Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/6r0UvGG1DjqnKAAsmV6Ic4tn9Yg.roa
File:                     6r0UvGG1DjqnKAAsmV6Ic4tn9Yg.roa (raw, json)
Hash identifier:          gL4+5EIBdENO44tG358XmJnBzx+uGYJK7YRz4cwUGaE=
Subject key identifier:   EA:BD:14:BC:61:B5:0E:3A:A7:28:00:2C:99:5E:88:73:8B:67:F5:88
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0109
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/6r0UvGG1DjqnKAAsmV6Ic4tn9Yg.roa
Signing time:             Tue 14 Jun 2022 10:08:27 +0000
ROA not before:           Tue 14 Jun 2022 10:08:27 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        106.185.128.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 265 (0x109)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun 14 10:08:27 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=EABD14BC61B50E3AA728002C995E88738B67F588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cc:d9:b8:f9:82:22:86:fc:97:95:b3:48:f9:
                    2b:a8:86:40:12:7c:4c:19:ae:ac:3c:37:75:8e:18:
                    1f:b2:a9:99:62:70:9a:6e:7f:b5:3f:0e:44:2a:f4:
                    19:40:98:d1:1a:20:60:cf:54:74:92:c7:14:1e:c1:
                    2e:d5:e9:01:de:d2:41:0c:b0:4a:54:23:c5:71:f6:
                    ad:69:49:41:3e:92:4f:be:be:e2:d1:cb:2a:6e:c9:
                    7a:0e:62:9e:c6:f8:38:b1:f9:bc:64:97:8e:45:ab:
                    0c:77:ea:a5:a2:11:61:39:3f:a3:1e:38:44:b9:27:
                    aa:ac:8f:e8:78:89:21:17:a0:98:71:38:70:69:d5:
                    99:e8:3d:f9:98:58:65:8b:6b:59:bb:de:d9:53:19:
                    ac:9f:8e:e4:6f:89:aa:ac:c7:76:79:b6:49:99:72:
                    07:da:65:78:14:c9:ea:d0:f2:2e:0e:13:dd:d3:35:
                    97:12:86:7c:3b:f9:2e:81:3e:2d:e3:bb:13:91:01:
                    b1:16:53:9a:9b:71:16:0b:4a:a1:96:dc:75:be:e4:
                    94:a5:84:3d:e8:e6:de:c6:5f:fb:55:c5:c6:9e:ac:
                    63:a5:c0:81:3a:e0:fe:9c:e1:9d:b2:f3:5c:ba:af:
                    44:05:f1:fe:3e:c1:22:8a:c2:7f:40:e5:7a:47:8b:
                    6b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:BD:14:BC:61:B5:0E:3A:A7:28:00:2C:99:5E:88:73:8B:67:F5:88
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/6r0UvGG1DjqnKAAsmV6Ic4tn9Yg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.185.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         24:0d:d0:89:85:71:c4:75:ab:89:17:d2:ff:d8:6e:d3:cc:62:
         53:57:53:6c:cd:b8:42:66:c7:7d:b2:d6:e8:1e:74:48:5e:01:
         89:ae:33:02:cc:3b:24:6f:30:dd:58:f8:cc:6b:70:fa:c9:aa:
         d0:2a:5f:ee:bf:15:5b:cc:13:37:f5:8d:2e:ba:75:f0:87:d6:
         e9:d8:cb:bf:75:d5:db:49:29:94:e0:14:9e:3a:e7:ef:e1:ad:
         1a:10:9c:c5:d6:cf:b7:82:58:9e:03:93:d0:1c:d7:42:23:90:
         3d:7a:4c:ab:5a:9d:07:a3:8c:61:0b:0e:eb:e0:f5:69:24:c7:
         af:78:ba:d0:e6:ed:68:59:98:40:2f:9c:cc:70:20:b2:b5:2c:
         a8:5c:d8:50:35:14:01:69:98:14:25:7e:28:8c:40:4d:a8:e1:
         4a:e1:70:a9:4c:bd:95:33:49:c8:22:16:63:41:5c:05:46:57:
         22:a0:91:b2:d5:81:c0:1f:2d:e9:38:61:59:90:f1:87:de:a1:
         cc:04:23:f9:a1:a4:25:79:cc:33:6d:05:a0:3d:f2:c6:3c:3d:
         80:c3:c5:3d:22:2d:08:87:d5:ea:14:3f:03:a0:4e:4f:36:2f:
         5f:44:32:aa:a8:62:c8:9d:7c:62:26:a5:04:cc:79:42:6b:6b:
         a7:f3:3d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org