Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/K5cLDPAlqicDVgp5rJgA2V3TGD0.roa
File:                     K5cLDPAlqicDVgp5rJgA2V3TGD0.roa (raw, json)
Hash identifier:          YDcbDj3ntNhBjFuvK4fxB1BqN1ogiPXt6fTJc6aV/WE=
Subject key identifier:   2B:97:0B:0C:F0:25:AA:27:03:56:0A:79:AC:98:00:D9:5D:D3:18:3D
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       6D
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/K5cLDPAlqicDVgp5rJgA2V3TGD0.roa
Signing time:             Tue 07 Jun 2022 10:07:17 +0000
ROA not before:           Tue 07 Jun 2022 10:07:17 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        121.105.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:07:17 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=2B970B0CF025AA2703560A79AC9800D95DD3183D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6f:74:a1:fb:82:fc:7d:84:56:f2:9e:27:e9:
                    e6:00:aa:4a:6c:84:07:3e:47:84:15:f9:db:5c:6c:
                    16:72:09:c6:05:38:0c:8f:9c:d9:f8:28:d9:db:d3:
                    01:f5:53:cd:e8:7b:5a:f3:8d:a0:7b:9f:3a:61:f6:
                    c7:18:50:28:2d:0c:02:d1:3b:24:6d:da:bc:38:f6:
                    0a:9e:21:2a:3c:21:d2:03:2a:b9:bd:34:12:85:f2:
                    fe:58:49:7f:51:43:5e:33:df:5a:ba:77:4d:4c:33:
                    ee:60:79:16:db:0f:be:61:c8:cd:03:61:ab:53:13:
                    f9:70:55:ba:ac:29:47:32:59:c8:e0:75:78:b2:ea:
                    97:9b:d4:52:9a:20:f1:21:4c:cd:f5:d7:10:53:10:
                    9e:6b:2e:6c:8c:d0:92:0e:97:af:7b:cf:f4:61:e0:
                    57:52:41:21:af:fb:cd:35:52:8b:ad:87:f4:df:c3:
                    c4:b3:99:15:78:f5:4c:e4:a2:61:f1:c9:6e:76:c2:
                    a2:cf:38:ac:0f:44:3b:4d:06:01:07:ab:14:37:0b:
                    83:51:82:57:a4:aa:4c:48:a6:5e:b3:10:ff:0f:2e:
                    82:64:88:c0:25:07:40:cc:59:a2:4e:c6:f8:8a:06:
                    9f:89:2d:41:5b:2a:40:42:06:86:5f:09:01:6f:93:
                    17:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:97:0B:0C:F0:25:AA:27:03:56:0A:79:AC:98:00:D9:5D:D3:18:3D
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/K5cLDPAlqicDVgp5rJgA2V3TGD0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.105.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         15:85:5e:2b:11:1f:65:43:0e:64:b8:c9:d0:d3:27:1d:54:a6:
         f1:37:6c:03:06:6e:91:bb:8b:d2:79:fb:f6:bd:8b:34:ee:63:
         27:08:e1:15:d1:cd:42:fe:4b:c3:b0:92:25:db:c7:55:6d:04:
         8a:23:4a:cf:41:4f:03:25:e8:c2:af:8f:78:9f:45:50:43:15:
         e4:ba:d5:10:52:44:27:97:32:51:93:e4:e6:4f:77:5b:de:f5:
         a2:e1:37:a8:aa:29:23:3b:55:8a:87:36:27:3a:2e:37:ff:0f:
         a1:7d:32:24:ce:f0:ef:fa:83:08:6b:7c:e4:56:d4:c0:d9:53:
         d4:d9:d5:1e:98:5a:6c:d2:fa:0f:00:7c:ad:0b:23:11:2a:74:
         c3:b0:b3:e0:b5:87:32:e0:ec:79:77:e6:32:75:8f:60:99:43:
         83:d0:ba:39:69:75:54:07:34:4c:7c:6b:7a:cb:ca:20:01:dc:
         f9:02:79:e4:02:bc:30:ac:b4:f7:eb:2f:50:b3:cf:52:1f:04:
         1e:49:84:4f:d2:c8:f6:03:8c:5e:a8:0b:97:e6:bc:ba:25:b5:
         ce:37:18:59:09:1c:97:72:4c:9e:41:b4:60:93:94:dd:6c:d2:
         f3:a9:a5:9c:49:88:fb:24:08:1b:ce:04:55:dc:81:ab:0b:25:
         4e:3e:bd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:08 2023 by rpki-client on console-ams.rpki-client.org