Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/5QiYMt6hcJYrAV8GqC2ABoif7i8.roa
File:                     5QiYMt6hcJYrAV8GqC2ABoif7i8.roa (raw, json)
Hash identifier:          AXtaCiFAB+vfMEBmqjGjFZyFxf/sT+uzv6zhHc6VIBI=
Subject key identifier:   E5:08:98:32:DE:A1:70:96:2B:01:5F:06:A8:2D:80:06:88:9F:EE:2F
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       01A5
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/5QiYMt6hcJYrAV8GqC2ABoif7i8.roa
Signing time:             Mon 01 May 2023 01:30:40 +0000
ROA not before:           Mon 01 May 2023 01:30:40 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        125.51.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 421 (0x1a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:30:40 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=E5089832DEA170962B015F06A82D8006889FEE2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:65:4b:cd:cc:9b:3a:f7:7a:9a:38:50:a7:0d:
                    fd:33:11:a2:dc:57:9c:12:3a:78:b2:12:1a:ee:80:
                    ff:99:80:09:0d:a6:f2:19:83:d8:e0:7c:c0:c1:45:
                    1e:a5:10:3c:0f:6c:9d:09:fa:c2:ec:1b:9d:c5:ef:
                    80:08:40:50:3b:4e:67:37:6e:fb:b8:7c:7e:fb:a3:
                    7a:5d:8a:dc:29:01:fa:4f:ae:d6:6e:4a:c7:85:10:
                    2e:85:10:29:d9:df:c0:29:9d:ae:c8:17:89:dc:5d:
                    09:15:a1:73:94:ba:27:f1:b3:e0:75:55:d8:11:2a:
                    10:fe:22:22:52:d4:18:04:01:73:35:f4:de:bf:eb:
                    0a:ed:a1:88:78:86:d8:13:5b:a9:bf:f9:1b:c4:ee:
                    0d:9f:17:87:76:8a:fb:44:d2:54:ac:96:c9:a9:82:
                    7f:13:5d:32:ff:2e:5b:05:35:65:5f:0a:f3:73:10:
                    c8:cc:78:73:d1:d4:45:c3:50:2e:a8:8d:f1:9c:92:
                    c9:35:90:b1:e2:fe:38:fb:16:7d:34:2a:f3:c9:bd:
                    bd:5a:b3:c6:64:cf:d9:a7:ab:41:14:ef:27:69:33:
                    5e:f3:42:32:ad:dd:6b:98:bc:37:84:17:c5:97:db:
                    4c:51:89:e9:79:a8:02:90:4c:b1:40:9c:59:fb:bb:
                    ca:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:08:98:32:DE:A1:70:96:2B:01:5F:06:A8:2D:80:06:88:9F:EE:2F
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/5QiYMt6hcJYrAV8GqC2ABoif7i8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.51.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         60:0f:bc:ec:d6:5b:8c:68:64:00:7f:a1:91:a9:c5:2b:b0:ac:
         96:a5:f2:17:02:78:e7:80:09:c8:9e:71:18:eb:ec:50:1e:93:
         07:ba:c9:bb:e0:27:a6:e5:4a:78:f6:09:5b:e2:18:b3:f0:db:
         ae:6a:79:b4:3c:91:5e:37:4a:15:10:a1:8f:8b:a6:7b:2d:a9:
         df:7c:b6:df:be:31:76:b6:71:3c:ab:b0:e4:c3:fa:98:79:ca:
         ea:c9:19:05:95:13:ba:2c:73:93:52:ff:9d:3f:dd:da:c7:97:
         d3:0a:27:3b:8d:a4:27:74:ca:db:fc:80:a9:f7:ea:e0:76:8a:
         85:69:39:1f:f2:0e:03:a6:28:dc:db:74:28:99:52:f3:3c:06:
         11:d5:b1:fc:d9:a2:29:1c:87:d1:57:0f:88:54:65:75:cd:af:
         2a:92:d3:81:12:2f:75:54:ea:87:58:13:c2:34:30:10:53:c2:
         48:0a:bd:df:52:d4:31:51:e7:b1:cd:2a:66:7c:da:4c:e1:fc:
         5a:04:ae:fc:52:58:e0:ac:b4:77:e1:27:9f:d2:a1:b8:51:de:
         b0:79:ec:d0:86:0e:3a:46:5c:57:e8:d7:b7:28:b3:c7:f5:52:
         aa:ea:63:ea:5f:ef:ca:d6:39:99:e9:91:55:ad:d0:01:3a:cf:
         8a:3b:c8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org