Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/7GxnqSqOv7TUud53NKfOCUSFqSI.roa
File:                     7GxnqSqOv7TUud53NKfOCUSFqSI.roa (raw, json)
Hash identifier:          l0EvKJcLsScOiqtTmfJ9fepPvQWOlUdxx/zG2H/Zo4w=
Subject key identifier:   EC:6C:67:A9:2A:8E:BF:B4:D4:B9:DE:77:34:A7:CE:09:44:85:A9:22
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       F4
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/7GxnqSqOv7TUud53NKfOCUSFqSI.roa
Signing time:             Tue 14 Jun 2022 09:34:04 +0000
ROA not before:           Tue 14 Jun 2022 09:34:04 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        203.181.96.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244 (0xf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun 14 09:34:04 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=EC6C67A92A8EBFB4D4B9DE7734A7CE094485A922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:05:bd:12:50:38:7e:0f:e6:e6:8d:63:5c:13:
                    72:46:dd:a8:a4:b2:2d:0c:82:51:76:46:ad:6f:b4:
                    8a:f3:7d:b7:2b:d8:91:58:10:7b:58:a6:60:81:09:
                    6e:8d:bb:77:6c:10:8f:b1:d7:bb:0c:ba:38:47:88:
                    43:b6:b5:9f:2b:09:2f:ca:3b:1c:12:32:f4:09:84:
                    be:8b:e3:72:f2:88:61:87:c6:13:88:c9:9a:74:76:
                    62:51:ee:2f:87:4c:d4:77:4c:38:59:17:be:98:b0:
                    1c:de:7b:e3:bf:52:60:5e:01:9a:dc:ca:0c:ca:61:
                    59:5d:67:0e:00:37:cc:b1:5e:ce:d5:73:08:57:8a:
                    ad:17:fa:15:05:3d:39:b0:1b:ad:17:c6:ba:1c:2c:
                    85:11:0c:11:21:61:17:57:32:2c:52:e9:6c:7f:4a:
                    32:4a:c4:31:0d:79:83:71:09:79:cc:80:77:24:d6:
                    23:cb:99:6c:b2:04:e9:6e:a4:42:9d:3c:32:c4:e5:
                    2a:ed:76:8c:e2:83:b7:d8:fb:dc:13:e4:7b:e0:1c:
                    94:e6:ba:9c:25:e9:3b:2d:3d:a6:81:69:f2:4c:35:
                    9d:eb:f1:71:8b:0b:02:e8:53:ab:76:37:00:40:b2:
                    b5:21:74:af:78:67:b0:de:3e:8e:b5:ef:ac:c8:84:
                    41:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:6C:67:A9:2A:8E:BF:B4:D4:B9:DE:77:34:A7:CE:09:44:85:A9:22
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/7GxnqSqOv7TUud53NKfOCUSFqSI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.181.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         67:54:33:1d:74:eb:7e:48:82:5d:66:67:65:ce:70:02:a2:49:
         21:25:b4:a3:37:62:46:b5:2c:cc:6f:91:7e:fa:2a:d9:1f:a8:
         ec:e4:2f:39:cf:df:4e:91:4d:61:c8:e7:26:bf:54:cd:ec:d4:
         f6:68:8f:46:1c:e5:92:37:16:5b:be:78:a0:ca:1a:9f:39:af:
         11:f1:c8:50:77:70:b0:14:51:de:c9:13:6e:7f:e4:d4:9e:af:
         e7:46:60:da:58:a7:dd:7c:dd:db:a3:03:7e:20:9f:92:eb:4f:
         ba:37:97:37:6e:9a:a2:9a:c9:44:08:f1:3c:84:67:be:80:14:
         b4:c5:9a:20:03:6e:ef:81:80:ca:ae:aa:95:32:f3:85:53:e3:
         c2:1d:2f:c3:6d:32:bd:6d:ea:54:68:93:08:46:bc:8d:50:d6:
         ed:42:33:e9:00:d8:70:96:3f:e4:1c:98:21:0d:ae:03:e0:a4:
         5b:fb:99:60:1e:0f:62:5a:4e:2e:3a:60:f6:a6:0a:06:52:7a:
         32:64:29:be:6f:fa:75:f8:bf:87:dd:96:94:e9:7d:53:11:49:
         74:e9:d5:73:c1:67:96:f2:28:c8:dc:40:9e:c5:91:7f:e7:20:
         3b:fc:75:a8:5b:22:4f:74:f1:62:80:72:f1:51:71:4e:13:eb:
         3d:0e:79:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org