Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/8DyAG-y0ROZ5pyaOXOoDDugvD0w.roa
File:                     8DyAG-y0ROZ5pyaOXOoDDugvD0w.roa (raw, json)
Hash identifier:          h1KDYXXZWbuyVvoZZ2OZrK/T6fMi5f3MlZNPz4G6KBA=
Subject key identifier:   F0:3C:80:1B:EC:B4:44:E6:79:A7:26:8E:5C:EA:03:0E:E8:2F:0F:4C
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       01D6
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/8DyAG-y0ROZ5pyaOXOoDDugvD0w.roa
Signing time:             Mon 01 May 2023 01:33:38 +0000
ROA not before:           Mon 01 May 2023 01:33:38 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        222.14.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 470 (0x1d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:33:38 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=F03C801BECB444E679A7268E5CEA030EE82F0F4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d7:ef:c2:26:76:80:7f:b2:32:20:b0:62:78:
                    70:3a:ae:72:b9:95:fd:30:97:33:16:04:28:16:e3:
                    61:36:57:48:ef:38:32:56:a1:1b:03:39:a2:7b:54:
                    20:48:ca:f0:10:92:e3:3a:96:a9:67:2c:ca:f2:1d:
                    a9:3e:21:da:20:60:d6:58:b4:3f:71:72:12:6a:a6:
                    32:48:24:e4:16:b4:d6:13:13:50:20:56:f2:1a:d5:
                    0a:7a:e4:2c:11:1b:b5:35:a6:fd:78:28:83:bd:7b:
                    59:44:72:7d:9e:41:22:57:22:b4:27:a6:69:08:ea:
                    47:f6:83:45:5a:b6:dc:61:f0:aa:a4:62:30:0d:b9:
                    c7:52:e0:70:f8:7e:69:63:43:dc:37:08:80:0d:5c:
                    26:4f:5a:1e:33:f8:3e:8d:41:3c:2a:dc:a9:ac:94:
                    03:85:33:06:1b:6d:ab:d5:93:2a:cd:db:4b:53:43:
                    11:76:cb:80:bd:d4:8a:1b:8e:21:03:c7:a2:0a:c7:
                    7c:bb:d2:be:50:f8:24:5d:51:a4:64:cc:96:05:b1:
                    61:44:b1:32:66:68:58:58:40:13:68:9e:f7:4b:6e:
                    bf:79:3f:d8:3c:8d:24:54:9d:85:c6:64:c4:57:97:
                    72:8f:c4:5d:f2:fb:35:34:2c:45:16:41:cc:cd:0b:
                    34:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:3C:80:1B:EC:B4:44:E6:79:A7:26:8E:5C:EA:03:0E:E8:2F:0F:4C
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/8DyAG-y0ROZ5pyaOXOoDDugvD0w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.14.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         23:91:1c:5f:fe:fb:f6:75:2c:1b:99:36:4f:bb:2c:66:a4:3f:
         af:e8:e8:c9:d8:00:19:fc:23:e6:e8:b2:92:99:bc:f0:96:f6:
         72:3a:36:1f:3e:74:4a:7c:4b:d0:87:7f:f9:7d:7b:2b:92:27:
         98:c9:96:f5:a4:72:ee:5c:69:f0:e9:be:28:43:f4:dd:a4:a8:
         42:23:48:d0:62:97:58:2c:c0:ec:37:02:bd:ed:c1:f5:ed:87:
         be:ae:2e:d0:68:ac:43:c0:ec:8f:b4:53:5f:4a:ce:f1:0c:f1:
         c2:9e:b7:21:37:b6:8a:a6:6c:be:ad:70:48:bf:71:44:d9:10:
         7c:d1:84:51:55:22:1c:c8:3e:aa:f2:ca:9e:c4:7d:28:6b:5b:
         07:9c:16:2c:e4:aa:7d:2f:78:ab:14:fa:30:de:5b:27:b7:12:
         bf:f0:87:5b:26:7e:ca:09:50:cf:a4:71:34:b8:58:a8:a0:09:
         d2:ed:bd:c6:cb:97:8b:35:c3:0e:7c:6d:ff:47:c4:2d:d4:ca:
         da:1c:ef:16:27:70:85:9c:38:7f:38:ef:f0:0c:95:67:21:ba:
         7e:f3:88:e4:a2:bd:ee:ee:3d:6b:c8:05:66:87:bb:81:37:91:
         9a:d8:48:75:71:ae:0a:12:b7:73:d1:88:bf:da:20:6c:74:fa:
         a7:e3:e7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org