Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/DWDZwmZwjtPJN5GhPMRZk5jOB6A.roa
File:                     DWDZwmZwjtPJN5GhPMRZk5jOB6A.roa (raw, json)
Hash identifier:          HSJdgNQSDvSKqJ8zXylCwSgh5N36wWjiqR9vlF75lo8=
Subject key identifier:   0D:60:D9:C2:66:70:8E:D3:C9:37:91:A1:3C:C4:59:93:98:CE:07:A0
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       01D8
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/DWDZwmZwjtPJN5GhPMRZk5jOB6A.roa
Signing time:             Mon 01 May 2023 01:33:38 +0000
ROA not before:           Mon 01 May 2023 01:33:38 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        106.187.0.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 472 (0x1d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:33:38 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=0D60D9C266708ED3C93791A13CC4599398CE07A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b6:9f:ac:8c:bf:fe:67:00:b8:2b:82:16:ec:
                    bc:20:4f:c9:c6:7a:98:04:06:0b:b8:52:91:51:0a:
                    5f:01:84:7d:27:46:3e:96:fc:7e:0d:cc:26:ae:99:
                    0c:d1:b5:80:e0:2b:c0:29:64:b7:7c:7a:53:f3:cb:
                    cd:51:da:92:96:17:e0:8a:30:10:62:d5:e7:7d:5b:
                    31:e8:bf:0b:05:8b:5f:88:47:60:e6:69:b3:63:6c:
                    89:5a:6c:2c:09:df:16:3e:ff:e1:f6:98:df:45:0a:
                    47:50:d2:ed:c7:0a:49:46:46:09:be:21:b6:11:23:
                    0f:9e:f7:3e:43:d1:c3:91:99:a4:6e:5b:71:27:bd:
                    b5:6c:cb:25:04:57:58:e5:a1:6f:47:70:de:50:da:
                    3c:ab:8f:af:4c:1f:10:2f:6b:64:99:de:04:83:03:
                    5c:72:c3:0c:76:72:6a:f6:c8:37:7c:0f:ce:de:b7:
                    a2:23:ee:b7:f7:d3:e1:e9:90:bf:9f:bd:cb:d9:25:
                    b6:ef:35:35:f3:fb:d2:74:db:b9:c0:53:58:1c:c2:
                    2c:7e:91:22:cc:2f:72:46:73:c4:cd:c6:0e:1d:e5:
                    a7:80:ed:4b:45:38:b2:6b:64:99:c0:d6:d2:5b:2d:
                    69:7e:d0:41:70:68:d5:40:5c:6f:c1:c4:c5:2c:1f:
                    cf:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:60:D9:C2:66:70:8E:D3:C9:37:91:A1:3C:C4:59:93:98:CE:07:A0
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/DWDZwmZwjtPJN5GhPMRZk5jOB6A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.187.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a1:d8:30:ae:d1:cf:00:cf:8c:3f:a6:97:41:83:87:33:d5:7d:
         0b:5c:75:af:54:34:cb:7b:6b:7c:23:72:6e:0d:23:2a:2e:04:
         9d:1c:99:f8:c6:16:7b:65:92:f6:e6:cc:84:86:90:2f:20:9b:
         e7:2d:ac:c7:7b:10:f9:fc:73:ce:a3:7c:5a:ac:81:ec:c6:32:
         31:d7:de:d5:ea:e6:a1:d1:52:1f:3e:47:82:4a:a7:8e:ab:b6:
         ee:78:05:fe:de:04:a3:2d:72:29:12:71:c0:ba:1e:dc:f3:f7:
         d3:04:31:fc:ae:66:6f:20:44:12:86:58:3e:95:03:4d:dc:38:
         b8:33:22:41:9c:1b:27:eb:77:61:2c:b3:81:b9:9a:ad:f6:03:
         85:89:a4:19:8f:03:e3:df:61:88:db:fd:66:93:17:a8:df:63:
         83:40:02:f4:7e:4f:f6:c1:fc:b7:ba:f2:2f:a6:62:3f:dd:2f:
         fa:67:dd:d8:b3:1c:17:76:1d:34:1d:bb:7e:52:5a:8d:ee:ae:
         35:12:5a:82:49:74:af:4e:8c:85:64:95:d8:61:a1:28:77:ca:
         b4:4d:df:1e:1e:4d:9a:8a:50:b8:a7:0b:ef:f8:bd:13:78:80:
         7d:46:bc:d1:74:b5:8f:d8:5b:c9:9e:04:c2:a9:f1:56:3d:b3:
         cc:99:db:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org