Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/CQVkITk34Ncw764HUm1CR4DDd2w.roa
File:                     CQVkITk34Ncw764HUm1CR4DDd2w.roa (raw, json)
Hash identifier:          sbLPJ4CR26oyMK6RobCQ/Nt+3LakLiTN3bdka6+D5Dg=
Subject key identifier:   09:05:64:21:39:37:E0:D7:30:EF:AE:07:52:6D:42:47:80:C3:77:6C
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       5A
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/CQVkITk34Ncw764HUm1CR4DDd2w.roa
Signing time:             Tue 07 Jun 2022 10:03:11 +0000
ROA not before:           Tue 07 Jun 2022 10:03:11 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        114.18.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:03:11 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=090564213937E0D730EFAE07526D424780C3776C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:08:8e:62:dd:0e:b6:54:eb:c4:5a:a6:e6:1a:
                    8e:e9:d9:c6:b4:e8:18:ee:05:a9:82:e5:48:b1:69:
                    ea:18:85:28:65:6e:27:d4:bc:a4:14:0c:21:84:f5:
                    76:68:b8:94:d9:d0:3c:d7:a8:3f:98:2b:7c:76:91:
                    f5:ee:25:11:24:13:90:b8:c2:fe:ae:e9:e9:06:a3:
                    2e:c6:d7:61:fd:44:c7:ec:4a:d2:7c:1a:87:64:a7:
                    f1:e9:c5:f9:5c:7b:7e:7c:36:d1:21:d0:c6:72:af:
                    08:7f:07:9a:fb:a0:9b:3d:dd:24:73:74:e0:ec:38:
                    fd:5f:25:7d:e1:40:d3:5d:7d:f5:39:48:0f:90:76:
                    34:c4:5f:fb:e8:c6:62:bd:88:e2:1e:d1:e6:0e:ab:
                    9f:50:7d:0e:43:cd:85:9e:42:1b:c0:e3:37:b8:75:
                    8a:8d:3d:e9:ba:10:f2:41:73:b4:d0:f6:24:ef:6d:
                    1f:cb:f6:73:8a:75:17:f9:13:c9:76:f6:2b:06:67:
                    bb:65:bb:de:f8:7c:74:e3:10:ed:6b:13:26:ec:07:
                    22:64:97:c6:52:49:62:44:ae:09:2d:82:54:1a:46:
                    25:38:51:b1:be:7d:66:67:59:f6:22:d0:9f:87:3b:
                    41:85:68:68:39:eb:b6:1c:3b:69:7a:a7:0b:fc:5c:
                    56:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:05:64:21:39:37:E0:D7:30:EF:AE:07:52:6D:42:47:80:C3:77:6C
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/CQVkITk34Ncw764HUm1CR4DDd2w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.18.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8d:e6:db:b2:85:ec:3d:7f:3c:a2:74:3f:3a:d6:9c:8d:7a:c1:
         fa:0f:33:40:2e:cb:a3:a1:bd:f0:e4:3f:6f:31:19:3b:a0:86:
         59:89:c2:20:ef:fc:b7:17:64:cf:08:70:2f:95:f3:b5:c4:92:
         04:8d:b5:6e:33:c8:ca:cf:be:6c:e8:29:03:9c:dc:2d:e3:50:
         02:e0:a1:f8:49:8c:4f:b0:d7:64:85:b0:7e:94:9a:30:10:17:
         48:14:78:8b:c5:25:6b:f5:d9:35:0f:73:b4:e8:57:17:ce:6a:
         95:04:1a:f4:52:0f:07:0c:60:54:b0:15:7b:29:7a:fd:ca:f6:
         37:cf:e7:70:cc:1a:4a:58:91:99:69:1f:2d:36:96:69:82:be:
         72:23:fd:6a:3b:78:a7:60:2f:60:56:02:02:4d:d1:77:99:83:
         ba:68:8a:2d:3b:dc:99:a5:a4:54:66:0f:86:b3:da:ec:7e:14:
         89:b7:ec:dc:9a:07:ae:48:74:8e:06:b3:21:3a:04:55:7d:e8:
         07:84:22:2c:bb:8f:c1:93:a8:cd:c7:29:95:14:6f:1c:6b:2a:
         bc:00:11:9a:1f:b8:ce:45:99:02:69:b1:08:bf:ec:4f:51:f6:
         4f:34:f7:81:a7:69:45:7b:73:37:dd:06:bc:be:3b:d9:c2:79:
         ee:7a:66:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org