Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/KdDxDFexRX_f89BblIeJSG7CdHI.roa
File:                     KdDxDFexRX_f89BblIeJSG7CdHI.roa (raw, json)
Hash identifier:          dfb9sBB1h8qGivkkPPs/ieCCxiC6qDP8tk2Ozx6k3NA=
Subject key identifier:   29:D0:F1:0C:57:B1:45:7F:DF:F3:D0:5B:94:87:89:48:6E:C2:74:72
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       017C
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/KdDxDFexRX_f89BblIeJSG7CdHI.roa
Signing time:             Mon 01 May 2023 01:28:50 +0000
ROA not before:           Mon 01 May 2023 01:28:50 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        113.157.128.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 380 (0x17c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:28:50 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=29D0F10C57B1457FDFF3D05B948789486EC27472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ae:d9:c8:45:ac:fd:01:40:26:a6:23:80:95:
                    bc:3c:78:2a:05:48:a4:77:18:c7:69:d5:f2:41:1f:
                    96:75:54:2f:1c:06:8d:d9:8a:30:28:2e:5d:fc:ee:
                    38:7d:40:93:21:39:91:12:ae:59:41:0f:9e:1f:d7:
                    cd:9c:84:38:cd:5d:b0:4b:2a:70:51:b6:b8:44:d9:
                    9f:61:25:0d:81:18:84:60:b2:4a:8a:ed:41:09:4b:
                    fc:76:7c:03:3d:0e:09:6c:4b:d1:c9:01:0e:f2:db:
                    18:9a:de:6e:b1:93:9e:5b:09:b7:e6:e6:6d:63:85:
                    d0:c0:fa:cb:54:ad:14:3a:2c:b5:b5:fe:5b:c0:b1:
                    a3:56:51:f9:f1:40:01:1d:df:4b:5e:10:cc:40:7c:
                    2d:cc:c5:94:25:a9:56:1a:cd:d6:81:e8:48:4a:bc:
                    16:02:d4:c0:db:3b:57:6b:e9:77:07:75:34:56:5f:
                    4a:7e:72:bf:8e:c2:e9:43:9c:69:fb:c8:4c:86:21:
                    05:36:87:ef:3a:79:42:0e:c3:3b:ed:4a:08:3a:3d:
                    8a:b8:9a:25:5c:8f:a3:7b:99:c7:77:ca:4d:56:cd:
                    78:92:79:b2:cc:8c:ee:4a:97:f8:4a:16:da:da:17:
                    7b:13:95:0d:d7:8b:0a:25:3b:09:e9:9e:3f:03:8a:
                    d7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D0:F1:0C:57:B1:45:7F:DF:F3:D0:5B:94:87:89:48:6E:C2:74:72
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/KdDxDFexRX_f89BblIeJSG7CdHI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.157.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0d:54:ae:eb:b3:bc:82:89:24:99:6c:38:7e:fd:73:a7:ba:ce:
         ed:e7:4d:55:6a:16:3f:e3:75:8f:62:0a:15:41:24:00:5b:5f:
         28:eb:5a:24:d8:2b:24:56:df:9e:85:84:81:4c:6d:81:59:90:
         6f:26:9a:9d:db:8d:ee:54:22:8c:50:07:2a:0b:83:e8:2c:6c:
         4d:75:02:a5:10:13:76:26:4f:3e:6f:af:b2:7e:e0:6d:fd:1a:
         af:af:3f:64:91:42:c0:0c:ca:b3:88:a5:3b:2d:cf:d2:f8:99:
         70:f1:51:76:9a:ea:87:9c:5e:53:fa:fb:cf:96:49:a5:4a:0e:
         c4:09:de:99:c8:d8:be:37:e9:21:c8:f6:c3:51:f4:65:84:3a:
         a8:d0:44:87:4c:ce:f4:2c:51:a8:ab:f2:68:c9:3a:c9:56:b3:
         8c:ee:a5:24:1f:fd:3e:6c:43:9c:a4:ff:ab:0b:34:fb:d9:ec:
         d2:8c:76:f1:4c:ee:38:a8:99:69:27:98:97:1a:f3:e2:0f:db:
         af:a6:13:ec:44:14:fa:7e:c3:32:59:30:13:1a:25:2e:21:14:
         6b:24:f5:15:5a:48:f3:2e:05:d4:a7:56:a8:6a:60:02:35:79:
         fb:2b:59:97:53:82:96:53:b6:b7:c3:06:65:b3:f0:0a:1a:3d:
         f4:36:0b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org