Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/KzvXicORhxt5oLmpGa2K1VhcJHg.roa
File:                     KzvXicORhxt5oLmpGa2K1VhcJHg.roa (raw, json)
Hash identifier:          QNWOXf10Z+6m3DFXeJb2ukijyKt/pL6k4qPV4CWnpks=
Subject key identifier:   2B:3B:D7:89:C3:91:87:1B:79:A0:B9:A9:19:AD:8A:D5:58:5C:24:78
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       CE
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/KzvXicORhxt5oLmpGa2K1VhcJHg.roa
Signing time:             Tue 14 Jun 2022 09:26:01 +0000
ROA not before:           Tue 14 Jun 2022 09:26:01 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        27.80.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 206 (0xce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun 14 09:26:01 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=2B3BD789C391871B79A0B9A919AD8AD5585C2478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d0:44:27:4a:8e:ab:6a:e8:b4:3a:b3:46:e5:
                    30:76:a4:1d:9e:d4:ff:29:00:7e:89:53:95:79:23:
                    57:af:53:aa:dd:7e:68:fc:51:af:b6:5a:56:45:e0:
                    4f:60:cd:fa:32:1f:1e:ae:81:a3:e0:95:45:e3:c8:
                    88:4d:ca:99:aa:4a:f3:86:47:36:09:d7:28:fa:0a:
                    aa:70:52:27:3e:b2:09:a9:dd:46:5e:16:ed:ba:40:
                    f5:16:f2:77:57:f3:f5:f8:13:2e:77:8f:d9:52:ce:
                    cc:81:d3:76:9c:e6:75:58:8d:8a:eb:8f:75:05:6a:
                    4a:29:86:4d:d2:bd:bc:13:40:52:c2:96:ed:44:e0:
                    dd:9d:bb:41:38:23:f6:50:c8:12:64:94:38:29:6d:
                    16:52:ab:63:1c:ba:74:52:28:bd:b5:ec:2b:98:b1:
                    db:84:1a:68:61:d1:87:14:70:37:6f:bb:ba:ab:70:
                    64:39:d0:e7:b0:71:b0:eb:1f:9c:37:24:35:b6:d1:
                    e1:7c:57:d1:3b:0f:ee:50:60:51:49:34:cf:c6:76:
                    f6:7b:2c:a1:ec:8a:0b:14:69:43:21:de:88:0c:ac:
                    b7:dd:49:18:a6:36:e4:65:d4:3e:0c:6b:af:22:6d:
                    f4:fc:6c:9b:46:d7:67:de:f9:69:42:72:be:2f:e4:
                    99:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:3B:D7:89:C3:91:87:1B:79:A0:B9:A9:19:AD:8A:D5:58:5C:24:78
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/KzvXicORhxt5oLmpGa2K1VhcJHg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.80.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         10:75:c4:87:e9:37:0b:7d:09:3e:b2:bd:95:e0:ee:a1:54:79:
         0a:b7:7b:33:21:e0:8d:01:30:3a:d0:7f:11:d3:f4:dc:2a:14:
         f6:37:3d:de:a4:20:62:37:70:fc:a4:cb:f6:ce:88:b5:b1:a0:
         af:79:6b:79:d1:07:47:33:d0:fd:a7:9d:58:8f:a7:0a:13:69:
         b2:11:b5:d5:6c:62:66:e5:3c:3b:5c:3e:87:c8:bb:b3:ad:03:
         9e:6f:1f:c8:21:52:c0:05:66:2b:cb:2a:80:13:74:45:85:c2:
         41:76:93:1a:e2:ba:04:dc:1f:66:31:03:53:52:cf:5d:be:3b:
         a4:8b:dc:3f:74:77:0b:e7:ac:f0:7b:4f:71:ca:b1:57:0f:fd:
         d3:c0:10:9c:bd:c8:6b:52:03:95:5d:f0:06:74:20:df:e0:06:
         14:37:7e:cb:8c:7f:df:a4:ae:52:7a:86:29:cf:23:e9:05:9b:
         5d:ad:83:79:b6:43:8c:03:f3:f6:0f:34:e4:89:66:b5:15:f6:
         80:0c:ea:4f:bc:a3:d9:91:51:a0:4d:3b:76:35:12:ba:88:bd:
         04:3b:f4:f8:d2:bd:21:24:b1:d4:39:1c:75:53:26:3c:b2:5e:
         a1:6a:b3:41:0d:6c:2d:10:05:52:96:20:18:9b:99:d5:47:e4:
         60:6c:91:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org