02:14:6e:f0:7e:81:
         50:7d:b2:ad:5e:75:2d:06:a6:c3:55:1f:98:af:ab:11:af:12:
         cb:23:2a:a1:a2:35:3f:cf:9b:08:92:38:86:44:62:a6:5c:41:
         24:c7:72:f3:ec:18:d4:d6:8e:a5:72:22:37:ac:0b:cb:ea:5d:
         0e:15:be:86:b8:66:3a:be:13:66:9c:d5:17:9e:e9:3f:e7:d4:
         ae:0e:c1:f5:18:ec:65:89:8d:a5:b4:93:f7:e3:db:0a:65:00:
         02:26:81:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org