Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/8jXVC3B7nuL2rgWqrEpiKrI1UXQ.roa
File:                     8jXVC3B7nuL2rgWqrEpiKrI1UXQ.roa (raw, json)
Hash identifier:          85mmm1TNBFXM8ugXqki8nD6LTQ9yx5E0A42ObblVynw=
Subject key identifier:   F2:35:D5:0B:70:7B:9E:E2:F6:AE:05:AA:AC:4A:62:2A:B2:35:51:74
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       6E
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/8jXVC3B7nuL2rgWqrEpiKrI1UXQ.roa
Signing time:             Tue 07 Jun 2022 10:07:17 +0000
ROA not before:           Tue 07 Jun 2022 10:07:17 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        121.106.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:07:17 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=F235D50B707B9EE2F6AE05AAAC4A622AB2355174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a1:d7:4a:8f:86:3a:9c:aa:d0:3e:fe:1f:26:
                    08:d9:86:93:fc:67:5b:65:d3:1c:d1:53:60:57:18:
                    88:93:a3:b4:63:b4:43:df:95:d8:ac:45:71:d0:b1:
                    d9:c8:a6:d2:de:26:bd:68:6a:cd:34:93:13:61:a7:
                    fb:fd:2b:67:c2:f5:36:7d:57:d8:5e:f3:e0:5b:0b:
                    d9:59:47:d8:18:55:c1:d4:ea:90:b7:3a:d0:4e:cd:
                    12:6a:d5:96:50:a5:c6:73:7f:23:8a:93:dd:54:47:
                    45:2c:ff:d6:88:5c:5f:55:9a:85:40:f2:3d:8c:55:
                    05:5a:51:ec:d6:1b:69:a1:5f:23:78:33:0e:be:99:
                    ec:92:30:66:5a:fd:be:00:5f:be:31:17:d7:e5:14:
                    08:af:30:13:ab:51:2a:6e:b2:31:0e:87:42:dd:78:
                    31:8d:dd:5d:f8:12:47:e4:19:46:7e:89:cb:f5:e9:
                    5e:f0:79:90:83:13:b5:5c:87:ed:ff:04:c2:30:03:
                    c6:93:9b:92:0a:07:32:22:72:a5:e0:38:fd:3c:df:
                    70:3b:a0:4e:d9:b7:b2:ab:5e:d5:fc:57:43:36:7e:
                    5b:44:99:5d:b1:d8:8f:a3:45:2c:09:ce:a9:90:46:
                    48:e3:c8:f9:1b:52:c4:a8:5d:fd:ee:c5:d1:c8:0b:
                    1c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:35:D5:0B:70:7B:9E:E2:F6:AE:05:AA:AC:4A:62:2A:B2:35:51:74
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/8jXVC3B7nuL2rgWqrEpiKrI1UXQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.106.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         15:77:44:05:b3:98:68:23:ce:b0:4d:8d:4e:f9:d4:c6:1c:7f:
         fa:23:42:66:ae:9b:05:29:51:45:37:cf:73:20:f3:ae:5e:c3:
         aa:45:0b:60:db:5d:5a:f8:24:b6:24:2d:08:b5:8e:3f:79:27:
         b3:c0:c7:56:db:3d:0d:51:b1:a4:82:e4:3a:81:57:5d:2e:89:
         7c:6f:02:b2:fa:a1:91:44:ef:f7:39:5c:88:92:8b:c4:44:0d:
         76:a6:1d:e3:ee:53:47:66:86:6a:34:d3:01:81:ea:a8:1b:1c:
         7f:b0:3e:88:ed:63:65:da:a1:f3:c6:cf:d7:96:9f:80:5d:d4:
         db:fa:44:5b:37:53:0f:24:df:e2:c8:87:9b:f6:f2:c7:11:9b:
         d2:34:99:f7:97:57:d1:eb:cf:bb:a7:48:d1:a2:82:c8:95:4e:
         64:f8:c5:44:56:d6:8b:47:2f:0f:31:77:ed:9f:66:ee:e8:b2:
         46:93:36:a6:72:db:90:08:ef:f6:d0:8c:f4:3d:2b:4d:08:53:
         b0:5e:86:9d:5d:91:23:20:ce:7b:be:08:c5:e1:ba:23:81:a3:
         35:a2:9f:6a:d4:09:9e:56:2e:69:11:ca:f1:14:92:c0:9e:38:
         10:f9:ec:c2:8e:b4:46:1d:57:47:19:12:50:af:6f:4b:38:5f:
         54:f7:a2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org