Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/BcLm17K1V-x3O0rg4eM8YzHVmjI.roa
File:                     BcLm17K1V-x3O0rg4eM8YzHVmjI.roa (raw, json)
Hash identifier:          aH4AwmYTYKcg3A4RNZfD4Uykj7gKTHdRywbIAVj+JmI=
Subject key identifier:   05:C2:E6:D7:B2:B5:57:EC:77:3B:4A:E0:E1:E3:3C:63:31:D5:9A:32
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0127
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/BcLm17K1V-x3O0rg4eM8YzHVmjI.roa
Signing time:             Tue 25 Oct 2022 09:20:31 +0000
ROA not before:           Tue 25 Oct 2022 09:20:31 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        210.142.0.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 295 (0x127)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Oct 25 09:20:31 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=05C2E6D7B2B557EC773B4AE0E1E33C6331D59A32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:91:c0:8d:21:94:20:65:d1:05:d7:8a:ab:0f:
                    51:10:76:fc:06:2b:8e:54:f0:44:51:97:10:5a:30:
                    a9:55:76:9c:9a:08:d5:19:0f:c8:d9:4d:07:3f:a9:
                    91:3f:55:49:ef:6e:cf:69:ef:b7:0c:f5:31:40:7f:
                    a6:14:d2:2a:dc:29:24:58:a5:67:37:5a:1e:1b:8f:
                    21:6b:cf:d2:b4:6d:58:22:d3:24:7f:b3:d8:4e:95:
                    55:1a:e8:ec:f2:eb:86:a3:f6:03:1a:d4:1a:f6:2e:
                    b8:37:9d:f2:02:40:89:06:a9:95:12:bc:47:14:e0:
                    37:d4:18:4c:bb:3c:60:4e:cc:d4:cb:ef:bc:1b:da:
                    41:4d:08:ff:d5:82:b5:69:4f:26:34:57:ad:17:cb:
                    00:bb:b2:8d:28:10:df:1f:b2:dc:d0:31:55:86:11:
                    5a:36:ed:da:d9:c6:61:6a:f4:8c:31:72:0b:95:c7:
                    5a:95:60:2f:b8:09:7a:25:ad:95:7b:f6:d9:59:fb:
                    92:41:52:01:93:c4:c7:5e:e5:76:fa:8c:f1:b9:3d:
                    64:5c:ee:6b:de:cf:88:84:de:9d:e2:22:1a:70:a6:
                    14:5d:df:b3:98:c7:8c:7b:60:30:85:00:bb:e0:f4:
                    89:aa:14:0a:e2:2a:b9:90:1b:1d:6d:bf:36:c0:6d:
                    a1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C2:E6:D7:B2:B5:57:EC:77:3B:4A:E0:E1:E3:3C:63:31:D5:9A:32
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/BcLm17K1V-x3O0rg4eM8YzHVmjI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.142.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7a:c9:e9:4b:d6:65:c1:c9:9e:8a:bd:63:0e:7f:24:db:b2:14:
         d6:f9:75:53:2e:e3:76:85:1d:3a:04:ba:45:51:2f:02:b9:91:
         4e:34:b2:f1:fc:3c:23:82:1f:87:39:a4:2b:e5:20:03:5d:d3:
         92:9d:6a:e2:8e:83:72:31:7b:e5:27:6d:53:70:eb:17:a5:99:
         02:6f:1f:ce:64:f5:17:09:10:0a:2f:44:6e:68:e5:e0:3f:0c:
         04:c3:73:54:c4:cd:c4:e8:8f:22:53:d6:d1:f4:40:c8:11:16:
         1f:14:1f:ea:0e:5f:a3:31:00:1d:fc:66:d4:cc:36:8e:a3:83:
         76:e8:1f:e7:c1:a4:c5:93:2d:77:89:74:76:fd:00:01:e4:6f:
         74:a1:47:49:50:1a:a6:be:b9:98:5b:24:5f:18:26:ab:c1:1f:
         a4:93:70:17:fc:b7:64:cf:b6:9e:7d:3d:30:09:65:d0:10:88:
         39:b9:85:cc:d8:0f:27:14:8a:38:45:a3:92:62:d5:54:c7:bc:
         c7:ae:86:d9:8a:ad:11:76:d6:25:5e:23:2a:36:80:14:1f:2a:
         23:fb:53:8f:23:5b:c9:7c:f9:03:55:2e:ca:93:44:97:e6:fb:
         c8:f2:4d:b2:46:eb:93:cc:d2:d8:46:ef:d6:81:95:82:4e:ca:
         bb:6f:92:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org