Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/C9SdiuVi4uBsBEmJQZf7Ol8pi6E.roa
File:                     C9SdiuVi4uBsBEmJQZf7Ol8pi6E.roa (raw, json)
Hash identifier:          +bso9RR1g7/Ugb2XvGwqpVpjW4Ng2Ag64qTFf830hB4=
Subject key identifier:   0B:D4:9D:8A:E5:62:E2:E0:6C:04:49:89:41:97:FB:3A:5F:29:8B:A1
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0188
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/C9SdiuVi4uBsBEmJQZf7Ol8pi6E.roa
Signing time:             Mon 01 May 2023 01:28:54 +0000
ROA not before:           Mon 01 May 2023 01:28:54 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        118.154.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 392 (0x188)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:28:54 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=0BD49D8AE562E2E06C0449894197FB3A5F298BA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:57:0a:e7:b0:74:05:d2:72:91:b6:57:cd:57:
                    31:b0:f4:b1:8f:16:3d:b8:bb:e4:33:c5:55:d3:93:
                    83:e4:a5:49:02:6f:83:d4:e9:45:cb:f5:33:a9:db:
                    78:fd:8c:97:dd:9c:51:44:60:5f:b7:c3:a1:1b:58:
                    5f:9c:54:3c:7f:9a:aa:ac:70:0f:d9:64:7c:b4:9a:
                    f6:38:a2:ea:d6:a4:cd:18:ab:7b:99:01:07:4b:99:
                    28:c8:e7:95:52:33:b0:72:3c:7a:9e:c0:a5:20:1f:
                    77:88:db:61:24:d6:1f:6b:0d:3c:54:57:d4:db:0e:
                    4f:66:84:c6:9a:dc:95:a9:7b:ad:0e:92:a7:73:9f:
                    c6:07:95:ec:ee:8d:f1:75:24:6b:96:7b:79:8c:29:
                    24:b3:50:a6:5c:ae:47:54:22:92:3a:a7:78:26:e0:
                    be:fb:21:c9:06:57:24:f7:be:2b:3d:7a:23:1c:54:
                    df:9d:b0:2a:6e:fe:8a:d9:2d:4e:44:82:4d:50:c3:
                    f8:84:f1:a5:77:1e:66:45:c9:19:21:b2:f2:b6:9b:
                    97:c3:3b:8c:f0:f0:12:27:99:e7:66:9a:c6:a0:0c:
                    c0:cb:2d:63:b1:9b:f8:81:6a:a3:b1:03:0d:a6:20:
                    1e:8d:2d:4a:5d:bb:98:f5:ac:9f:8c:b8:a8:50:75:
                    b0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D4:9D:8A:E5:62:E2:E0:6C:04:49:89:41:97:FB:3A:5F:29:8B:A1
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/C9SdiuVi4uBsBEmJQZf7Ol8pi6E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.154.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         25:c5:e0:b3:da:40:98:8d:b6:f2:97:04:be:21:0a:48:ab:e8:
         84:4a:f1:dd:d6:6d:ca:67:ca:24:5a:01:e4:1c:7e:8d:f9:56:
         61:7c:c1:e8:07:3e:bf:87:ce:33:0f:63:dd:d6:4e:76:6b:d2:
         f9:ab:61:dd:b4:ed:1e:d1:42:5c:60:2f:e9:1f:d3:02:04:04:
         a1:ac:62:7d:f1:fb:e0:d4:c6:fb:ec:7b:63:66:c1:b8:0c:5d:
         d4:d1:43:d4:9c:fa:0c:56:ce:4e:3a:ef:4d:81:68:21:01:f5:
         1b:a0:6b:26:19:7f:cb:1c:5c:8a:21:51:b8:f3:5a:19:2e:0f:
         1b:bb:16:2a:59:6d:06:53:e5:2a:c8:03:31:2c:6f:8f:d0:9a:
         52:d7:d6:30:b3:c7:49:f6:d7:18:07:f1:d4:59:f4:a5:a1:2c:
         7b:6e:61:45:3d:4c:a0:de:0c:b2:2b:ef:b4:f8:b2:04:e1:fe:
         69:59:2a:45:92:6e:ba:2a:66:2c:60:76:00:24:1c:b6:38:68:
         f0:17:b9:3b:c8:27:8c:dd:c4:ad:1d:4f:4d:2d:a3:52:56:fb:
         e3:1e:d1:b1:e6:b5:73:44:d6:27:f6:ba:fb:97:11:95:fb:da:
         05:ae:a9:78:1a:e1:32:6b:8e:15:60:8b:94:02:48:80:10:eb:
         85:40:6b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org