Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/8e0Gh-1gnEKeXW0ESpgzigMcKds.roa
File:                     8e0Gh-1gnEKeXW0ESpgzigMcKds.roa (raw, json)
Hash identifier:          hM3YViLFH2GrM14I7CyMU3as3wSOHIYWf0NAOJUxEuk=
Subject key identifier:   F1:ED:06:87:ED:60:9C:42:9E:5D:6D:04:4A:98:33:8A:03:1C:29:DB
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       01FA
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/8e0Gh-1gnEKeXW0ESpgzigMcKds.roa
Signing time:             Mon 01 May 2023 01:35:41 +0000
ROA not before:           Mon 01 May 2023 01:35:41 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        182.248.0.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 506 (0x1fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:35:41 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=F1ED0687ED609C429E5D6D044A98338A031C29DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:19:4b:0b:a5:8d:1d:38:6f:3d:0b:ab:e0:61:
                    79:65:13:a6:a0:44:d5:5e:ac:69:75:bb:32:cf:58:
                    85:84:4e:26:58:e1:0b:c6:cb:0e:ca:ba:e0:98:5e:
                    39:4a:0d:a7:b2:d6:d2:80:97:6e:1f:d9:5c:95:70:
                    0a:6d:cb:b1:a4:fb:65:9c:9a:5a:e9:c4:b3:8d:7a:
                    8c:2e:22:b6:37:cc:35:90:f5:47:68:ab:6a:f8:8b:
                    6e:e0:01:13:cc:74:97:08:4c:3e:c5:20:67:e2:0e:
                    8b:3a:94:dd:41:03:87:ba:12:3f:5f:3f:8c:10:54:
                    a9:00:97:4c:a7:7e:95:77:92:ae:77:10:fb:f6:dd:
                    50:a6:ad:bd:72:99:29:00:7d:ea:2d:9c:f5:bb:bb:
                    36:2e:8e:7f:4d:31:3c:ce:cf:d7:63:a8:f5:2c:14:
                    36:4c:a7:b0:0a:11:76:f4:0d:a2:bd:ee:9e:2d:e5:
                    8d:9b:85:d0:0a:06:a3:2c:10:f9:a7:cd:c0:41:48:
                    78:5c:ac:1f:44:eb:04:d4:6e:6e:e7:8f:54:34:d6:
                    d0:e7:ed:9d:4a:36:3d:53:64:10:1c:80:25:c7:ed:
                    f4:37:73:68:71:6a:4c:a8:d7:56:fc:c9:a6:00:c2:
                    2c:3c:3f:c1:98:51:57:4b:02:15:dc:63:32:59:b2:
                    87:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:ED:06:87:ED:60:9C:42:9E:5D:6D:04:4A:98:33:8A:03:1C:29:DB
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/8e0Gh-1gnEKeXW0ESpgzigMcKds.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.248.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         10:28:d2:05:b1:47:cf:99:81:e6:5d:61:39:8d:ec:78:bc:7e:
         23:68:f5:bb:44:72:ed:a9:19:21:a3:fe:16:3f:88:21:7f:ea:
         46:4a:71:35:94:70:85:a9:c9:79:4c:63:e8:b6:b3:8b:8b:54:
         99:39:60:f5:96:b4:3d:6b:eb:ad:8d:c6:4f:f5:aa:0c:0e:58:
         73:b8:97:40:00:3c:51:33:75:94:0f:9a:d3:32:69:6f:16:48:
         f0:75:25:a5:8e:cd:67:00:0e:51:3c:2f:3f:69:ff:ef:2c:85:
         55:d9:e7:6b:90:27:66:88:17:17:af:74:1d:69:05:5c:c8:1a:
         42:0f:7b:ce:f2:9d:57:86:45:02:ac:4b:88:1b:11:d6:cf:f3:
         f3:ff:f8:45:34:a2:ab:60:50:33:68:3c:73:fd:73:75:20:94:
         b5:ce:6d:3b:06:33:86:3b:06:02:46:1f:a3:01:0b:d8:b8:37:
         f3:79:70:1e:89:f6:8a:80:64:93:dd:40:74:88:d3:a6:e2:c8:
         00:e7:ec:51:05:49:e5:bc:0b:7b:85:3b:14:ee:d2:c2:8a:c0:
         68:d2:5b:17:e2:d5:5d:76:ff:dc:68:0f:6c:77:2a:1c:f3:3f:
         37:cd:03:e5:2f:16:70:93:9f:60:79:a1:a2:f1:aa:e5:67:1d:
         08:dd:ce:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org