Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/8hzFyBG2LCPu7Pm1vEfb5-vWJC4.roa
File:                     8hzFyBG2LCPu7Pm1vEfb5-vWJC4.roa (raw, json)
Hash identifier:          r995W8o/3UFfdZ6et18UOSpzVuw6R79+I6l3WRhp/48=
Subject key identifier:   F2:1C:C5:C8:11:B6:2C:23:EE:EC:F9:B5:BC:47:DB:E7:EB:D6:24:2E
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       01C4
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/8hzFyBG2LCPu7Pm1vEfb5-vWJC4.roa
Signing time:             Mon 01 May 2023 01:32:13 +0000
ROA not before:           Mon 01 May 2023 01:32:13 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        111.100.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 452 (0x1c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:32:13 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=F21CC5C811B62C23EEECF9B5BC47DBE7EBD6242E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:00:9a:0b:1a:46:ae:e5:c3:5d:de:b2:88:d5:
                    b8:58:66:3c:2c:3a:85:e4:b7:4f:46:9f:6b:47:d6:
                    7b:61:f4:77:b1:5c:8f:e5:fe:2e:3d:45:22:d2:90:
                    bd:6d:e1:f8:d8:d9:36:c3:57:ca:04:c5:a3:e4:31:
                    27:6f:1d:e0:73:f8:2a:e4:64:c1:97:4c:ee:39:4c:
                    46:e3:cc:a6:12:74:c5:e3:6d:1f:ae:97:ea:58:80:
                    0b:5a:b5:aa:4f:43:13:ab:83:ae:99:9e:e3:6f:41:
                    d5:e0:ea:d5:52:b2:aa:3e:be:4f:68:4f:d7:fc:3c:
                    70:0f:66:df:ac:4b:6e:b4:b1:d9:51:0c:c1:c9:43:
                    20:97:c2:10:29:52:70:27:a3:21:a9:6e:5c:b5:7a:
                    1f:3c:20:8c:3d:39:41:20:a9:96:92:05:49:08:d5:
                    2d:9f:94:6b:37:aa:0c:28:84:cc:88:00:13:2a:87:
                    bf:27:e8:54:ca:28:4d:42:f1:24:5c:88:ee:b4:03:
                    3a:46:07:e3:44:dd:c6:3c:99:f9:81:4f:8e:2a:18:
                    2d:dc:c9:94:11:dc:ae:09:41:70:38:1f:fc:37:db:
                    a3:61:02:e4:3c:67:3c:67:c7:00:9b:b4:6d:fc:d3:
                    81:f8:23:48:72:f5:58:1c:b0:27:b9:01:dc:72:ee:
                    a6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:1C:C5:C8:11:B6:2C:23:EE:EC:F9:B5:BC:47:DB:E7:EB:D6:24:2E
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/8hzFyBG2LCPu7Pm1vEfb5-vWJC4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.100.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3e:35:87:a3:a0:93:c0:37:b2:bf:f7:59:e8:06:8e:0e:2f:de:
         34:c5:31:51:dd:1e:a4:70:48:97:07:c5:15:34:c6:4c:df:e4:
         08:d4:42:f4:87:3a:7d:74:79:51:12:be:6e:07:80:ce:89:54:
         49:5e:69:45:b1:59:f8:12:f2:28:dd:3a:24:7c:3f:af:a5:50:
         a7:ad:ec:c4:f8:d0:92:88:d3:1f:f1:7b:fa:7b:17:53:42:e1:
         25:04:4a:01:b9:6f:13:1b:c5:0a:93:c3:b5:44:e0:36:22:7d:
         97:e5:dd:dc:f0:2f:f8:be:d0:57:20:3c:a7:05:4c:6c:4d:f1:
         3e:f0:14:7a:97:e0:93:34:27:e7:98:2f:1e:ac:72:40:32:ee:
         f0:19:fd:49:ae:0b:40:fd:e5:24:3b:34:87:60:2c:c2:07:7e:
         17:68:60:de:58:6e:21:02:f1:ca:2b:df:67:9d:1b:31:7a:4b:
         f9:49:d8:df:48:41:32:a2:cc:8b:c6:ed:33:56:cc:a8:06:13:
         66:ff:db:d1:db:e1:e3:c8:2a:a0:6e:cb:07:ef:27:bd:69:32:
         ed:61:5d:ff:06:bd:40:c1:03:08:a4:b1:8a:be:e8:a6:c6:af:
         76:65:68:0f:cf:04:15:e2:49:ba:4f:7b:99:a5:2c:d2:69:24:
         6f:4b:f9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org