Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/8qretZKdP3tvySbjcMdF9qRgcxc.roa
File:                     8qretZKdP3tvySbjcMdF9qRgcxc.roa (raw, json)
Hash identifier:          NbIanSSL8ZsS2aLOOjKvPswMaJrPYoHRmfyQUBmBNS4=
Subject key identifier:   F2:AA:DE:B5:92:9D:3F:7B:6F:C9:26:E3:70:C7:45:F6:A4:60:73:17
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       D5
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/8qretZKdP3tvySbjcMdF9qRgcxc.roa
Signing time:             Tue 14 Jun 2022 09:30:08 +0000
ROA not before:           Tue 14 Jun 2022 09:30:08 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        113.152.64.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 213 (0xd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun 14 09:30:08 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=F2AADEB5929D3F7B6FC926E370C745F6A4607317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e2:a0:24:bb:96:81:7b:36:e4:6d:ac:8e:51:
                    b6:62:dd:a3:b6:3f:84:b2:fa:f6:4e:5b:0f:79:4f:
                    e9:c7:28:09:be:cb:46:c9:a3:f1:45:2e:27:6d:c2:
                    d4:c4:89:0b:f0:90:ba:5c:21:85:9b:80:9f:41:3e:
                    bb:84:1a:a9:03:15:30:47:a9:97:d1:1c:03:56:fa:
                    f3:64:23:c5:b4:84:b9:8f:d6:ab:9e:e5:36:41:23:
                    c8:43:16:2f:49:4c:71:29:1b:a3:84:d2:f8:6a:ed:
                    19:d7:82:84:17:11:25:7d:b0:1f:1e:26:31:af:45:
                    f8:3d:3c:9a:37:f3:09:21:fe:b6:4a:fb:55:ef:30:
                    25:c6:6f:c5:b8:25:67:53:b1:ec:11:bb:97:0a:0e:
                    a2:26:e0:0e:bb:95:ff:c4:58:ce:cc:15:74:0a:95:
                    ab:1a:7f:78:77:8f:c2:2c:59:ef:81:9a:bf:f4:75:
                    fc:96:5c:3f:ea:f1:8a:60:23:d5:25:36:aa:33:7f:
                    67:22:60:90:ee:14:8e:bb:07:a9:31:e5:1d:6f:68:
                    fa:95:f3:b9:e8:5b:8d:fc:7c:6a:90:07:7a:d6:64:
                    99:df:e4:38:29:c9:65:df:ac:b8:92:3b:cc:bb:08:
                    78:50:f6:d8:75:7a:26:ed:7a:20:37:65:0b:81:34:
                    a9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:AA:DE:B5:92:9D:3F:7B:6F:C9:26:E3:70:C7:45:F6:A4:60:73:17
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/8qretZKdP3tvySbjcMdF9qRgcxc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.152.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3e:7e:17:2e:06:e6:e6:84:73:2a:1f:c5:36:35:e4:75:9d:85:
         68:90:9b:41:39:69:63:48:7c:9b:82:1b:5a:87:3d:e7:fc:59:
         dc:30:a9:a1:98:a4:4d:cc:4e:cc:a8:3e:9c:45:eb:cd:48:10:
         34:ca:7c:ca:a7:e5:69:fd:0e:d3:32:f1:fe:a9:36:93:10:78:
         91:75:99:4f:66:54:e6:76:7f:ec:c0:3b:b1:51:ed:e7:a1:ae:
         39:ff:e9:81:84:c0:01:06:64:6b:ea:8f:5c:eb:40:de:5b:7f:
         8d:a1:79:ca:e5:a9:50:06:4c:8c:7a:58:52:cd:ae:69:ff:f5:
         06:8f:b2:82:38:be:05:43:6a:49:92:d3:b7:e1:6d:1c:15:a6:
         12:fb:1e:1c:05:4a:66:20:01:7e:ba:41:30:2c:b5:0c:f2:ca:
         8c:09:d5:07:db:f3:17:02:b2:e9:3e:24:eb:0c:46:77:98:04:
         91:d5:09:50:2e:1c:3e:d0:5e:7f:97:bc:c2:64:f7:13:54:8e:
         e6:e9:ef:05:03:fd:12:bc:a3:87:34:d2:e4:64:e7:ac:8e:c7:
         f2:d7:f7:32:7a:7d:bf:ab:1d:53:ac:4e:6e:82:c2:2a:c7:34:
         77:07:05:f9:ea:7f:33:89:b7:e9:94:e4:f7:07:a8:70:9f:b7:
         ca:78:0b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:08 2023 by rpki-client on console-ams.rpki-client.org