Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/KkR84thLx-25x3lbat6IOxAOMZk.roa
File:                     KkR84thLx-25x3lbat6IOxAOMZk.roa (raw, json)
Hash identifier:          WHC4p/jMKT8VlXzA6JSQAJbY9kli1uLyzaMNBiCR8Nc=
Subject key identifier:   2A:44:7C:E2:D8:4B:C7:ED:B9:C7:79:5B:6A:DE:88:3B:10:0E:31:99
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       016E
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/KkR84thLx-25x3lbat6IOxAOMZk.roa
Signing time:             Mon 01 May 2023 01:28:43 +0000
ROA not before:           Mon 01 May 2023 01:28:43 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        113.147.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 366 (0x16e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:28:43 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=2A447CE2D84BC7EDB9C7795B6ADE883B100E3199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:2f:01:80:b3:16:dd:32:63:04:c0:21:9d:a8:
                    e7:c8:4a:e9:ed:f5:85:cc:73:61:91:e9:19:a0:97:
                    ad:21:3f:c2:f8:d3:09:62:00:27:ac:b2:c1:10:a2:
                    75:a1:07:10:04:10:aa:09:08:10:11:ed:e3:ce:b3:
                    1b:49:c2:09:1e:28:50:9f:43:49:fb:d8:3f:ba:52:
                    13:97:76:ba:20:64:83:7d:24:d7:cf:1f:a0:38:de:
                    bf:a7:6a:08:44:39:87:9d:fa:71:70:94:ec:ee:22:
                    0e:a3:0e:7f:8d:da:8b:01:9f:da:b5:62:ee:95:b2:
                    af:a9:8a:4d:6b:83:d6:e8:fd:80:0f:f2:26:b6:87:
                    4a:0b:65:99:ce:24:98:a4:c2:d0:8f:9f:01:1d:46:
                    3f:02:bd:72:0e:e5:70:b5:d5:41:1c:a9:a4:92:ab:
                    c3:1b:0d:b9:eb:df:eb:76:c3:6e:d9:bf:3e:07:ba:
                    d3:ea:5c:95:e3:e1:e5:27:3b:60:ef:d8:17:c6:d8:
                    e1:11:d7:00:05:75:f2:f5:fc:0e:39:62:18:2d:12:
                    60:5f:0c:dc:fe:e0:a3:67:be:f1:6a:fb:cd:04:ac:
                    e0:df:74:7b:86:87:9c:51:7e:31:80:75:bd:ac:ab:
                    7c:c8:f3:8d:e0:15:03:1f:fc:7c:fc:62:31:7f:d0:
                    04:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:44:7C:E2:D8:4B:C7:ED:B9:C7:79:5B:6A:DE:88:3B:10:0E:31:99
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/KkR84thLx-25x3lbat6IOxAOMZk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.147.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         80:3a:6c:d1:3a:00:a7:01:44:10:c1:db:76:0a:eb:92:42:eb:
         c9:b7:12:fa:46:31:96:2e:b1:97:6e:b8:e2:65:8e:69:41:33:
         a4:58:d9:a6:14:25:ec:3c:c1:ac:2a:a0:b2:fa:51:3d:1d:d1:
         e3:ea:23:fc:a4:78:89:01:31:52:f1:b6:4e:84:16:bf:a6:0d:
         89:90:01:b7:b0:7e:78:85:a0:f4:74:b2:c0:26:34:b5:43:b1:
         d8:95:c9:c2:bd:b9:3b:87:20:7d:0b:22:81:76:e2:5e:e6:11:
         5d:72:8b:7f:97:92:51:ed:a9:6c:01:79:18:15:e1:0a:de:df:
         c4:22:0f:04:e1:d2:7b:98:5c:91:f6:99:53:c7:68:9a:48:45:
         2d:9b:c3:2a:66:c8:4a:f8:37:39:cb:d0:ed:a3:44:71:e1:05:
         6c:e3:1a:86:ea:fa:c4:8e:50:e2:00:8f:4e:19:f5:9b:85:a1:
         fb:a1:e4:63:32:44:20:e7:54:70:24:aa:01:87:2e:a4:a8:0c:
         ff:eb:92:b0:90:bb:35:8a:89:7f:ce:c1:da:3a:16:63:5d:b6:
         d4:84:9a:3b:16:8f:b4:44:bc:96:e1:3a:60:02:b9:44:a9:66:
         1e:fc:54:8b:d9:31:18:47:9d:a0:7a:b5:f1:e1:65:31:9c:bf:
         87:5d:25:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org