Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/IffaWJL3N8_f7z9eEs8b1Eeihrc.roa
File:                     IffaWJL3N8_f7z9eEs8b1Eeihrc.roa (raw, json)
Hash identifier:          vNmtemRE1r/a2sENUpL7opfSM0nFdwrgpmtyxYOn/0Q=
Subject key identifier:   21:F7:DA:58:92:F7:37:CF:DF:EF:3F:5E:12:CF:1B:D4:47:A2:86:B7
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       98
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/IffaWJL3N8_f7z9eEs8b1Eeihrc.roa
Signing time:             Tue 07 Jun 2022 10:19:15 +0000
ROA not before:           Tue 07 Jun 2022 10:19:15 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        220.214.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152 (0x98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:19:15 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=21F7DA5892F737CFDFEF3F5E12CF1BD447A286B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0b:57:a1:3a:c0:a4:60:81:ba:30:f5:df:25:
                    4e:f4:06:29:e9:c2:3e:d3:1c:c7:34:09:8f:55:ea:
                    cd:18:b6:e1:6b:27:d1:ad:79:ed:28:e5:2d:8b:72:
                    ad:5d:39:cc:8e:4d:e6:a9:c7:82:a8:76:12:80:5a:
                    e8:79:ef:ce:1a:e4:20:c5:be:bc:fd:67:06:30:22:
                    d9:ef:7a:91:7d:b8:ea:43:d8:2f:d0:2b:e0:a3:80:
                    d5:e7:a5:ed:81:d4:db:d8:11:88:c4:0e:ed:6f:1f:
                    6b:da:2a:a0:84:50:5d:96:27:a4:fd:f2:f9:43:90:
                    82:ed:dd:e7:68:69:09:37:d0:de:9d:ad:18:79:ab:
                    74:b7:29:68:75:66:66:7e:48:58:62:77:60:23:c1:
                    bb:44:cf:17:4e:38:6d:1a:2b:b8:8e:a6:63:d4:ba:
                    26:42:be:1f:33:bc:41:99:a8:2e:fd:8f:da:30:77:
                    9d:f3:b0:b8:3b:10:72:9c:7f:7d:20:9e:c1:a8:90:
                    2d:1e:5d:bd:ec:39:ff:b4:f4:44:14:b3:f1:4c:b0:
                    35:cb:ff:29:43:54:de:e9:e5:57:88:08:e3:f3:5c:
                    b8:08:e1:37:a7:d3:f5:40:c2:90:18:b2:e1:f3:80:
                    5b:25:b1:fe:69:80:95:92:f4:07:36:c0:7c:a8:81:
                    28:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:F7:DA:58:92:F7:37:CF:DF:EF:3F:5E:12:CF:1B:D4:47:A2:86:B7
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/IffaWJL3N8_f7z9eEs8b1Eeihrc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.214.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         09:5d:07:ad:db:9b:76:a6:17:9c:50:14:c5:7a:80:34:31:3d:
         1b:1f:fb:b0:fb:15:df:3f:3f:e1:fe:08:31:e9:f2:cb:9d:0c:
         4c:8b:e1:e2:0f:b6:60:5e:fa:9d:be:9e:e5:bd:1c:94:a2:72:
         73:55:29:42:33:43:1e:6a:7f:08:df:f5:77:3a:b8:3d:f0:dd:
         0c:29:96:83:c6:8b:a0:11:c3:6d:9b:d7:b0:f8:82:1d:52:ce:
         9c:e0:d4:2a:22:7f:ec:d8:60:ae:d0:f0:9b:65:e4:8d:4f:3f:
         44:2e:42:63:7b:bc:a1:f3:97:80:39:77:63:c0:d0:a0:d5:7d:
         3d:ea:e6:53:b4:2f:de:6d:6c:eb:65:d3:59:a1:b0:e1:40:cb:
         1a:03:31:d6:ad:0a:df:00:66:5c:7b:15:b4:a8:99:e4:91:d9:
         0e:c3:17:db:47:ce:19:24:86:04:24:4f:d9:4a:e0:bb:c4:cc:
         75:ae:e0:06:3a:4e:cf:1c:04:35:ca:d3:7f:46:fa:a2:5e:97:
         d8:6c:07:4a:4c:ce:d7:da:60:63:81:96:55:6b:d0:41:e6:da:
         a6:c9:fb:7f:84:80:4c:d4:d2:7e:1d:1e:63:86:7b:f2:64:cc:
         44:73:f0:da:51:0c:32:c6:53:0e:31:31:fe:b5:47:d5:4c:3d:
         96:4b:68:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org