Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Eko42TLPrJX_WjemCTZ1MZ69Fok.roa
File:                     Eko42TLPrJX_WjemCTZ1MZ69Fok.roa (raw, json)
Hash identifier:          ac4XaRAzZunRqjGZd9MqIk3KgV/Kg52jdyYa3lpvw+U=
Subject key identifier:   12:4A:38:D9:32:CF:AC:95:FF:5A:37:A6:09:36:75:31:9E:BD:16:89
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0207
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Eko42TLPrJX_WjemCTZ1MZ69Fok.roa
Signing time:             Mon 01 May 2023 01:35:47 +0000
ROA not before:           Mon 01 May 2023 01:35:47 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        49.132.0.0/14 maxlen: 14

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 519 (0x207)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:35:47 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=124A38D932CFAC95FF5A37A6093675319EBD1689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b3:c0:73:74:81:5b:11:a8:84:02:27:b6:eb:
                    5b:f0:ba:db:3b:ec:31:98:29:fa:4e:f2:75:e7:40:
                    a8:97:85:06:c6:d4:d3:f0:75:a9:2f:04:d8:f3:d9:
                    fe:2f:70:0f:4a:21:67:58:39:7e:5f:c5:ab:15:e7:
                    dd:c0:19:ca:fe:76:17:84:05:68:b8:18:f7:1d:f9:
                    ec:3c:5f:be:ed:2b:00:5c:57:f4:0e:e8:30:67:81:
                    aa:eb:40:63:71:e6:ea:4a:2b:1e:53:1d:30:3b:2b:
                    d4:4b:6f:a7:af:34:a7:16:be:8d:cf:7d:95:26:c1:
                    c1:c6:33:5b:15:fd:5a:36:4d:31:d1:26:26:6d:fe:
                    7d:a9:de:95:7f:4f:84:eb:f1:a2:cd:ae:d0:fa:e9:
                    64:8c:3c:16:c9:2a:c4:ee:60:b9:30:8a:e9:26:23:
                    75:e0:52:1b:73:c9:ef:b1:3c:a1:ec:68:48:41:ab:
                    19:1f:26:54:ff:c6:b0:93:9a:7d:87:f8:64:b7:e1:
                    59:8d:d8:b6:60:60:b5:65:1a:31:fb:8d:3a:97:a1:
                    da:77:53:e9:05:d4:07:20:ed:d0:ee:41:3c:0a:aa:
                    97:11:a0:a1:43:a2:68:3a:fa:a9:3a:3a:88:33:fe:
                    5f:22:7b:dc:7a:b9:fe:0c:e4:31:8d:11:05:01:67:
                    97:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:4A:38:D9:32:CF:AC:95:FF:5A:37:A6:09:36:75:31:9E:BD:16:89
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Eko42TLPrJX_WjemCTZ1MZ69Fok.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.132.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         27:a3:01:fb:e5:23:87:6d:b9:14:ac:17:03:99:36:50:fc:d3:
         1c:2b:5c:84:59:cd:77:3e:be:e2:1c:0c:bb:20:b0:28:e3:e1:
         3f:6a:cb:6a:11:4c:0c:dd:00:d8:b7:39:c5:53:0b:3c:ca:45:
         ad:54:1b:5d:f1:c5:67:88:62:b7:2e:73:da:ef:f3:42:b8:35:
         c4:78:02:3f:da:b8:3d:2a:06:06:2d:67:49:ea:dc:e4:d5:4f:
         da:ed:6d:5d:3a:6f:c2:99:84:c0:96:37:61:63:49:76:64:45:
         97:e8:66:dd:23:eb:23:44:59:26:e9:80:7b:a0:27:5c:b1:24:
         6e:7d:55:bd:f9:14:1f:9f:83:c6:88:52:b8:d4:25:01:d6:dd:
         40:64:e9:33:80:31:02:6c:9f:5b:0a:4a:0d:86:d8:5c:e8:9d:
         12:a3:1e:b3:da:40:6c:bb:8b:45:ea:b9:82:f8:2a:4f:35:b9:
         06:f2:71:7c:00:6f:2d:e2:28:b5:3d:7e:67:83:06:c7:67:18:
         d2:e2:6b:1d:f3:8e:2b:a4:18:84:60:0b:ca:e8:dc:17:8d:0a:
         be:f1:27:a4:d8:a6:f2:e5:16:a9:40:c0:b6:c9:2c:02:17:ca:
         62:c1:a3:d8:36:be:46:20:7e:c9:20:f5:21:94:c4:6f:e2:0b:
         da:fa:ea:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org