Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/EY-XfPM5nWUoNF9U4OjQe8uBAzU.roa
File:                     EY-XfPM5nWUoNF9U4OjQe8uBAzU.roa (raw, json)
Hash identifier:          +wFOIEoqmWxJav2Q1zNDWiib13hLnh64Z+wDUQXK61I=
Subject key identifier:   11:8F:97:7C:F3:39:9D:65:28:34:5F:54:E0:E8:D0:7B:CB:81:03:35
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       4F
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/EY-XfPM5nWUoNF9U4OjQe8uBAzU.roa
Signing time:             Tue 07 Jun 2022 10:01:11 +0000
ROA not before:           Tue 07 Jun 2022 10:01:11 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        113.156.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:01:11 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=118F977CF3399D6528345F54E0E8D07BCB810335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:07:6c:e9:bf:c6:f2:d6:66:b1:c2:69:70:7d:
                    30:10:68:98:dd:e3:fb:2c:8e:30:13:fd:10:6d:81:
                    83:89:75:45:c7:f2:d5:60:58:90:66:10:9f:b3:fd:
                    0f:d0:0e:ea:c6:d4:c8:c5:b7:89:69:31:5c:dc:78:
                    08:2d:c5:c5:90:0b:e6:de:85:ad:e4:90:88:20:9e:
                    25:bc:13:9c:ef:c2:6a:5c:d3:5f:e1:6d:bd:0a:63:
                    da:6b:f9:1d:dd:49:75:f5:45:0b:1f:19:7a:67:f8:
                    40:67:9c:75:d3:d9:89:5b:97:9b:9e:e2:e1:2b:79:
                    7a:94:4b:fb:d2:77:a0:6b:f0:3b:c8:97:2b:bf:25:
                    df:ef:79:dd:e1:f6:45:fc:49:61:56:73:de:fb:37:
                    82:5d:0d:ec:51:e5:f0:44:02:51:32:12:52:2a:71:
                    22:77:89:12:d3:e2:ed:87:f3:75:29:4b:63:80:64:
                    44:e5:07:9f:e4:b2:02:ed:75:d9:fd:98:fa:79:34:
                    10:5b:47:7a:53:2b:8f:cb:f8:a1:0c:18:f4:42:59:
                    49:39:cf:47:3b:49:27:e6:7e:5b:81:75:87:a6:16:
                    d3:05:60:9d:c7:55:b4:82:66:9d:db:d8:67:9d:ac:
                    10:03:c7:45:75:4a:44:64:81:f7:e6:38:38:9b:8e:
                    49:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:8F:97:7C:F3:39:9D:65:28:34:5F:54:E0:E8:D0:7B:CB:81:03:35
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/EY-XfPM5nWUoNF9U4OjQe8uBAzU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.156.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         37:d5:eb:0f:28:81:ec:c0:92:bf:a0:b7:2c:5c:b8:3c:86:8a:
         e7:6f:77:2e:99:66:4b:9c:57:af:77:0f:34:30:e2:a5:f8:b9:
         39:bc:77:d7:d4:5f:49:a8:0c:51:00:b6:d8:34:61:7c:24:38:
         ea:46:97:c6:07:c5:52:91:f4:f8:2d:ea:95:a2:b9:49:d2:4f:
         a9:87:bb:39:85:24:64:26:5d:aa:c5:0b:c8:c6:f5:c6:07:07:
         8d:db:7b:b9:4c:dd:bb:18:f8:88:9a:87:0d:cb:c6:37:b1:b3:
         03:5c:33:8f:04:8f:81:5d:34:5e:be:dc:56:35:0c:a9:a3:2b:
         d5:28:2c:95:ec:f0:39:6b:65:84:05:8f:e3:5f:bb:3a:01:9f:
         48:ed:d2:7c:aa:ff:88:ae:b1:ad:9e:30:33:95:52:ad:03:ee:
         cc:9c:96:7d:cd:a7:23:18:79:59:c2:3e:0d:99:bf:92:c1:36:
         36:16:37:49:38:96:d9:b5:64:9f:89:5f:00:9b:78:be:3f:e0:
         e5:a4:88:e3:aa:2b:6c:71:4c:48:45:f8:1a:04:db:d8:32:9d:
         f3:1b:78:1c:78:b4:a0:5b:a3:a8:a1:30:ca:a1:08:ca:3e:80:
         38:85:f2:89:30:10:e3:e7:c8:03:85:03:34:25:8f:58:18:85:
         80:d7:a5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org