Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/660v9e8c4c0hYumdr-MlAImwMp8.roa
File:                     660v9e8c4c0hYumdr-MlAImwMp8.roa (raw, json)
Hash identifier:          4S4poWj44OsrDcR5HE2XhfH6aAYgZz3TCLoBu9o4MRU=
Subject key identifier:   EB:AD:2F:F5:EF:1C:E1:CD:21:62:E9:9D:AF:E3:25:00:89:B0:32:9F
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       DE
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/660v9e8c4c0hYumdr-MlAImwMp8.roa
Signing time:             Tue 14 Jun 2022 09:32:04 +0000
ROA not before:           Tue 14 Jun 2022 09:32:04 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        182.251.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun 14 09:32:04 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=EBAD2FF5EF1CE1CD2162E99DAFE3250089B0329F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:07:c4:01:3e:86:d5:13:3a:8d:11:1c:5e:b4:
                    08:6d:ae:e2:bf:e0:f5:25:31:f0:d3:ee:67:e1:93:
                    05:f6:0c:e7:32:b7:48:bd:c2:52:4e:0f:bb:30:20:
                    02:68:38:50:6f:07:bf:12:91:08:22:b1:21:0f:6c:
                    fa:2e:81:7d:00:34:9c:25:b1:ce:ea:ca:6d:89:b9:
                    20:1a:3c:d0:65:6b:be:d2:9b:c2:39:5d:c1:c8:a5:
                    cf:80:dc:cc:f7:62:3a:32:b0:4b:84:97:31:fc:dd:
                    44:9c:5c:31:24:40:6d:54:fc:ff:fc:d8:9f:b5:b9:
                    dd:2b:a0:c5:8b:32:34:f9:03:18:bd:dc:a8:c2:69:
                    7e:f3:ea:8e:c1:2e:78:b1:e4:ee:03:29:0c:83:9a:
                    65:ae:25:f6:d9:fa:16:8b:2c:04:18:b4:a6:fd:3e:
                    1d:0b:cf:18:82:f6:4e:48:83:51:65:6f:ca:b0:32:
                    b0:51:1c:33:52:7a:41:77:2f:ff:d8:e8:84:66:e0:
                    51:a7:70:67:e9:75:f1:ea:ae:e2:b9:5d:f7:b5:a9:
                    b4:cb:1d:67:2f:f6:55:66:59:1a:b1:bc:ed:67:7e:
                    fa:8a:50:e5:c2:f2:41:75:4c:42:42:ae:70:3d:6c:
                    07:0b:0c:1f:0c:00:fe:40:aa:a5:77:03:00:d3:44:
                    ac:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:AD:2F:F5:EF:1C:E1:CD:21:62:E9:9D:AF:E3:25:00:89:B0:32:9F
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/660v9e8c4c0hYumdr-MlAImwMp8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.251.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         53:a8:81:3a:39:35:f3:6d:9f:84:4d:08:2c:8e:81:c1:31:42:
         bc:0e:4e:d8:0a:9a:b4:98:cc:3e:dc:3e:b2:18:5b:e0:45:5f:
         a0:67:4a:86:09:09:d4:e3:d3:e9:0b:8c:cb:e2:8a:1d:b8:61:
         14:f2:b4:31:37:09:96:61:9c:a7:8f:18:e5:96:08:3c:55:d0:
         64:72:c3:3e:86:7a:0f:4d:39:9e:78:7b:67:68:39:a5:c4:ef:
         c0:3e:84:dd:93:41:82:6f:e4:de:ef:4a:41:a3:88:75:0e:49:
         0b:50:78:b2:5d:1a:9b:f9:4c:2f:5e:5c:6f:47:11:f9:26:73:
         99:e3:a9:9e:66:af:57:cd:d4:5c:d1:33:95:e1:98:b1:b2:7b:
         95:f3:01:89:81:91:40:e0:dd:6b:33:6a:44:20:0b:dd:3e:c9:
         af:02:de:3e:f5:3a:45:95:b3:54:b3:6a:e9:67:74:6f:57:c4:
         1d:3a:31:5b:b5:b1:48:ae:ec:82:f8:15:5b:60:84:e9:c5:3e:
         b6:81:1f:e8:24:7d:10:74:46:7b:ed:a8:66:9d:4d:4a:aa:29:
         0d:4a:62:10:99:f7:1b:ff:30:f1:2f:72:6b:9c:a0:81:00:68:
         92:9c:1f:76:91:c8:4e:8a:dc:26:f2:67:63:86:c2:06:3b:2b:
         f8:07:7f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org