Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/7HqXmdbxKA-pDheiR9QTXQUTNaU.roa
File:                     7HqXmdbxKA-pDheiR9QTXQUTNaU.roa (raw, json)
Hash identifier:          6v6XVBcrU7N2DBxCUjlfzbH1BVhfsAFPcxp+pxMFJ9U=
Subject key identifier:   EC:7A:97:99:D6:F1:28:0F:A9:0E:17:A2:47:D4:13:5D:05:13:35:A5
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       01BE
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/7HqXmdbxKA-pDheiR9QTXQUTNaU.roa
Signing time:             Mon 01 May 2023 01:32:10 +0000
ROA not before:           Mon 01 May 2023 01:32:10 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        111.97.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 446 (0x1be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:32:10 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=EC7A9799D6F1280FA90E17A247D4135D051335A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:23:5d:3c:41:31:90:b5:6e:e7:5f:4c:bf:0e:
                    85:80:f6:4b:59:4d:90:05:37:be:ac:f9:10:1f:02:
                    5f:6f:db:72:0c:0b:b7:79:ef:f8:fb:f8:7a:cd:f7:
                    96:39:ec:00:63:39:cd:51:84:ab:c3:b0:06:cd:b8:
                    7c:7d:8d:ea:4c:36:09:be:d7:7b:05:de:19:2f:a3:
                    07:be:5d:13:6f:5f:cc:3d:83:28:78:8b:f3:81:ba:
                    d0:ec:cd:e1:dd:4f:68:41:33:ff:ce:65:78:dc:74:
                    30:d7:18:c7:a3:22:d1:80:c3:e0:c0:e0:6d:84:6e:
                    e8:c9:12:f8:07:02:ac:44:73:a5:b4:3d:ca:f7:6b:
                    70:90:79:76:32:9e:f0:99:2e:cd:be:34:d1:ca:0d:
                    01:78:38:fa:57:9c:51:94:d9:35:28:33:b2:68:2d:
                    e8:90:87:aa:bc:72:13:e2:2b:fb:ff:e1:7a:5f:30:
                    27:86:1d:35:b4:7f:4c:3b:89:73:79:f9:32:ff:ca:
                    36:ed:63:97:63:9b:15:ff:e0:49:be:3f:9d:d7:c3:
                    9f:9f:70:38:5f:16:2f:76:55:1f:fc:41:5a:e9:52:
                    9a:f1:77:14:87:fb:aa:8d:a1:39:7d:68:1d:09:8b:
                    bd:3e:b5:f5:a2:b3:53:ea:7c:d3:6e:6c:0e:49:8e:
                    de:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:7A:97:99:D6:F1:28:0F:A9:0E:17:A2:47:D4:13:5D:05:13:35:A5
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/7HqXmdbxKA-pDheiR9QTXQUTNaU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.97.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         04:d8:26:ef:6b:6b:31:3b:bd:c6:4b:fd:65:74:07:46:c1:d7:
         31:c1:3f:70:98:3d:c4:64:01:09:07:37:e8:68:20:b9:82:fc:
         9b:c5:51:69:f9:49:ed:30:ed:99:89:b6:9c:27:79:b7:58:24:
         0d:61:a5:e7:bc:2f:48:63:24:a5:2e:ff:d2:87:24:26:b5:f6:
         4e:a3:3e:6d:71:26:97:3a:e9:1a:f9:39:09:74:fa:a2:df:ab:
         74:8c:e3:59:59:37:31:40:5d:9a:59:18:7a:f4:df:e4:e4:93:
         aa:45:79:0e:0e:c9:0f:d0:e9:5c:0b:84:31:22:96:aa:df:dd:
         58:21:c6:03:e9:a3:26:3d:11:3b:0c:95:fa:ca:79:e2:41:a9:
         db:c4:67:70:25:86:1c:ec:0b:68:e6:d0:a2:db:3d:00:f0:ba:
         09:12:05:71:a2:c0:9e:ca:6c:b2:57:d0:86:27:83:39:14:60:
         41:a9:4d:d3:18:eb:b1:52:e9:fa:06:bb:80:34:55:cf:e6:e6:
         70:ab:63:60:6e:cf:40:38:10:20:61:ca:c5:33:b3:4c:cb:c7:
         ba:9d:4e:55:bb:52:48:f3:97:ab:82:79:0c:ed:52:65:7b:d1:
         9a:29:9f:56:47:7a:66:85:70:a4:63:79:90:31:4d:52:6d:94:
         f1:44:f3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org