Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/DNR09B3bFuACdkmla0DhFMjV_Q8.roa
File:                     DNR09B3bFuACdkmla0DhFMjV_Q8.roa (raw, json)
Hash identifier:          OwyfT7YZJ+wp4Beek1MvGFHgyhD4/GM9PJPYtENlsIE=
Subject key identifier:   0C:D4:74:F4:1D:DB:16:E0:02:76:49:A5:6B:40:E1:14:C8:D5:FD:0F
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       59
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/DNR09B3bFuACdkmla0DhFMjV_Q8.roa
Signing time:             Tue 07 Jun 2022 10:03:11 +0000
ROA not before:           Tue 07 Jun 2022 10:03:11 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        59.134.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:03:11 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=0CD474F41DDB16E0027649A56B40E114C8D5FD0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0e:5e:b3:33:61:c3:2a:7c:ff:9f:5e:0a:e6:
                    53:72:f2:d8:18:dc:bc:6a:3c:7f:f2:ff:59:07:25:
                    d9:7b:ef:b1:cd:f3:66:63:65:64:7a:91:20:2b:b9:
                    7f:41:62:82:86:32:c8:c5:a7:d0:60:28:23:ae:83:
                    18:bf:cb:c1:a0:0b:32:54:5f:16:d5:de:52:c3:ed:
                    e7:5c:de:72:dd:6a:c2:a7:9e:87:30:20:8d:3e:4d:
                    29:09:92:93:75:56:1c:36:18:d9:84:2d:79:6a:02:
                    23:71:ca:b6:71:dd:e3:88:3c:a4:2c:4c:32:b7:47:
                    ba:e7:12:21:4d:a9:a1:83:02:9d:5e:6e:6e:fc:77:
                    b6:c7:21:1b:b1:44:91:16:e4:60:3a:55:c5:e2:23:
                    4f:f4:15:6d:c5:38:6f:5d:aa:17:b4:d5:45:e8:e7:
                    6b:6b:c6:6a:e2:72:cb:62:6e:48:53:fe:e7:99:ac:
                    31:c5:dc:35:fc:84:62:1d:5c:43:b8:03:f0:1a:6e:
                    03:fc:ba:79:43:0b:76:f6:91:17:57:43:82:4b:55:
                    dc:00:f6:05:82:cd:f3:d8:49:c2:1c:14:13:a2:73:
                    8f:df:44:44:9d:b0:99:70:05:75:d0:a1:91:b1:46:
                    44:42:d7:8a:ab:bb:77:8a:dc:ec:35:4f:90:a7:99:
                    27:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D4:74:F4:1D:DB:16:E0:02:76:49:A5:6B:40:E1:14:C8:D5:FD:0F
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/DNR09B3bFuACdkmla0DhFMjV_Q8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.134.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         11:49:f1:d0:17:da:b6:4e:b2:64:61:88:42:69:10:57:13:a0:
         d1:f3:05:fd:0a:e4:7b:70:4d:7f:c3:93:0a:81:fd:e7:ea:31:
         26:0b:5b:a6:c9:fa:08:e2:54:1a:a9:7e:14:b5:e6:ef:69:e0:
         c0:d4:f1:37:47:41:8e:58:45:2b:59:73:09:29:ca:b5:c3:2b:
         19:83:5e:86:5b:ce:48:27:60:5b:a0:d1:78:b8:d3:fc:b4:74:
         b7:3f:93:14:7e:b1:06:17:e3:2d:8f:8f:65:e6:dd:e1:b5:d4:
         c7:c3:9c:54:93:2b:03:8d:ad:83:c8:38:68:a1:c8:bb:c4:1a:
         c5:36:25:ba:9a:a0:7f:c4:f5:ce:49:9c:e4:65:89:b7:ff:20:
         c4:13:90:90:5c:fa:aa:39:1f:db:05:9b:bf:d6:c2:c0:71:1e:
         27:4b:5b:04:a3:e8:51:29:2b:73:06:54:17:5a:9a:cb:8b:22:
         6c:03:a3:d8:47:c1:47:f3:28:a1:bb:91:1a:47:7f:d4:4e:a2:
         86:6f:52:0a:e2:d5:a0:fd:43:98:00:ab:61:9d:df:1d:74:80:
         9b:2b:d9:c8:61:29:a0:5b:41:83:37:d1:0e:db:ac:44:13:0b:
         8f:58:b6:d2:41:f4:db:e9:7d:7c:03:92:27:96:b9:c8:2a:4d:
         32:ac:98:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org