Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/CfopvboaPBhdpxR_CtcF6EYh0_4.roa
File:                     CfopvboaPBhdpxR_CtcF6EYh0_4.roa (raw, json)
Hash identifier:          CVmktT8deEpkYS7kaDhrIpySlUhMujT0P0F8kjTB8VY=
Subject key identifier:   09:FA:29:BD:BA:1A:3C:18:5D:A7:14:7F:0A:D7:05:E8:46:21:D3:FE
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       7C
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/CfopvboaPBhdpxR_CtcF6EYh0_4.roa
Signing time:             Tue 07 Jun 2022 10:11:17 +0000
ROA not before:           Tue 07 Jun 2022 10:11:17 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        106.172.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124 (0x7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:11:17 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=09FA29BDBA1A3C185DA7147F0AD705E84621D3FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ff:6f:a5:4c:c1:98:b8:50:be:cc:49:2c:ed:
                    dc:4d:d1:f8:e4:f2:2a:a5:19:94:0b:ea:7c:d2:60:
                    80:6f:7d:f2:0d:e9:f6:a8:2c:04:d4:34:8a:08:11:
                    f0:8b:47:8d:cc:75:79:d2:45:0b:68:2c:db:0c:c6:
                    03:f4:5a:9b:af:dc:58:da:b7:9a:52:27:ca:9e:1d:
                    3c:4c:6d:1a:a8:83:5e:e0:31:9b:9b:5c:a9:d4:3c:
                    a8:b4:8d:50:49:97:52:9c:28:5d:54:0d:7f:82:c0:
                    f0:c3:3d:76:f8:13:47:64:1a:6d:b0:97:47:3e:c6:
                    d1:22:7c:cf:5f:cc:1e:a8:d4:b5:1e:fe:3d:a9:44:
                    be:dc:01:f2:40:69:42:7f:ba:2d:fc:1a:39:27:c0:
                    39:a4:f3:74:fd:31:b4:ab:a9:a2:67:71:b6:89:76:
                    d0:00:97:29:52:1a:2d:f0:86:9d:d3:2f:f0:5c:92:
                    de:a6:37:f9:0e:f0:67:4f:63:bd:a2:54:24:de:12:
                    f1:5f:cd:ce:59:80:7b:1c:b9:8b:76:b0:06:74:fb:
                    8b:bb:27:ec:26:05:1b:e4:63:1c:6e:a8:01:e9:a8:
                    e7:d4:7d:8d:07:c7:7e:a5:24:4a:03:20:eb:a1:2a:
                    5a:82:f8:10:66:14:5f:33:44:fe:29:1d:a7:5c:68:
                    ba:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:FA:29:BD:BA:1A:3C:18:5D:A7:14:7F:0A:D7:05:E8:46:21:D3:FE
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/CfopvboaPBhdpxR_CtcF6EYh0_4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.172.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         73:a0:03:78:91:45:1e:ef:bb:e7:28:96:2b:da:0a:22:3c:25:
         35:78:27:83:da:41:15:3a:1a:22:c6:f0:61:07:b7:06:e8:ca:
         3c:32:fc:e3:ce:c7:30:c6:8c:95:0d:12:2a:29:01:dc:d5:51:
         d0:b9:56:8b:55:2c:79:9e:bb:5f:9b:40:1c:7b:7e:5c:5a:6f:
         68:77:14:cc:74:00:dc:c3:73:c1:22:3a:20:c2:72:fd:78:c1:
         95:f5:90:c9:d4:43:20:d2:11:33:0d:c7:0b:3b:4f:eb:32:0f:
         63:0a:3e:d4:f4:62:66:45:c2:11:13:0d:a6:ba:9b:90:b0:85:
         a4:7e:fa:bf:4c:13:46:2d:d2:35:5b:7c:70:13:08:23:c7:a1:
         bc:46:1b:b1:16:e9:4f:70:5a:b0:40:8c:0e:3f:b8:8b:20:d3:
         fd:9e:67:61:c4:99:4b:da:f1:45:25:3d:46:03:24:3b:51:ba:
         ed:fc:96:43:fa:33:82:06:ce:e7:65:e9:55:dd:4c:ca:fd:90:
         0f:a9:7c:f4:7c:a2:a5:2f:ea:54:15:52:16:91:37:7d:64:f9:
         9a:34:a1:bc:ae:c3:49:0b:0c:d5:dc:3b:dd:ee:8a:3a:cd:48:
         3a:fe:bd:d3:a0:e4:73:3a:5f:7c:5c:ce:e6:29:43:2a:40:ac:
         c2:b9:76:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org