Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/EjEW7_BtoP6qd5fUuGEN7PnwX7w.roa
File:                     EjEW7_BtoP6qd5fUuGEN7PnwX7w.roa (raw, json)
Hash identifier:          AFyDtA79zK6Lp+uCG9vNE1bIH2RmzP8wOc1HhzDPxJk=
Subject key identifier:   12:31:16:EF:F0:6D:A0:FE:AA:77:97:D4:B8:61:0D:EC:F9:F0:5F:BC
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       3B
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/EjEW7_BtoP6qd5fUuGEN7PnwX7w.roa
Signing time:             Thu 28 Apr 2022 09:24:38 +0000
ROA not before:           Thu 28 Apr 2022 09:24:38 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     2516
IP address blocks:        125.55.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Apr 28 09:24:38 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=123116EFF06DA0FEAA7797D4B8610DECF9F05FBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:34:6c:2a:02:67:19:fe:c9:82:b8:4a:fd:f3:
                    7f:66:5a:bc:7f:53:90:42:12:42:4f:39:5e:05:e3:
                    05:69:e4:3b:af:8a:de:34:e7:21:1b:9b:3b:0b:40:
                    73:a4:23:89:8e:ce:f9:af:58:7f:9b:e9:f6:61:9b:
                    16:71:26:64:ad:23:56:d0:77:99:70:48:a7:1a:75:
                    b7:df:c8:b3:8c:2e:85:51:81:9c:da:11:66:ab:30:
                    0c:4f:3f:b5:23:ec:c8:4f:3e:0d:ce:79:cb:ce:29:
                    bf:0f:8e:8c:c4:88:26:11:87:0b:89:87:c4:31:d1:
                    1f:e7:58:d6:93:76:e5:d9:e5:58:24:14:bd:6a:09:
                    a7:b4:eb:b5:5c:f2:da:28:8b:41:6f:93:70:a4:5b:
                    b3:d0:2a:27:d0:7d:ec:34:26:36:96:b4:f2:1d:f1:
                    7b:98:35:ca:be:e5:f5:1b:e6:48:ce:bf:46:71:c1:
                    db:71:8f:d0:fb:89:a6:59:b8:f8:fa:0b:9f:0b:fb:
                    fc:7e:91:7f:05:0a:cd:06:24:91:58:cd:95:ab:f6:
                    6d:86:d5:8f:f0:a0:50:fe:51:c1:36:2c:22:a7:80:
                    95:a7:bc:4c:d6:d0:2e:6b:17:e7:86:38:1c:be:e0:
                    23:2d:0b:b8:03:34:48:d0:02:58:f2:30:75:0f:ab:
                    e3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:31:16:EF:F0:6D:A0:FE:AA:77:97:D4:B8:61:0D:EC:F9:F0:5F:BC
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/EjEW7_BtoP6qd5fUuGEN7PnwX7w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.55.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         29:55:b5:44:c6:b9:5e:b4:63:62:2b:fb:81:86:18:3f:66:60:
         d8:1d:b1:ed:92:a5:63:3b:3f:ab:e7:c0:8b:b5:a6:31:dd:80:
         4b:72:8c:d9:e5:90:31:dc:9a:cf:82:98:1a:af:13:8a:67:e9:
         92:1f:7f:62:ae:4f:a7:8c:54:71:53:be:09:df:8b:7c:0b:3f:
         b7:5e:b7:e0:26:c9:4d:6f:55:01:42:cc:ac:f0:45:f1:e7:8e:
         ae:5c:f1:30:db:b2:40:ee:af:87:1a:4f:c0:66:69:0d:9b:63:
         7e:9f:a1:6a:f5:8c:36:4d:93:54:38:95:15:a8:c2:c2:51:8c:
         36:d6:22:a9:2e:ce:32:f8:e2:c7:7a:75:c0:8f:82:b2:cf:9e:
         13:74:e1:ad:82:15:7e:71:1f:3f:be:6b:0c:4d:72:7c:62:f3:
         19:78:66:ef:81:b9:64:a4:e1:73:62:24:ed:8c:4c:e8:ca:d5:
         67:97:28:0c:02:70:96:d1:31:62:8a:c8:38:29:a4:24:35:f3:
         a2:cc:f1:5d:5d:2a:91:25:1d:28:f7:00:83:ad:7b:97:a2:28:
         fe:07:69:e3:3a:04:fb:b9:10:14:86:06:14:e2:49:77:32:5c:
         59:ae:f7:9e:43:d3:58:b9:d0:c2:65:6d:ac:82:64:b8:c6:f2:
         06:22:44:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org