Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/FWcUn4pJgauxVXoDBuF2v4EJLww.roa
File:                     FWcUn4pJgauxVXoDBuF2v4EJLww.roa (raw, json)
Hash identifier:          8WS5EWFHsaDN/S2lVL/D8C/vjIzSpQPlUZSGcCWtt8M=
Subject key identifier:   15:67:14:9F:8A:49:81:AB:B1:55:7A:03:06:E1:76:BF:81:09:2F:0C
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       01EB
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/FWcUn4pJgauxVXoDBuF2v4EJLww.roa
Signing time:             Mon 01 May 2023 01:33:47 +0000
ROA not before:           Mon 01 May 2023 01:33:47 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        111.98.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 491 (0x1eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:33:47 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=1567149F8A4981ABB1557A0306E176BF81092F0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:40:38:4d:df:72:0c:d4:bc:65:4a:0d:2d:7d:
                    e2:98:2d:78:28:a2:ad:d1:99:44:54:61:96:85:20:
                    97:61:46:cc:be:67:7a:3a:3c:21:21:d4:63:5b:f1:
                    3f:85:1c:24:fe:d1:e8:91:d1:82:13:8d:ad:fe:40:
                    5a:d7:e8:eb:4e:d6:3e:a1:a8:42:f9:58:6c:28:1b:
                    41:b6:44:02:06:ae:4c:fa:12:e1:04:ba:56:0a:08:
                    e8:31:c8:7c:6f:ae:94:59:02:77:47:51:64:b1:20:
                    9f:5c:5e:fb:ff:f2:e8:fa:54:bc:55:62:8c:7b:c7:
                    e8:e2:d2:36:97:d6:38:ba:c9:4c:91:6f:97:9c:0b:
                    90:81:6a:57:46:6e:30:e3:b3:e8:33:b1:0f:52:b5:
                    b2:f4:ab:1c:29:65:e4:89:c1:41:11:a2:7c:fe:95:
                    6b:e2:46:81:a7:dc:e7:d4:1e:89:db:ae:7f:a8:a7:
                    92:a7:d0:48:ee:76:4a:bf:e8:1b:55:3e:c5:c0:3a:
                    81:aa:9c:da:70:2a:94:24:bf:27:e3:c9:c1:d5:06:
                    4f:47:2f:83:b1:c9:a8:2a:d7:73:33:2f:d6:ef:20:
                    39:10:f4:61:9e:fb:5b:23:86:5c:d4:03:33:d2:7f:
                    06:04:d1:d9:b7:0c:80:84:a3:3b:4d:63:d9:98:33:
                    8e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:67:14:9F:8A:49:81:AB:B1:55:7A:03:06:E1:76:BF:81:09:2F:0C
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/FWcUn4pJgauxVXoDBuF2v4EJLww.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.98.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b1:c0:8d:5c:fe:92:90:9d:05:7f:31:40:49:62:3f:e3:0d:15:
         50:d9:56:64:de:88:4d:fe:8c:58:13:eb:78:7e:25:46:f0:f4:
         5c:b0:5b:09:28:5a:68:2e:c0:c3:14:3e:11:2e:ec:b9:74:37:
         a7:9f:71:29:36:a0:37:dc:69:f8:a5:53:de:94:d3:0b:6f:16:
         f1:7c:c3:a2:5d:d3:e9:de:09:4a:2e:11:47:57:43:05:68:23:
         19:12:5f:03:34:f9:57:aa:60:55:97:a2:0d:87:91:a4:3b:04:
         f7:ed:4e:63:98:87:75:ec:8e:ed:1f:ca:b9:92:0f:74:7d:b2:
         be:ec:98:75:9a:48:b3:ae:d2:12:bf:55:00:b9:2e:b2:5d:dd:
         2a:7c:83:30:f5:e6:8b:dc:37:b1:5c:fc:78:fe:98:ba:70:d6:
         eb:e9:4a:96:28:98:e0:f0:ca:8f:b9:03:78:fd:ce:30:21:0c:
         76:96:2f:88:77:45:f4:dc:f3:4c:57:21:4d:fa:ce:58:2d:8b:
         74:7d:66:a2:34:59:7c:af:1a:b0:20:12:d2:42:2c:3f:9a:b7:
         25:0d:31:a9:88:bc:ed:4f:e2:e6:81:96:20:3f:f8:2e:12:a7:
         e4:a1:42:f5:7c:c5:4b:dc:6e:a7:f3:a3:10:0a:20:c5:c4:f9:
         ad:23:a7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org