Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/EzFCxtaW6epb03J4dcPMYFfrnh4.roa
File:                     EzFCxtaW6epb03J4dcPMYFfrnh4.roa (raw, json)
Hash identifier:          lRpJwAYOjRX07XOFzKoxeDJAH1yDOXYdDsRgTjLu7c0=
Subject key identifier:   13:31:42:C6:D6:96:E9:EA:5B:D3:72:78:75:C3:CC:60:57:EB:9E:1E
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       01F3
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/EzFCxtaW6epb03J4dcPMYFfrnh4.roa
Signing time:             Mon 01 May 2023 01:35:37 +0000
ROA not before:           Mon 01 May 2023 01:35:37 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        14.8.0.0/15 maxlen: 15

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 499 (0x1f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:35:37 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=133142C6D696E9EA5BD3727875C3CC6057EB9E1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fa:93:34:b9:23:ca:0d:9c:77:b7:e5:db:95:
                    84:e1:62:10:72:08:e7:3e:19:e0:34:81:19:c2:f2:
                    47:b3:92:41:03:85:33:15:01:42:83:87:28:7a:24:
                    fb:83:86:7d:af:43:90:80:8c:5c:a8:5b:9a:51:2f:
                    fc:70:ea:83:2e:a2:8c:36:c4:5b:21:25:04:e4:55:
                    81:27:f5:f6:c3:46:d1:1b:c1:96:05:0a:cd:d5:42:
                    1e:63:ea:e3:5b:72:dc:b6:48:c5:e0:0f:5b:1b:09:
                    c1:8f:59:f1:ea:fe:2c:ff:b6:64:a3:0b:10:61:b7:
                    d8:3c:29:09:71:a3:09:48:fe:e8:6e:64:5f:0d:e6:
                    0e:87:3a:12:2c:bc:f2:5f:a2:28:bb:2d:3d:dc:9e:
                    de:d3:35:a7:67:1d:ce:a9:e0:a4:63:52:a6:49:a7:
                    5e:4e:e6:72:41:c6:a5:fe:5f:00:43:24:2c:49:12:
                    da:10:08:cd:c0:5c:fb:44:03:e2:cd:47:5a:b9:1d:
                    ef:f0:12:fc:29:23:36:58:7d:3c:80:fe:c1:87:2d:
                    45:db:1c:3c:0d:f0:d4:e1:48:24:51:b9:db:dd:81:
                    e9:25:a8:0c:eb:6f:1d:b1:38:c6:36:a3:58:ac:61:
                    78:19:9d:47:d6:9a:0b:5a:7b:ab:f0:d0:e2:28:6f:
                    db:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:31:42:C6:D6:96:E9:EA:5B:D3:72:78:75:C3:CC:60:57:EB:9E:1E
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/EzFCxtaW6epb03J4dcPMYFfrnh4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.8.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         63:a6:0e:f7:04:47:25:35:c3:c7:5e:a2:fc:59:a7:1a:43:c5:
         4b:1e:09:bd:76:3a:a3:31:20:3d:dc:b1:75:bd:c1:74:11:17:
         0c:0b:a0:d4:f6:30:4c:1f:c0:8b:3f:f8:cd:9b:26:8d:fd:6f:
         96:21:fb:3d:a5:14:0e:da:26:88:0b:86:8d:19:21:3f:5b:ec:
         07:ff:c0:02:33:62:4f:61:e6:dd:8c:7c:29:89:33:14:74:16:
         90:d4:e4:dd:a4:1a:00:5d:29:20:6f:11:9d:0a:3b:56:4d:16:
         52:56:c1:39:dd:35:7a:18:00:7e:d6:44:8e:a5:f5:0c:7d:94:
         dc:d0:17:94:c7:c9:ba:b6:43:03:5d:4c:af:46:9a:d5:7d:63:
         70:64:20:36:ef:70:0e:ed:ca:54:31:90:fd:7d:5f:46:5e:81:
         be:db:88:92:51:72:06:8c:1b:54:2c:64:ec:c2:73:e8:1f:c7:
         d6:be:f4:93:3d:5a:74:34:fa:2b:af:90:da:5c:ac:74:59:5c:
         ff:53:5c:2f:dc:97:e4:ca:e9:df:21:2e:8e:68:ab:14:d6:23:
         88:2b:a6:e6:db:30:f9:b4:ff:75:de:21:a0:23:76:27:d6:64:
         5b:6b:1b:96:43:f0:6d:01:e8:9e:09:a7:74:e2:14:29:fd:3a:
         2d:0b:df:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org