Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/KnI9yCkSMEgUmzS7jmkojdiYLt4.roa
File:                     KnI9yCkSMEgUmzS7jmkojdiYLt4.roa (raw, json)
Hash identifier:          cmzlG2ZW4gc5N/cSAViXyZ0uhJdt05S5AlbqlA+YBhI=
Subject key identifier:   2A:72:3D:C8:29:12:30:48:14:9B:34:BB:8E:69:28:8D:D8:98:2E:DE
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       89
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/KnI9yCkSMEgUmzS7jmkojdiYLt4.roa
Signing time:             Tue 07 Jun 2022 10:13:17 +0000
ROA not before:           Tue 07 Jun 2022 10:13:17 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        124.213.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137 (0x89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:13:17 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=2A723DC829123048149B34BB8E69288DD8982EDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:44:ce:96:ed:c5:e0:c9:65:83:5a:47:6e:4f:
                    e1:ab:15:22:f9:fe:ba:9f:dc:fd:57:cf:63:ca:d1:
                    d0:10:a3:e3:bb:14:28:cb:0d:d2:89:78:1a:8c:cf:
                    d7:25:2b:6b:26:b7:16:c5:52:e1:ce:d7:81:a8:51:
                    fe:be:a3:47:1e:44:5e:74:8a:4e:1d:4d:9b:02:c4:
                    63:21:b6:32:56:f2:44:0e:3f:e6:00:11:4f:6d:26:
                    e7:df:17:eb:05:36:62:82:6e:df:80:62:e0:18:41:
                    7a:05:af:bb:e0:e1:56:e1:c3:55:84:8d:95:fe:e8:
                    5c:2c:06:d1:27:81:92:7e:ef:39:b2:16:ad:a7:d0:
                    6c:b5:9f:4b:21:0b:5f:96:a7:4b:72:80:08:27:79:
                    7c:15:55:96:eb:d3:de:04:fd:dd:4d:48:c7:f5:de:
                    3b:3a:bd:6a:95:e7:2f:d1:5b:83:a1:f8:d0:89:0a:
                    a3:11:5f:f7:c2:65:fc:ad:42:6b:57:6a:14:8f:86:
                    f3:88:ce:08:28:b5:66:30:07:df:87:d4:9c:48:fa:
                    73:57:bd:7d:b6:7b:ed:f2:5d:67:dd:37:b4:10:b2:
                    45:06:45:95:80:b9:83:17:2f:7e:0f:6b:0c:3d:c5:
                    79:3d:6d:70:57:61:ca:4e:70:49:c3:48:b4:fc:e9:
                    3c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:72:3D:C8:29:12:30:48:14:9B:34:BB:8E:69:28:8D:D8:98:2E:DE
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/KnI9yCkSMEgUmzS7jmkojdiYLt4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.213.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         81:98:d9:24:58:81:a8:8c:85:d2:2b:ce:d2:15:09:03:9d:b3:
         63:56:90:fd:bd:76:da:53:76:cf:82:71:87:33:8c:50:d7:9c:
         42:01:98:81:54:48:d4:77:f9:ae:33:0a:40:8e:28:d6:82:7f:
         5f:95:52:11:3e:fc:ef:66:44:87:d0:31:49:63:03:09:fd:4c:
         30:e0:21:38:25:7c:b2:94:17:84:2e:3a:df:0b:48:7f:01:98:
         44:79:d9:d9:22:74:3c:5a:ef:7c:bc:26:e2:f7:5a:db:b8:b9:
         fa:1d:d3:dc:09:9a:65:70:55:2d:89:cd:c2:d5:b6:60:16:0b:
         04:2c:79:67:75:ab:1f:63:69:c3:2d:85:ae:84:0c:d7:d1:8f:
         75:d8:88:99:71:ae:bf:54:5f:f6:bb:27:54:b7:24:84:73:d3:
         f2:8c:d0:e3:1d:30:6f:fd:59:63:11:e9:3d:4e:22:55:0c:f6:
         70:7a:68:e8:f3:24:ed:a4:af:13:6e:7c:ca:af:d9:44:9f:a3:
         36:68:74:3c:5d:97:20:d1:7c:ec:33:65:76:74:a6:97:b8:01:
         b6:a7:a5:e1:8a:ef:27:4b:81:49:e1:61:aa:c2:4a:f4:2f:73:
         ab:d5:f2:46:9c:a9:b5:ee:0a:50:53:b9:38:b4:e3:bb:33:f7:
         c7:2b:a5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org