Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/D7BLilcmJZaAxWFrnZBEhUB3Ukg.roa
File:                     D7BLilcmJZaAxWFrnZBEhUB3Ukg.roa (raw, json)
Hash identifier:          xRTPEhUBGCcPQ2Y84s0zq9CdewAs6m3T/O7h3gOlWxU=
Subject key identifier:   0F:B0:4B:8A:57:26:25:96:80:C5:61:6B:9D:90:44:85:40:77:52:48
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       012D
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/D7BLilcmJZaAxWFrnZBEhUB3Ukg.roa
Signing time:             Fri 28 Oct 2022 02:11:11 +0000
ROA not before:           Fri 28 Oct 2022 02:11:11 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        210.236.128.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 301 (0x12d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Oct 28 02:11:11 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=0FB04B8A5726259680C5616B9D90448540775248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:45:85:bd:6f:2e:b1:5c:84:f3:35:34:d3:b6:
                    ef:21:b9:a3:17:fb:3a:39:12:1a:03:cc:cc:92:40:
                    f3:ad:66:cd:e2:f6:4f:85:f9:1d:86:89:5b:10:52:
                    55:ad:77:68:7f:e2:36:cc:8a:19:bb:3a:45:78:48:
                    63:1b:34:e5:da:9b:05:60:f1:e3:d4:6c:d0:66:44:
                    c5:b4:2b:93:42:cc:f8:60:b8:cc:08:d6:fb:4f:f8:
                    d1:af:22:81:b4:9a:a6:54:cb:52:35:3d:94:46:23:
                    f5:38:2e:32:2b:2c:e1:41:1a:b3:ba:72:c5:f8:cd:
                    af:65:72:cd:8a:ea:d8:2e:c5:75:3b:61:c3:98:b8:
                    07:27:4c:19:1b:e0:75:19:d2:e5:1e:11:53:ab:24:
                    e5:38:81:12:3d:7f:fa:d6:0a:4e:73:2c:07:bd:ae:
                    64:60:06:80:2d:c9:9e:62:ce:bf:da:61:91:18:5f:
                    da:52:6e:e7:bc:22:b7:b5:86:20:01:18:55:96:6e:
                    d5:59:fb:40:00:44:48:48:17:fb:9a:ff:a5:dc:19:
                    ff:8c:0b:e3:89:8f:af:84:df:8f:78:33:10:88:5c:
                    df:32:c1:18:94:1c:dc:9d:cc:cf:8c:55:e1:e2:1f:
                    b6:40:a5:28:fd:b3:8e:88:69:56:5e:4b:ae:f7:b2:
                    d2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:B0:4B:8A:57:26:25:96:80:C5:61:6B:9D:90:44:85:40:77:52:48
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/D7BLilcmJZaAxWFrnZBEhUB3Ukg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.236.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3e:39:27:96:3e:c3:9a:05:6d:19:b7:f8:cf:10:1b:ac:05:f4:
         36:e0:c1:37:2b:fc:c6:ec:09:6e:c9:6b:0c:a6:07:5f:b7:3c:
         86:c0:7f:12:40:d0:0d:ed:36:ed:17:ce:49:ba:09:63:e5:64:
         d4:fb:55:a9:47:40:5b:ca:81:c0:39:97:55:3d:7d:d8:84:f0:
         5b:54:83:7b:3f:10:b6:6c:dd:cd:45:04:95:69:09:d1:c1:2f:
         92:ac:78:ed:40:09:ed:5f:a1:7b:a5:0f:96:ab:45:d7:79:e9:
         91:9c:f3:8c:b3:35:41:eb:4e:86:0a:50:c7:e9:4f:fc:dd:78:
         13:a6:12:bd:cb:50:37:5e:1a:f7:e6:ea:63:6e:93:22:0e:4f:
         34:35:2d:6c:ea:2d:f8:fd:dc:cb:8e:07:5f:e7:5e:38:20:c7:
         6c:ae:e3:86:9a:f3:a7:1e:2f:53:e8:50:79:0c:67:e8:72:64:
         8b:af:a5:5a:72:d8:91:3e:3a:82:8d:f2:e8:30:0a:10:8a:31:
         e7:e6:cc:9b:ba:df:d7:97:7c:3c:a8:6e:4e:50:ef:7e:f9:bf:
         7c:0c:b7:2e:b9:56:4a:fd:57:ce:48:81:74:17:9a:79:d1:b4:
         ec:db:a3:96:58:be:b2:e1:f9:e7:0a:09:39:a6:c2:1c:cd:ab:
         92:73:4b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org