Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/HvSNz2KPFuKaS-df96ZT0npLA5c.roa
File:                     HvSNz2KPFuKaS-df96ZT0npLA5c.roa (raw, json)
Hash identifier:          cViRjyy/Gj2RD2nuCeGfSgIvdm42kg4NjB+AgvUqDmI=
Subject key identifier:   1E:F4:8D:CF:62:8F:16:E2:9A:4B:E7:5F:F7:A6:53:D2:7A:4B:03:97
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       AE
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/HvSNz2KPFuKaS-df96ZT0npLA5c.roa
Signing time:             Tue 14 Jun 2022 09:09:51 +0000
ROA not before:           Tue 14 Jun 2022 09:09:51 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        106.187.125.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun 14 09:09:51 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=1EF48DCF628F16E29A4BE75FF7A653D27A4B0397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:26:3d:5a:27:02:e6:7c:9f:4d:a4:d0:9f:4f:
                    6a:cd:1f:fc:26:e6:65:28:90:78:b8:2a:fc:09:77:
                    60:5e:fd:a9:cf:dd:1a:1e:a0:78:3d:53:14:f9:5e:
                    21:1e:c8:07:66:12:a6:56:46:4b:c6:56:87:4b:05:
                    d1:25:8d:16:97:0d:a8:84:4e:db:1d:75:76:3c:2c:
                    cd:bd:61:50:1e:da:c2:34:df:54:22:b7:92:ab:a6:
                    fe:7a:49:60:0f:25:ce:15:d7:0b:b1:53:33:67:f5:
                    ae:22:3d:f1:21:7f:2d:b3:b6:b3:eb:b1:26:f9:3e:
                    64:8a:c4:d1:cc:d3:db:c5:48:ad:09:66:36:42:92:
                    0e:de:38:2a:48:6d:d4:7a:0f:62:35:9b:f7:58:5c:
                    d8:75:c3:43:a0:95:35:94:9d:bc:03:93:09:f0:ed:
                    25:b1:39:5d:61:b1:a8:99:8a:ec:26:35:87:a6:fc:
                    c2:94:fc:97:2d:21:08:2b:4b:39:2b:03:fd:9a:98:
                    cc:a1:c9:73:e8:fb:48:5f:cd:a3:76:27:32:69:70:
                    94:1c:27:01:ab:8c:52:50:ed:88:84:94:13:b7:3e:
                    6f:d8:0b:44:46:bc:69:7f:60:01:89:d8:1f:ad:8f:
                    e8:fb:c2:54:f1:56:1c:91:63:61:78:10:85:cc:0e:
                    55:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:F4:8D:CF:62:8F:16:E2:9A:4B:E7:5F:F7:A6:53:D2:7A:4B:03:97
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/HvSNz2KPFuKaS-df96ZT0npLA5c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.187.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:b4:a6:4b:87:9c:6b:aa:eb:6e:14:c7:37:89:26:e5:c8:91:
         53:21:66:c9:62:b5:78:0a:f8:ea:5f:53:b3:ad:10:2b:4e:6a:
         3a:95:04:8c:ca:90:f9:47:a9:b3:9c:06:96:a6:24:cd:a1:43:
         e0:84:ad:b4:75:e8:e0:01:1c:a6:ad:d4:45:b2:7f:08:00:a9:
         eb:81:07:3e:d8:76:f5:51:3e:be:57:6b:d2:0b:a4:31:83:49:
         23:45:f6:f5:72:2d:f7:b5:f4:65:bc:f7:a0:00:35:2b:00:86:
         03:fc:ba:92:ff:57:f6:0d:e7:dd:81:5f:b9:53:6a:1e:b0:48:
         d1:11:83:03:f8:39:e0:65:6e:9d:70:64:c1:52:d2:43:f5:03:
         a5:a6:8d:08:f9:f2:88:0e:de:42:0b:c6:71:82:df:93:2d:23:
         14:53:0f:55:b5:fd:b9:bc:c7:a8:ca:40:64:23:80:3d:5b:9f:
         8e:05:a4:ec:7f:0f:03:b7:11:c1:e5:54:50:4c:a4:3a:df:32:
         d1:f9:0a:c6:ac:18:57:1a:1f:dd:a9:da:ae:d6:f1:3b:1f:f8:
         8c:53:2e:71:26:89:10:09:db:0d:7c:d7:c3:5b:e4:7b:57:7d:
         32:e0:5d:51:6a:cd:a2:db:d4:00:01:85:9c:26:e6:46:35:ac:
         ed:5f:30:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org