Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/FEq26tnzb8pP3oXIntU2TteDBHA.roa
File:                     FEq26tnzb8pP3oXIntU2TteDBHA.roa (raw, json)
Hash identifier:          uWUNqpneso6eSoR6llPIPV3vhLrk3cnDclnmY/3WqXE=
Subject key identifier:   14:4A:B6:EA:D9:F3:6F:CA:4F:DE:85:C8:9E:D5:36:4E:D7:83:04:70
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       BF
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/FEq26tnzb8pP3oXIntU2TteDBHA.roa
Signing time:             Tue 14 Jun 2022 09:13:56 +0000
ROA not before:           Tue 14 Jun 2022 09:13:56 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        222.13.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 191 (0xbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun 14 09:13:56 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=144AB6EAD9F36FCA4FDE85C89ED5364ED7830470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:da:27:41:0a:e9:79:ac:a1:c3:16:a3:89:f8:
                    f3:2c:c5:2c:46:f9:37:9a:23:fa:25:b1:dc:f8:56:
                    6b:a2:f4:d0:f6:00:33:6a:68:45:c4:bb:b9:51:dd:
                    34:27:8e:e7:00:74:16:5e:cc:16:0a:86:c8:33:63:
                    49:0a:4d:04:cc:72:14:fe:b6:a5:dd:2e:ec:63:13:
                    1e:9b:4f:3a:1f:9b:cf:53:66:3a:61:e1:46:de:98:
                    fb:d8:32:4c:2d:9a:14:7d:c8:c8:b4:10:ab:ab:a3:
                    64:4f:2e:10:95:74:61:b1:61:3e:a1:5a:f9:54:62:
                    d0:4e:8f:cc:ac:8c:3a:fd:0c:5c:6a:c9:f6:79:4e:
                    ff:6b:49:b3:54:05:f8:a9:d7:87:a4:a0:94:00:9f:
                    a2:1f:ba:fe:fd:32:1b:b3:c8:a8:6e:71:62:08:63:
                    c8:51:e4:53:d0:e7:fb:cb:46:fd:08:b4:8b:d2:cf:
                    e6:1e:52:6b:8f:67:1c:7f:b0:33:7f:b5:91:c6:62:
                    46:de:b0:b9:7d:da:33:fd:bc:28:2a:e0:e6:f1:0f:
                    28:89:d5:df:ad:40:02:f6:70:7c:cb:08:11:44:0f:
                    1d:fd:61:49:fb:26:57:a8:70:a4:da:d9:81:f1:45:
                    e7:a0:28:b6:5f:12:4e:ed:65:4e:15:05:2a:da:0b:
                    80:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:4A:B6:EA:D9:F3:6F:CA:4F:DE:85:C8:9E:D5:36:4E:D7:83:04:70
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/FEq26tnzb8pP3oXIntU2TteDBHA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.13.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5b:d3:88:3e:03:34:16:82:07:df:20:73:a8:e1:bf:75:ca:0a:
         69:c5:99:7f:dc:44:89:c9:29:8c:92:37:15:f6:4a:6f:67:47:
         d7:63:8a:0b:1e:16:dd:ba:0a:46:02:65:ec:11:1c:98:4a:3d:
         11:b8:ac:e8:40:b2:32:26:e5:cf:57:31:42:9a:a9:bd:1e:ce:
         bb:35:f0:ed:9e:2c:58:94:a2:5f:9d:63:09:f3:cd:b0:d1:e0:
         c7:26:df:35:d3:f2:f2:76:af:fb:3c:7e:b6:75:c7:8d:49:31:
         07:90:70:92:bc:ca:ae:2d:f2:0e:11:7a:7c:c7:51:8d:74:ad:
         b7:2d:0f:1e:d3:0d:4d:ac:3d:79:31:a8:e4:e5:57:66:00:6e:
         42:75:22:23:b6:c8:57:66:f7:a3:8a:20:10:f8:cc:41:93:d3:
         5f:76:f2:49:89:22:44:2b:7c:ea:96:29:aa:71:e0:f4:8c:de:
         87:52:b3:64:5c:dc:7f:f0:86:9e:95:dc:4b:7e:c0:bb:8a:de:
         7d:f9:17:e9:58:12:6e:58:66:79:4f:01:56:5a:c1:d2:e1:34:
         bc:7e:fc:95:98:e3:84:4f:de:44:61:ea:49:c7:d1:72:63:07:
         bf:d0:3d:96:3f:95:e7:4f:61:f9:05:34:5e:52:63:a4:e6:18:
         cd:b6:02:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org