Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/LCPZ24jUw-eEQq1jqWbOcBNyR9I.roa
File:                     LCPZ24jUw-eEQq1jqWbOcBNyR9I.roa (raw, json)
Hash identifier:          M0Pitvz/9CTobeu+ebcWDtD16Vi7sdxSx9ljkyaU8Yo=
Subject key identifier:   2C:23:D9:DB:88:D4:C3:E7:84:42:AD:63:A9:66:CE:70:13:72:47:D2
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       01ED
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/LCPZ24jUw-eEQq1jqWbOcBNyR9I.roa
Signing time:             Mon 01 May 2023 01:33:48 +0000
ROA not before:           Mon 01 May 2023 01:33:48 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        111.101.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 493 (0x1ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:33:48 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=2C23D9DB88D4C3E78442AD63A966CE70137247D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:40:f7:a5:17:97:89:c7:61:a6:22:d5:f0:b5:
                    0d:05:5c:98:7d:c2:ec:ff:36:6f:66:81:7f:0f:63:
                    40:5c:18:a0:c1:d8:d9:32:9c:9f:29:21:c2:c2:da:
                    67:c4:b7:f9:e4:af:c2:4b:ee:ed:c3:f2:f7:89:66:
                    56:e0:c6:d0:2b:16:98:21:f2:f0:c7:3b:f9:6a:76:
                    e4:bb:68:57:ed:f3:3a:65:3c:11:bf:3b:c6:26:fe:
                    e9:4c:f8:60:b3:c4:30:40:ff:22:da:2b:1d:d7:b1:
                    c5:04:2f:e6:e4:b1:a4:58:e8:64:42:1f:c0:c7:21:
                    79:c9:af:83:0e:e0:fa:c2:3a:1c:4c:3b:31:72:94:
                    a1:fe:dc:5a:f5:7d:f7:97:81:be:3b:ba:de:01:6a:
                    94:66:d5:9a:07:ec:3a:c1:9c:1c:6a:2f:9d:d0:96:
                    b6:35:87:cb:65:18:24:e2:fe:0e:fb:32:11:ca:fb:
                    32:3d:d4:d0:b9:bc:5d:03:9c:6d:b3:b6:6c:b8:7e:
                    0f:d6:34:ab:ad:50:e3:c3:f5:3b:a2:4c:27:3a:da:
                    c3:c6:fc:e4:73:2e:bb:64:9c:00:ba:8c:f7:de:3b:
                    e4:57:49:4f:45:e5:2d:93:75:66:98:c5:16:c9:3a:
                    6d:28:bd:f3:82:d8:11:3d:bc:86:81:68:f4:96:9a:
                    e3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:23:D9:DB:88:D4:C3:E7:84:42:AD:63:A9:66:CE:70:13:72:47:D2
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/LCPZ24jUw-eEQq1jqWbOcBNyR9I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.101.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         01:b8:52:2c:5b:34:cd:69:fe:f7:17:b7:76:dd:81:28:0d:90:
         cc:dd:35:5d:8b:60:50:6e:fd:df:06:21:1b:5d:cf:4d:2a:f8:
         1e:64:af:5e:bb:47:ff:92:1f:8f:c3:f6:3e:d8:b2:03:19:4c:
         40:32:a5:59:66:d2:d6:a8:f9:4b:24:30:af:e7:0f:09:fb:c3:
         b3:cf:da:b6:ce:50:ed:be:5a:bd:48:2a:37:0e:18:a1:e6:4d:
         bb:9f:f5:4d:83:a9:5d:6b:e2:c1:bd:83:a7:01:27:70:e2:82:
         72:fa:a3:12:49:74:98:68:0f:09:0c:42:ea:16:88:22:52:f2:
         37:a0:41:5b:41:8d:6f:2b:f7:40:62:3e:9d:53:42:2d:35:93:
         17:1a:34:53:5a:28:0d:15:42:fc:ef:2c:ba:7f:14:82:9d:c7:
         51:cc:ee:db:a7:d9:f8:74:5a:8a:bb:51:15:6b:e1:24:62:49:
         f9:55:a0:0e:c6:6e:12:74:7a:dc:59:b6:8a:b2:c0:ec:c6:78:
         30:9e:0c:f1:3b:10:28:62:d4:0d:b4:4f:f8:8b:35:ac:59:fa:
         a0:55:7c:98:eb:ea:41:30:be:2f:23:0a:f0:a5:6d:bc:cd:5c:
         ee:9d:c3:09:af:ec:f4:89:7e:0f:9e:17:1a:a0:79:7d:bc:03:
         61:f2:31:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org