Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/7Riv4dwENcY_XqQhOSSYUyHJWUQ.roa
File:                     7Riv4dwENcY_XqQhOSSYUyHJWUQ.roa (raw, json)
Hash identifier:          Sc7Gb1anwQ7lu0APnJaytmb0sRRPzlk1QehLwe3BOno=
Subject key identifier:   ED:18:AF:E1:DC:04:35:C6:3F:5E:A4:21:39:24:98:53:21:C9:59:44
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0180
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/7Riv4dwENcY_XqQhOSSYUyHJWUQ.roa
Signing time:             Mon 01 May 2023 01:28:51 +0000
ROA not before:           Mon 01 May 2023 01:28:51 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        59.129.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 384 (0x180)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:28:51 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=ED18AFE1DC0435C63F5EA4213924985321C95944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:05:be:b4:6c:ea:aa:a6:39:a6:75:6e:98:17:
                    2c:b9:e4:84:d1:3f:83:05:57:0f:fd:52:75:da:e1:
                    3f:4e:79:5d:a3:37:2b:fa:08:35:20:c5:5d:8d:c6:
                    4e:61:2a:65:ef:ac:0d:84:30:c5:f4:1b:cb:56:5f:
                    84:77:c6:b9:98:02:9a:36:45:44:fd:2b:20:af:ef:
                    d8:e8:7b:c2:dc:e6:60:bc:99:3b:e4:4c:a4:7d:e2:
                    72:bb:af:69:8b:4d:eb:b6:72:82:9c:45:c3:ae:de:
                    35:37:8b:01:7e:86:26:43:6c:37:c6:71:62:65:b7:
                    8b:dc:8c:d3:8c:0c:b0:3b:ee:3f:09:b2:a0:d6:6e:
                    7e:58:ec:5a:76:03:d2:f0:86:dd:b6:e7:8f:b2:c1:
                    ab:c6:bd:6f:a3:81:69:a8:20:55:9f:e6:f2:36:86:
                    c3:57:a5:f2:dc:fa:7e:d8:52:24:5f:ef:73:ff:a0:
                    fc:cf:e7:5d:83:9c:fb:9c:e1:cb:d5:9c:bb:37:f3:
                    39:2e:c6:c6:5a:6f:bc:e1:c3:e1:ac:0e:3a:b2:7a:
                    f7:0e:3b:b7:dd:21:a1:29:47:c0:74:9c:8c:00:6c:
                    3c:b0:11:f6:37:26:03:31:ba:98:b6:34:56:7e:db:
                    29:1a:15:af:fd:f2:12:f6:16:98:2e:5a:a8:64:7a:
                    14:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:18:AF:E1:DC:04:35:C6:3F:5E:A4:21:39:24:98:53:21:C9:59:44
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/7Riv4dwENcY_XqQhOSSYUyHJWUQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.129.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1b:f2:1c:42:91:c7:07:b0:94:a1:ce:e7:b4:dc:76:f5:c1:3e:
         d2:62:c3:46:ee:ea:29:a0:f6:13:aa:81:6a:b7:8b:b6:64:e5:
         24:ab:68:a1:9f:c2:26:29:08:7b:d6:59:04:c6:ea:f3:30:1d:
         e1:98:34:96:bd:d4:ae:7e:ba:61:07:d1:a0:76:01:34:da:ec:
         3a:c5:be:04:bc:6a:b1:4e:b9:04:1b:21:19:c3:98:6b:fa:9f:
         7a:85:6f:1e:f9:f7:a5:3c:b3:ab:10:c0:52:df:1f:5d:53:3f:
         70:f4:89:cb:bb:30:b9:7a:e5:71:96:0b:44:27:7e:6f:74:f8:
         e7:18:10:23:cf:f5:0d:cb:4e:7c:0f:49:6f:47:3e:1c:14:95:
         7a:4c:b3:d7:b4:6a:8c:42:12:77:6e:e7:19:ac:68:7d:58:87:
         27:de:9a:73:a4:1a:b5:06:db:f0:f0:ea:cf:d0:bb:93:4a:b6:
         e6:2a:82:25:2d:dc:3f:c7:82:b3:df:92:a2:06:a1:46:8a:8e:
         b3:a3:1d:a7:56:5f:72:93:38:9a:6f:c5:10:be:ee:31:23:b7:
         ff:26:cd:0d:1d:49:1a:13:71:5b:bb:b7:49:b2:f8:d1:eb:8f:
         9a:95:4c:7c:2d:d5:df:2e:e7:f9:b3:e0:f4:2c:2a:1e:47:f4:
         45:49:37:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org