Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/6GrnWwYUacnRlgX4EgVOffKp5MI.roa
File:                     6GrnWwYUacnRlgX4EgVOffKp5MI.roa (raw, json)
Hash identifier:          5rf6C1eeJUn0QIVF71hIiY9QrYUr3qlGlWNl3qHOdu8=
Subject key identifier:   E8:6A:E7:5B:06:14:69:C9:D1:96:05:F8:12:05:4E:7D:F2:A9:E4:C2
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       72
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/6GrnWwYUacnRlgX4EgVOffKp5MI.roa
Signing time:             Tue 07 Jun 2022 10:09:11 +0000
ROA not before:           Tue 07 Jun 2022 10:09:11 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        121.109.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114 (0x72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:09:11 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=E86AE75B061469C9D19605F812054E7DF2A9E4C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e4:e7:f0:e1:64:9d:f6:2a:0f:c8:17:ac:e0:
                    88:a9:d0:b1:f2:32:91:80:2d:42:d7:d7:03:44:a7:
                    af:d9:5d:e8:15:c0:00:34:ce:36:6a:e2:d4:48:4f:
                    3f:c4:1f:4b:b6:e2:5f:11:04:b8:09:36:6f:03:bb:
                    22:3d:ea:3c:0f:03:06:62:bf:07:0c:e3:12:70:ba:
                    c9:b2:53:a3:fc:f4:66:90:e3:e8:25:32:e1:b9:f4:
                    bf:e8:5a:fd:e0:94:bc:1b:42:3c:92:28:87:26:b1:
                    67:e3:cf:e9:8c:6e:15:e0:1c:4d:ba:8a:0e:c5:72:
                    fa:4b:05:91:fa:9f:c0:97:d0:b2:ec:2f:65:cc:8e:
                    fc:09:86:af:37:48:c7:8c:8b:5e:25:f8:66:a5:c5:
                    56:d0:5c:5f:cf:22:e8:95:08:32:0a:9b:92:f0:24:
                    0c:18:9e:b3:fb:e5:42:c4:78:e2:21:b4:a3:82:b4:
                    d9:ab:98:84:1f:c5:5b:1e:c6:ef:27:ab:f6:43:2e:
                    69:eb:07:8b:f9:b2:1c:dc:e5:2b:fb:80:22:20:4e:
                    82:6d:2f:79:f9:c7:10:16:bd:e8:90:62:cd:8d:82:
                    59:b4:26:27:95:fd:fc:fd:2f:36:2d:f3:13:fe:b5:
                    5f:4d:84:1c:3d:b8:78:4d:d4:3e:28:77:b4:de:0a:
                    b9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:6A:E7:5B:06:14:69:C9:D1:96:05:F8:12:05:4E:7D:F2:A9:E4:C2
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/6GrnWwYUacnRlgX4EgVOffKp5MI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.109.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         29:e1:a7:5e:3b:55:e8:51:2c:f3:9a:5f:6f:74:23:77:96:15:
         20:2f:38:f7:16:0d:1c:11:00:c4:1e:9c:f6:23:2e:3e:de:ff:
         02:fc:5d:0d:61:a7:25:8a:f1:78:5f:cf:ab:4a:26:f7:0e:58:
         09:e8:38:f3:a7:4d:66:88:a6:62:da:b0:f2:18:f6:c9:6d:87:
         f7:c8:f2:b1:6f:9f:d7:19:d6:05:6b:31:47:ba:3b:6e:65:ab:
         67:a0:62:38:45:10:93:27:22:04:47:0e:da:71:49:0b:fe:ae:
         87:b4:14:e9:20:73:70:bf:3a:b4:47:b7:da:df:e1:99:1b:16:
         c6:8c:2b:57:da:a9:79:53:2d:1e:95:72:26:7d:06:e4:00:79:
         d8:2b:fd:09:a4:f8:c5:0d:ea:5f:8c:a5:69:d7:74:a9:3a:fd:
         0e:9d:28:0f:ec:b9:ac:38:cc:2e:c6:d7:4e:33:a0:13:9c:9a:
         da:4e:6a:3d:6f:56:77:3b:e9:6c:15:56:cb:30:0b:64:3d:f5:
         cf:71:51:f1:5b:6c:e1:1b:97:df:d2:8e:5a:03:33:38:f0:a1:
         6c:8e:0b:13:e2:60:b3:84:bb:0c:0e:9e:9e:1c:f1:13:98:f3:
         f8:bd:b3:14:8e:cb:e5:10:64:0b:d6:f2:cc:cc:bf:ce:2c:a6:
         90:cf:1a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org