Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/HUumCxJCleDKBc0Qu5ZcdsMekpc.roa
File:                     HUumCxJCleDKBc0Qu5ZcdsMekpc.roa (raw, json)
Hash identifier:          pUKhLvZuD3zc/5RmdejJH42tLuXRhxH4W6077xkyXcE=
Subject key identifier:   1D:4B:A6:0B:12:42:95:E0:CA:05:CD:10:BB:96:5C:76:C3:1E:92:97
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       A1
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/HUumCxJCleDKBc0Qu5ZcdsMekpc.roa
Signing time:             Tue 07 Jun 2022 10:21:16 +0000
ROA not before:           Tue 07 Jun 2022 10:21:16 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        111.106.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161 (0xa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:21:16 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=1D4BA60B124295E0CA05CD10BB965C76C31E9297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0b:05:1f:b0:18:39:4f:c3:18:66:14:99:88:
                    88:31:94:c3:86:82:aa:26:d5:c0:b4:73:73:7a:1c:
                    9b:08:57:e7:98:b4:cd:d8:5f:93:7d:e9:12:6f:23:
                    65:2c:7a:f7:3c:8f:44:2a:0a:6e:da:28:dc:62:f8:
                    79:67:78:5e:fd:dd:80:e0:ec:63:68:0b:a4:92:40:
                    9a:1e:5c:23:4c:ad:58:3a:f6:89:0d:8b:3c:98:e9:
                    d1:ee:77:df:33:59:ce:c5:da:cc:42:b8:04:7e:1e:
                    07:47:31:7e:f7:3c:85:83:09:65:d7:df:ca:da:0a:
                    ff:60:69:ea:7b:8d:43:dc:4b:a7:23:e5:31:5f:3d:
                    8f:36:1e:59:b3:64:5b:0f:57:7e:4b:8c:a9:d1:a7:
                    ba:0a:f2:fd:10:1a:ae:63:2d:05:d4:6c:fd:e2:79:
                    3f:9a:ce:71:f1:47:8b:1f:ee:79:8b:10:f8:66:e5:
                    a2:9c:98:57:91:50:1f:cc:1a:dc:d6:93:4e:ad:61:
                    aa:6f:9e:e0:b3:b9:cc:41:9c:b6:d8:7d:2b:f2:47:
                    c5:ff:a6:84:74:12:ec:f2:5c:97:62:94:da:db:30:
                    59:d4:d0:7b:a5:6d:5c:c7:bf:fe:10:3a:e2:6b:45:
                    ad:17:b2:3b:e1:af:d7:bb:7e:10:57:77:dc:f6:81:
                    51:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:4B:A6:0B:12:42:95:E0:CA:05:CD:10:BB:96:5C:76:C3:1E:92:97
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/HUumCxJCleDKBc0Qu5ZcdsMekpc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.106.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a0:19:7d:d0:57:19:aa:76:3e:5c:3e:ef:cf:23:e5:2a:13:e7:
         5b:89:1a:5d:27:03:f5:60:01:fc:02:73:99:08:aa:e6:42:94:
         ba:a3:d9:63:51:02:59:e7:7b:14:8a:ae:f5:59:0a:db:ce:3a:
         94:04:14:ca:ad:f6:e0:74:ad:3a:cb:a6:65:f7:52:d6:b5:86:
         33:0c:c8:fe:8c:63:29:58:18:33:42:33:3e:9e:9b:01:a6:ea:
         15:2e:72:e8:a5:b8:9b:43:42:4c:38:e7:58:45:17:71:69:15:
         36:56:3c:37:d6:26:a8:a5:36:41:5d:ae:7c:3d:35:51:23:cc:
         ca:d0:fa:02:6d:09:26:50:86:ec:a2:21:75:2e:13:e3:1d:8c:
         0c:91:74:22:d0:89:ab:db:bb:af:55:c5:ea:bb:0e:a7:4e:cd:
         13:4d:68:19:a6:ec:23:f5:55:79:8c:91:99:17:1f:e5:82:9e:
         93:8d:21:bb:ca:36:d1:5f:6f:2b:3a:43:5f:f2:ff:94:e2:37:
         36:65:9a:bb:1b:b3:d0:9b:fd:68:03:c7:70:95:06:bb:64:d9:
         18:39:66:82:c7:73:c3:b0:0a:92:92:cf:70:29:2d:df:68:af:
         75:e2:ca:03:cd:46:5a:af:ec:cc:c4:31:40:75:d8:cd:b3:6e:
         64:df:52:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org