Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/IaRqwlV_nq244mSfp0kywvPcmK0.roa
File:                     IaRqwlV_nq244mSfp0kywvPcmK0.roa (raw, json)
Hash identifier:          +e6Dx5GvexmaJFNF/2dSGgwUMbJUbqNdcTUNVlY8cyI=
Subject key identifier:   21:A4:6A:C2:55:7F:9E:AD:B8:E2:64:9F:A7:49:32:C2:F3:DC:98:AD
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       6B
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/IaRqwlV_nq244mSfp0kywvPcmK0.roa
Signing time:             Tue 07 Jun 2022 10:07:16 +0000
ROA not before:           Tue 07 Jun 2022 10:07:16 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        121.104.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:07:16 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=21A46AC2557F9EADB8E2649FA74932C2F3DC98AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:83:e0:bd:f1:ff:e2:35:08:1b:b4:d4:03:cc:
                    65:c0:f7:8d:fb:7b:76:39:e0:2d:fb:58:16:d0:e4:
                    8a:e1:db:67:d9:a9:47:c9:b3:d5:f4:fe:58:be:f8:
                    c9:f3:75:ab:7a:2f:f1:36:9a:d9:aa:71:f5:7b:15:
                    1f:2e:45:a5:6e:53:32:5f:98:6f:44:d5:1a:04:65:
                    99:d6:3c:40:4f:f3:6c:1b:46:a8:7b:cd:b4:71:4c:
                    53:27:1a:6b:5a:70:68:33:b1:49:d0:c9:48:0b:16:
                    14:fc:f4:4e:51:69:f2:80:f4:5a:86:a1:a0:fa:f3:
                    99:78:aa:37:2b:99:34:03:7b:0c:df:8f:74:c7:54:
                    29:f3:6d:ee:76:6d:50:4f:43:c9:d8:f7:e5:3f:4a:
                    c4:b2:3a:d3:59:a4:d0:dd:56:e1:10:b9:51:3a:e5:
                    20:10:c4:12:58:74:f2:d0:ed:55:25:ad:84:48:66:
                    fb:a7:e7:21:57:aa:60:e9:82:2d:8f:a0:ca:a9:d5:
                    a6:1b:b5:74:4e:b0:60:57:99:69:40:5e:25:79:58:
                    42:25:1e:a0:7a:da:f5:a3:6e:e2:a1:56:67:34:c2:
                    7f:27:a7:1d:ca:ad:ea:6a:0e:46:d3:af:9a:11:fd:
                    74:60:cd:06:75:27:e5:6d:28:e5:f6:14:59:2d:77:
                    b4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:A4:6A:C2:55:7F:9E:AD:B8:E2:64:9F:A7:49:32:C2:F3:DC:98:AD
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/IaRqwlV_nq244mSfp0kywvPcmK0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.104.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         28:a5:70:2c:b8:2a:23:b8:0b:17:06:06:ea:88:57:ad:cc:47:
         5b:9f:cf:84:26:17:a4:a2:2b:ad:3b:73:91:d4:fb:e7:79:a9:
         13:09:eb:a9:c2:9d:75:b4:a4:10:f5:19:53:82:76:d8:8f:02:
         3a:4c:b8:e2:03:60:60:0b:8f:2e:e7:27:3b:07:61:f6:eb:9b:
         42:30:66:9a:4f:d6:8c:c6:df:19:dc:72:56:a5:71:bd:75:87:
         ae:cd:63:67:9e:15:e8:7e:b8:1f:93:0f:9e:90:0e:ce:fe:67:
         21:9f:3a:46:c9:89:14:4d:e3:e8:bc:e6:84:4a:a8:99:20:2c:
         be:81:a0:d5:75:34:03:8d:b0:b9:38:35:ef:b0:12:be:93:d1:
         54:7e:37:ca:ce:30:88:b5:69:8c:50:e9:13:f0:dd:c0:ce:b3:
         41:5d:5d:7f:eb:0e:50:ae:f5:b4:98:27:47:56:58:fe:d9:99:
         92:45:47:3b:e5:01:94:94:05:05:b8:aa:b0:67:6e:81:8a:48:
         7d:ba:07:7f:b0:e2:f5:a1:0a:52:09:1c:fe:4e:78:d7:92:cd:
         e2:60:1c:c0:c8:70:48:0f:f4:f5:d1:5b:4d:a8:30:43:2c:da:
         d8:9a:9f:a9:59:d8:06:25:1c:e5:d7:27:9d:92:50:1c:2a:8f:
         ef:89:8f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org