Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/BLVXS3Zhjjk69Cqoo4UyGlpOTjY.roa
File:                     BLVXS3Zhjjk69Cqoo4UyGlpOTjY.roa (raw, json)
Hash identifier:          RUciWinv2piWXN+g7QyWCmMgRX36VWs4e5+qnGsoMkI=
Subject key identifier:   04:B5:57:4B:76:61:8E:39:3A:F4:2A:A8:A3:85:32:1A:5A:4E:4E:36
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0177
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/BLVXS3Zhjjk69Cqoo4UyGlpOTjY.roa
Signing time:             Mon 01 May 2023 01:28:47 +0000
ROA not before:           Mon 01 May 2023 01:28:47 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        27.91.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 375 (0x177)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:28:47 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=04B5574B76618E393AF42AA8A385321A5A4E4E36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4c:0c:4b:1d:cb:5e:d5:fa:ba:53:9f:73:2c:
                    dd:3c:98:11:81:d5:58:fe:79:9f:86:34:e6:59:2a:
                    af:ee:18:99:31:91:cd:7b:0a:12:07:f4:b3:5f:8d:
                    27:ca:61:2c:c2:a8:8f:71:3a:1b:d3:54:32:eb:05:
                    50:29:54:11:f6:c1:3c:25:08:1e:d2:2d:4d:f1:5f:
                    48:31:f5:80:30:82:bc:b7:16:ea:4f:80:3f:ea:27:
                    0e:df:d9:a0:d0:d9:d5:d2:45:81:83:92:13:6b:c6:
                    fd:4d:6e:b3:49:c8:c1:92:94:13:3d:1b:66:5f:8a:
                    80:4d:8c:21:18:82:b3:08:52:9f:a7:3c:c4:93:61:
                    b6:bd:06:0c:87:af:60:5e:0c:6f:5c:6e:92:b0:02:
                    a3:df:dd:5f:d8:f3:33:2f:d2:c0:e9:c2:14:e2:38:
                    5c:ee:31:11:fd:82:90:21:08:9e:8d:45:20:44:ec:
                    08:a5:42:09:98:6e:e4:f4:19:68:79:79:02:e6:55:
                    de:fb:c5:a2:ea:20:e2:5c:27:02:49:a0:29:f1:43:
                    4e:74:bc:5a:70:a1:9e:fd:43:af:b5:54:60:3f:8e:
                    83:f5:d5:11:b6:20:8d:a2:bb:c3:09:2a:2d:32:45:
                    23:f1:40:6f:54:ad:e9:07:ca:56:8c:04:0f:95:74:
                    bd:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B5:57:4B:76:61:8E:39:3A:F4:2A:A8:A3:85:32:1A:5A:4E:4E:36
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/BLVXS3Zhjjk69Cqoo4UyGlpOTjY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.91.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         66:21:9b:ff:2d:8e:55:20:d7:a3:f1:49:7b:96:7d:ed:f3:0d:
         9f:b9:10:11:0a:d5:2f:df:8e:8e:77:bf:f9:d7:8c:10:93:35:
         85:09:16:73:85:ee:9a:d2:62:7e:dd:34:13:d1:a0:9a:77:99:
         c6:40:f9:a8:7e:69:4a:74:95:21:17:fb:56:43:7a:fd:9c:bf:
         fa:c9:6f:89:fa:9b:d6:8a:e4:e5:96:5b:74:87:d1:ce:ea:12:
         41:b8:7f:7d:b6:21:4c:df:29:b1:75:93:4e:ea:2e:ca:af:9e:
         de:ec:d2:72:60:ef:1b:5a:27:91:9f:cf:99:a5:5e:89:73:7f:
         3a:0b:75:4e:dd:ac:ad:d3:23:4d:3a:ce:97:9f:04:f4:52:ca:
         ff:af:19:71:b5:d9:17:ee:2f:6c:f7:36:1a:7c:65:51:81:b2:
         df:1d:29:11:d4:6b:76:d0:33:53:02:05:fa:58:b2:1b:42:ad:
         43:82:98:94:f2:ba:c3:6a:0e:f9:48:12:2f:87:33:08:bc:e4:
         20:64:79:2e:83:03:8c:f7:5f:61:98:a5:95:d5:7f:a9:1d:81:
         ae:5a:35:91:0b:2f:1d:bf:c6:52:dc:9b:ef:38:f0:03:0a:21:
         b3:5d:ce:25:02:6b:22:e8:10:57:82:1d:12:1f:68:29:cc:17:
         be:2d:06:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org