Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/6_3YUeG9chAKZUkCTlu9vlaHBpY.roa
File:                     6_3YUeG9chAKZUkCTlu9vlaHBpY.roa (raw, json)
Hash identifier:          l5j2Lm1MQg/KJ0/2JflSrDTFVloc9yDDHMQRpe6ZSmc=
Subject key identifier:   EB:FD:D8:51:E1:BD:72:10:0A:65:49:02:4E:5B:BD:BE:56:87:06:96
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       4E
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/6_3YUeG9chAKZUkCTlu9vlaHBpY.roa
Signing time:             Tue 07 Jun 2022 10:01:11 +0000
ROA not before:           Tue 07 Jun 2022 10:01:11 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        27.92.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:01:11 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=EBFDD851E1BD72100A6549024E5BBDBE56870696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:28:1b:30:27:6e:0b:d5:0c:bd:1e:17:a7:e8:
                    20:70:f5:ad:41:1b:db:81:16:ae:68:d9:8b:5e:4a:
                    c0:d9:23:8c:be:60:f8:0a:fa:a4:a2:07:f4:33:41:
                    ec:7b:c0:37:f3:eb:58:03:d1:6b:38:ea:1b:20:b1:
                    69:8f:77:45:33:4c:43:3e:b7:2d:fd:e4:45:03:00:
                    db:92:7f:88:e9:e9:5f:2b:81:a3:f0:a0:40:be:8b:
                    bf:b4:ef:f6:0a:6d:27:74:29:7c:ef:c6:50:2e:bc:
                    5e:e7:d8:9e:f5:82:e3:d2:bf:f4:dd:9d:0b:f2:e3:
                    94:fe:de:7b:ff:4d:87:ff:16:ca:b7:59:c3:46:25:
                    fd:12:5f:c8:7d:b1:08:69:ee:ea:85:53:93:99:e3:
                    3b:85:3b:2e:a8:86:3e:be:26:13:28:55:77:9e:a3:
                    0b:72:8f:fa:e8:0f:85:12:16:b9:b7:d3:ac:f2:c5:
                    0c:76:42:91:9c:9e:10:35:a2:f8:d4:2b:54:76:14:
                    7d:98:19:e9:9c:53:ca:34:23:ea:da:92:4a:3b:99:
                    37:5e:fc:6d:fe:32:45:57:07:cc:f0:37:65:df:63:
                    20:5b:38:3d:ab:98:b1:08:6b:c3:74:ad:35:c9:4e:
                    4f:0d:4d:29:aa:8e:3d:db:6c:8d:d8:f8:19:16:0a:
                    57:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:FD:D8:51:E1:BD:72:10:0A:65:49:02:4E:5B:BD:BE:56:87:06:96
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/6_3YUeG9chAKZUkCTlu9vlaHBpY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.92.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9a:b9:69:2d:ac:20:ba:86:54:4f:1d:77:a2:c5:db:6e:7e:69:
         73:4a:f7:53:eb:8e:6d:65:ae:0d:2a:3e:f6:6c:46:23:a6:b6:
         84:85:2b:87:ea:f6:68:a5:66:41:81:3c:e9:31:0a:eb:98:fe:
         f7:4e:22:bd:ab:10:33:32:51:75:66:9a:7b:6a:a8:75:8e:28:
         0f:1e:5e:e4:6d:f1:87:47:98:cc:fb:5b:a4:bc:c5:0e:f9:33:
         0c:31:bf:75:0e:10:54:7e:e2:f2:ef:d3:3e:a0:7f:ec:98:23:
         c0:26:3c:16:83:3b:59:0c:95:da:60:3b:b8:4c:3b:3f:29:7c:
         bb:5c:07:23:ea:91:a7:65:61:53:87:79:6b:e3:a2:e6:2d:af:
         92:23:71:83:3a:01:26:f3:ff:83:a4:4c:87:c6:88:c5:fe:fd:
         3f:c4:e7:31:1c:22:e5:e0:5b:80:60:1b:ac:42:92:11:c1:93:
         89:0a:44:98:b1:cf:d5:14:81:4b:17:a0:8d:e6:7c:bb:da:7a:
         75:1a:26:f3:ba:b6:5c:a7:f7:fe:30:94:5a:dd:81:07:b1:f8:
         dd:56:9d:b5:95:37:12:2c:3a:19:15:12:af:c6:1a:43:42:72:
         10:59:aa:6d:15:53:28:ad:66:42:ac:2b:13:14:85:ce:aa:8d:
         93:64:b4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org