Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/FS4IPr47pxU0GYBstEvU4CWmqek.roa
File:                     FS4IPr47pxU0GYBstEvU4CWmqek.roa (raw, json)
Hash identifier:          6tbqhP7tPoNW073HX5SCCsOtzJqUEERoqo5xipvlQPw=
Subject key identifier:   15:2E:08:3E:BE:3B:A7:15:34:19:80:6C:B4:4B:D4:E0:25:A6:A9:E9
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       022A
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/FS4IPr47pxU0GYBstEvU4CWmqek.roa
Signing time:             Mon 01 May 2023 01:37:59 +0000
ROA not before:           Mon 01 May 2023 01:37:59 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        210.172.64.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 554 (0x22a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:37:59 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=152E083EBE3BA7153419806CB44BD4E025A6A9E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:f6:bb:e8:dc:3d:14:a7:61:f8:33:5b:b0:9a:
                    7c:45:14:85:34:c8:9d:45:24:5e:67:e2:da:52:99:
                    28:0a:ed:38:e2:b3:6d:5c:30:07:d0:cd:47:f0:be:
                    b8:03:b2:5d:d2:19:a8:a7:94:f6:de:e8:d4:80:e1:
                    b9:f3:31:51:08:72:b2:d4:84:ad:4f:07:f1:18:cc:
                    1a:c4:96:dd:8b:32:e5:2e:31:c5:3f:cd:a8:15:a2:
                    9b:e8:7d:85:8e:2f:bf:47:be:fc:e7:85:64:85:2c:
                    86:70:06:69:23:31:1c:74:a0:5d:b3:ab:b5:b6:5d:
                    8b:35:80:06:09:fa:fd:46:34:28:a8:06:9e:e6:b9:
                    39:1e:31:73:95:99:86:05:0e:d2:49:ae:9d:f3:dd:
                    10:ea:23:27:1b:84:44:7f:7b:e9:9c:e2:e7:84:9a:
                    80:45:4d:1f:31:74:74:21:06:8f:fd:2a:d0:b4:fe:
                    18:78:06:9a:9d:d9:54:f3:75:0c:4a:18:80:ed:0c:
                    9f:06:5b:5d:a5:c5:3f:75:87:c0:08:71:61:72:98:
                    15:14:b4:90:e9:aa:49:e3:43:47:59:fd:49:5d:91:
                    49:58:10:d9:74:b1:e3:4c:cb:e0:40:d1:d7:34:1f:
                    14:02:dd:0f:38:4d:d2:95:1b:5a:de:4f:85:f7:05:
                    a7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:2E:08:3E:BE:3B:A7:15:34:19:80:6C:B4:4B:D4:E0:25:A6:A9:E9
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/FS4IPr47pxU0GYBstEvU4CWmqek.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.172.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         08:9b:55:ac:71:48:4e:52:2a:07:f7:35:03:87:45:2a:0b:02:
         b7:aa:4f:1b:20:df:f8:23:58:67:9d:00:44:72:df:37:c3:99:
         49:10:ac:65:e3:cf:5e:ed:02:56:55:9b:5a:31:30:21:10:18:
         e9:4d:a6:6a:21:54:06:08:82:c5:51:87:e9:0c:22:7a:47:d1:
         d0:3a:5a:63:ad:b5:0e:a2:e7:1c:09:da:ea:8d:59:c4:ad:3d:
         d1:8d:2c:31:47:bc:a9:19:19:12:80:c0:34:27:41:28:d6:0a:
         cb:d0:b7:71:14:a4:55:ca:19:15:fd:23:2d:ae:35:86:2b:09:
         d5:51:a1:e3:42:49:8f:13:41:74:74:7d:45:df:80:a4:bf:ec:
         b3:41:38:2f:4e:cd:ce:d1:62:2e:35:4b:31:2d:ae:63:7e:d8:
         76:f7:be:8c:3b:10:8b:eb:0a:03:a3:37:0a:ad:9d:a1:62:f0:
         98:77:1a:ea:d2:26:74:83:11:70:c1:d1:2a:62:9d:f2:7c:e5:
         35:8a:c9:98:37:45:54:5b:e3:45:be:10:33:ad:37:2a:8d:d9:
         55:b1:0e:b6:df:1a:99:25:d8:c0:f2:ee:dd:94:46:55:9c:b5:
         ef:f7:fb:ec:fc:66:0f:53:c2:26:67:82:8a:01:dd:d0:42:09:
         f8:f6:1a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org