Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/BkrSsuFJl8V_i0Z60Q3J2vYHdi0.roa
File:                     BkrSsuFJl8V_i0Z60Q3J2vYHdi0.roa (raw, json)
Hash identifier:          yOfM//0b/aQS7SSNw3fz4YthvPaNhtVAO6hyaae2Cps=
Subject key identifier:   06:4A:D2:B2:E1:49:97:C5:7F:8B:46:7A:D1:0D:C9:DA:F6:07:76:2D
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       014C
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/BkrSsuFJl8V_i0Z60Q3J2vYHdi0.roa
Signing time:             Fri 28 Oct 2022 05:51:40 +0000
ROA not before:           Fri 28 Oct 2022 05:51:40 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        121.107.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 332 (0x14c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Oct 28 05:51:40 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=064AD2B2E14997C57F8B467AD10DC9DAF607762D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3c:36:9c:ca:5e:8a:b9:3c:f9:c1:5f:8e:bf:
                    70:16:2c:a5:c0:6f:ee:d0:ae:b7:51:23:46:14:f3:
                    53:e6:4d:43:df:c2:ec:89:d1:7e:7e:17:7a:58:57:
                    0c:02:40:c2:c2:de:39:25:2c:97:f0:32:2a:1e:1d:
                    5e:e7:9f:51:cc:9a:0b:13:ce:9e:29:58:4a:9e:8d:
                    5e:51:a4:19:92:13:6d:28:d2:d1:0a:1d:d0:d4:38:
                    b2:e2:41:0a:5e:35:ef:9a:06:cf:b6:69:29:23:58:
                    e5:49:13:27:8b:c9:8e:17:2b:7c:d2:a4:f6:63:0b:
                    b8:77:c1:53:37:28:a4:2c:c3:04:fd:29:e6:c1:22:
                    59:68:ed:75:d1:55:99:5d:90:45:51:b7:f6:f1:00:
                    b0:d3:9a:00:e6:12:bb:55:7e:94:35:ad:c8:15:08:
                    d9:a1:73:ce:7e:75:04:22:45:cd:95:4a:72:28:04:
                    59:1e:4b:5b:65:d1:8b:d5:4f:b0:b2:af:b4:dd:a4:
                    0a:58:79:fa:c9:a2:23:62:96:09:e6:90:eb:f9:e7:
                    74:ac:3e:b8:40:05:7e:16:82:b3:e3:e4:87:91:1c:
                    db:70:06:f8:0d:c0:e0:de:99:93:d0:dd:58:72:18:
                    80:8d:cf:86:d3:31:47:a9:6e:d2:00:c5:a0:c5:bd:
                    36:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:4A:D2:B2:E1:49:97:C5:7F:8B:46:7A:D1:0D:C9:DA:F6:07:76:2D
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/BkrSsuFJl8V_i0Z60Q3J2vYHdi0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.107.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         38:81:3c:78:71:4e:7f:d2:a0:97:22:de:e9:5c:b3:44:c5:d7:
         50:35:a9:8d:51:e2:94:2f:05:21:8e:11:2b:9b:a0:90:d0:b1:
         1b:ab:ab:75:25:7a:bc:29:29:1a:cf:6b:d2:37:cf:ef:3e:c3:
         74:51:36:46:98:81:70:5a:82:b3:df:28:c8:21:c5:af:d9:a8:
         70:30:d1:d2:87:72:0b:72:df:b8:6e:2d:f0:eb:ff:9c:2b:d9:
         60:c0:9e:3f:c4:0f:66:da:94:43:30:18:05:8f:e6:ca:a4:82:
         94:ad:c6:e2:5f:8a:12:54:fc:95:c5:93:5b:69:8e:cb:04:85:
         f6:83:2b:79:55:cb:be:a1:f1:96:19:a2:49:d1:fb:e3:ad:6e:
         52:7c:73:3c:b2:e2:48:75:d1:4c:bf:5d:31:8b:a6:40:a3:44:
         e7:8e:64:3b:3e:dd:01:be:67:9d:70:a8:b8:98:b2:97:9b:15:
         b7:33:10:63:9d:fe:de:99:9f:01:b9:e9:0c:43:78:6a:1e:3c:
         20:0b:7b:ac:15:d6:88:d9:23:79:2a:66:53:f1:e4:c5:e7:05:
         da:95:3e:ad:72:a5:be:34:01:e6:23:66:d1:24:86:80:b7:8d:
         1a:2e:89:de:89:aa:85:d6:65:85:b7:63:4c:18:f8:72:95:e6:
         28:8f:d1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org