Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/CnKMHo6ILvGIocP7iIwHsAnkBv0.roa
File:                     CnKMHo6ILvGIocP7iIwHsAnkBv0.roa (raw, json)
Hash identifier:          6RunEFMWYWo8FxMOPzwqX+W/CbA2i73+OF9fZITsDkk=
Subject key identifier:   0A:72:8C:1E:8E:88:2E:F1:88:A1:C3:FB:88:8C:07:B0:09:E4:06:FD
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       C6
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/CnKMHo6ILvGIocP7iIwHsAnkBv0.roa
Signing time:             Tue 14 Jun 2022 09:14:00 +0000
ROA not before:           Tue 14 Jun 2022 09:14:00 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        111.108.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun 14 09:14:00 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=0A728C1E8E882EF188A1C3FB888C07B009E406FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e9:dc:e2:67:14:78:06:20:ae:13:c8:c5:af:
                    65:2e:83:99:4e:c2:c7:cb:5c:48:31:bb:d8:47:23:
                    95:d3:8b:32:1a:67:fb:a1:53:e3:77:0d:40:93:0e:
                    7f:ec:cd:2c:b7:e6:4e:d3:8b:56:58:a4:dd:d5:3c:
                    3f:3c:5f:e6:7d:86:4f:ec:d4:1e:35:b7:63:68:87:
                    65:e2:3c:55:15:59:d9:8f:01:3f:f2:af:fa:cd:a1:
                    53:b9:7a:05:7d:7e:0a:aa:c1:f1:7f:7f:8c:9a:c5:
                    64:1f:de:2a:99:c5:8f:ff:cb:ea:aa:f2:a4:10:6d:
                    12:7e:e2:81:62:1a:9e:67:1b:77:04:2a:35:33:cc:
                    09:6a:97:bf:19:ae:42:18:45:05:fb:5d:92:e6:d4:
                    44:cf:bd:38:34:c3:7e:79:96:8f:c1:be:9d:e3:8f:
                    00:0b:1d:4c:fa:3e:36:6b:ce:d6:79:9c:0f:79:f9:
                    7a:96:4f:3e:53:4f:7c:cf:ae:45:31:5a:9d:c4:c3:
                    0a:03:54:ad:d1:1d:39:c6:44:4f:24:7b:8b:05:19:
                    d0:2a:59:68:68:7f:9b:65:74:40:89:18:cc:e9:78:
                    0d:10:cc:5e:e1:fd:84:17:ce:c9:75:a5:39:6b:27:
                    1c:61:55:53:7e:5e:15:7b:7b:12:1d:09:77:53:ac:
                    f2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:72:8C:1E:8E:88:2E:F1:88:A1:C3:FB:88:8C:07:B0:09:E4:06:FD
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/CnKMHo6ILvGIocP7iIwHsAnkBv0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.108.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         84:62:be:99:6c:06:67:1f:c4:7d:07:81:e8:20:1c:02:1a:88:
         fa:60:3a:fb:cc:ef:e6:38:61:fd:a7:76:df:25:37:f1:f9:21:
         77:b4:42:83:37:69:92:ff:e7:51:fd:ae:2e:8a:9f:70:f9:40:
         02:fc:18:f4:d1:c1:4d:fa:01:2d:3a:88:ff:89:f7:2a:0e:d0:
         93:dc:ed:ae:11:f4:27:c6:26:06:ba:b0:32:8b:8e:1a:73:d2:
         cc:59:35:17:c1:f0:50:46:f7:0a:5f:dd:39:a6:a2:bd:61:7c:
         7d:a7:a6:48:22:97:21:e6:ad:58:77:ea:12:4f:38:e6:a4:92:
         d1:75:86:22:61:c2:ca:6c:c5:4f:f6:65:b2:e7:66:2e:dd:00:
         36:ab:96:68:b5:03:74:9e:f8:98:f6:3f:78:98:3c:8d:6d:68:
         5d:2b:48:72:0b:84:d0:fd:4d:50:7c:2a:8c:01:5e:95:5c:e4:
         9d:15:bc:e1:49:0d:10:58:d6:cd:ce:f2:0d:1d:f8:94:4f:9f:
         35:af:f4:60:31:4f:a5:0e:d8:d3:63:b6:3f:e8:49:34:35:ed:
         da:48:06:09:c7:23:13:5e:88:1b:da:f4:c8:a9:e9:8b:09:2d:
         a9:15:a2:6c:fc:1c:c7:3b:92:f0:b4:fc:2e:9e:c4:52:e3:05:
         6b:c0:3c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org