Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/DQ8_GkPkmIfqB591MuXOSK24qMw.roa
File:                     DQ8_GkPkmIfqB591MuXOSK24qMw.roa (raw, json)
Hash identifier:          JNgxbWhSIfseKt31V9oRANEshZhQAXcppmARTFn5ddI=
Subject key identifier:   0D:0F:3F:1A:43:E4:98:87:EA:07:9F:75:32:E5:CE:48:AD:B8:A8:CC
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       01EA
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/DQ8_GkPkmIfqB591MuXOSK24qMw.roa
Signing time:             Mon 01 May 2023 01:33:47 +0000
ROA not before:           Mon 01 May 2023 01:33:47 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        222.13.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 490 (0x1ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:33:47 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=0D0F3F1A43E49887EA079F7532E5CE48ADB8A8CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:3c:fb:79:e4:05:50:78:b1:d3:8b:72:2d:da:
                    86:de:a4:78:c8:03:5c:08:0d:a9:e7:6c:65:d3:ae:
                    90:50:56:82:e5:64:96:df:5a:72:9b:06:f3:bd:2c:
                    b4:5c:1b:8e:41:72:7c:48:10:5f:40:af:d8:db:f2:
                    54:81:e7:f9:d6:b8:84:ec:a3:ee:34:ef:b6:9e:df:
                    7b:d7:ec:a9:dc:40:7f:4b:fc:db:18:a6:33:a0:87:
                    c5:d7:53:2e:02:67:3b:f0:58:7b:21:ab:77:28:fa:
                    b5:98:a3:6c:15:aa:8d:a5:0b:73:9a:c3:70:02:28:
                    2a:53:77:80:8d:bb:a0:6b:6c:66:13:4c:1c:b1:73:
                    d1:82:99:34:c1:50:27:5e:d3:d4:2c:ca:ec:63:65:
                    e3:bc:bd:d4:81:fb:4e:8b:bd:f4:4f:3c:6f:51:f3:
                    26:b7:21:ea:ad:53:a8:46:59:a2:07:5f:c1:c3:96:
                    a3:1e:6e:90:2c:f8:a6:71:94:79:dd:f6:ed:81:24:
                    1a:44:33:c7:13:c4:81:17:2f:b3:4a:05:7f:93:f2:
                    a4:ae:0c:c4:7c:2d:82:c5:66:bc:2c:98:8d:3e:e0:
                    82:ac:01:ab:1b:2e:8e:0a:38:ec:92:95:df:3b:8f:
                    67:75:84:f6:65:8e:d7:f9:02:83:79:0f:db:64:05:
                    d1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:0F:3F:1A:43:E4:98:87:EA:07:9F:75:32:E5:CE:48:AD:B8:A8:CC
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/DQ8_GkPkmIfqB591MuXOSK24qMw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.13.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         aa:3d:56:a1:31:f0:e0:40:7a:4d:56:50:8b:bd:36:9c:97:55:
         7a:60:2e:49:7e:8b:09:5b:1a:79:8a:cf:d1:80:c1:29:55:80:
         1a:1a:6e:87:27:c3:45:24:8d:41:88:4b:3e:82:e4:5c:fa:8b:
         90:ee:2e:9f:25:21:9c:18:92:98:d5:41:c2:4d:5a:18:00:82:
         54:60:89:24:c8:82:6a:f4:a1:87:ca:98:c1:33:9c:54:1c:d7:
         10:2a:4e:58:c1:fa:00:5b:2a:64:66:ef:6e:d2:11:c9:82:79:
         fd:e1:51:42:3b:eb:9f:90:b4:ed:f3:b2:c1:da:36:8d:72:c2:
         ae:66:6c:04:4b:e0:ae:15:c1:9c:a0:b5:ff:9a:88:eb:d2:5a:
         3c:ba:c4:89:51:b0:c9:8e:af:1c:b1:5b:f7:76:95:af:5b:16:
         df:bd:0a:a3:a0:00:ac:79:c4:87:b5:3c:f6:cc:9b:93:ef:39:
         51:83:d2:b6:fd:df:b3:48:ff:ae:79:6f:2a:06:d1:57:a9:97:
         3f:03:fb:8a:8b:93:bc:65:b6:13:70:22:6a:3a:72:3f:51:ac:
         d0:cd:10:59:74:f4:de:c1:67:82:33:96:3d:fd:a8:95:f2:d2:
         8d:a4:3e:35:fd:6a:8b:cf:17:0c:51:cd:06:7b:57:08:ea:5d:
         8f:c9:ef:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org