Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/LFcH6Sau03JcncaAtC8V42gPd1I.roa
File:                     LFcH6Sau03JcncaAtC8V42gPd1I.roa (raw, json)
Hash identifier:          KoDnrdd6JFrS06M3mYDW1rMFiM7bJRU13NSdQVWbBO8=
Subject key identifier:   2C:57:07:E9:26:AE:D3:72:5C:9D:C6:80:B4:2F:15:E3:68:0F:77:52
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       DC
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/LFcH6Sau03JcncaAtC8V42gPd1I.roa
Signing time:             Tue 14 Jun 2022 09:30:10 +0000
ROA not before:           Tue 14 Jun 2022 09:30:10 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        49.132.0.0/14 maxlen: 14

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 220 (0xdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun 14 09:30:10 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=2C5707E926AED3725C9DC680B42F15E3680F7752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e0:d9:36:3f:f4:8f:1e:c1:40:35:91:3c:d2:
                    f8:07:dc:71:62:ce:62:0c:57:fc:60:84:06:b8:9e:
                    01:a6:ea:27:16:7b:ca:de:a8:39:62:af:43:49:fb:
                    c9:e9:ec:fe:66:c8:a5:cd:b8:a7:e1:b8:a8:4f:51:
                    11:f1:4e:0b:0b:1c:79:7d:c8:ba:be:59:f9:c7:3e:
                    47:3f:18:0a:bd:1e:c1:68:f1:25:d0:db:ba:51:1f:
                    a2:1a:cc:03:76:16:ed:10:a9:eb:40:ea:b9:8a:b2:
                    ca:6e:74:24:da:f9:ae:12:ec:81:c4:df:0b:d0:be:
                    1b:6f:db:d8:7e:e6:a2:17:76:41:eb:ec:74:2c:ba:
                    92:ab:7e:67:f0:76:d5:f7:12:23:a2:2e:85:11:51:
                    00:79:d2:93:e0:19:d2:95:cb:2e:51:0d:2e:ca:33:
                    be:d6:e4:35:e7:e1:1b:8a:f4:43:fc:c2:e3:df:59:
                    3a:93:92:4d:0b:f3:51:de:51:35:a6:6f:02:a2:19:
                    bb:38:7f:d8:7e:5e:74:3c:05:0e:21:a1:e2:3a:7f:
                    de:18:ac:b4:9a:7a:e3:df:69:96:f7:e9:a0:dc:64:
                    c8:2a:fd:cf:9f:5a:49:cb:07:bc:d5:f9:09:3a:94:
                    ba:85:b3:bd:39:b4:a6:ec:66:c0:70:d2:88:d4:91:
                    27:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:57:07:E9:26:AE:D3:72:5C:9D:C6:80:B4:2F:15:E3:68:0F:77:52
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/LFcH6Sau03JcncaAtC8V42gPd1I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.132.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         39:bb:ec:9d:49:6a:cf:f3:66:37:0d:29:39:6e:70:f6:64:e1:
         0b:bd:a5:6a:df:2d:40:b1:e7:40:7f:5c:60:bd:79:f5:23:de:
         44:3d:15:7e:91:83:75:9d:a4:b4:d4:99:be:12:6e:14:dc:29:
         f2:20:3c:26:ae:22:e7:c8:52:02:82:97:42:db:0a:7d:57:36:
         0c:ba:96:b8:dd:20:29:e4:fc:3e:a3:fa:2b:a2:46:be:90:cc:
         f1:a2:aa:8e:2f:c1:2b:90:53:60:5e:c3:51:c3:95:70:5a:6d:
         59:11:c6:11:09:71:7f:f7:b4:32:b2:b7:4b:6c:68:c2:a3:12:
         05:7d:18:6f:56:a9:92:b3:c5:ec:be:1f:b7:94:cf:64:da:aa:
         7d:72:0d:f1:1b:ec:6a:73:bb:bb:ad:5e:ed:2a:1e:39:05:7c:
         9f:18:86:5c:eb:65:26:8f:8f:0a:91:b2:a5:85:4b:45:3e:07:
         22:e9:3c:b2:7d:34:aa:29:d0:a1:64:67:95:b3:20:64:8b:87:
         02:1d:fe:1a:49:b4:cb:c6:65:a4:9e:77:69:35:51:be:a9:b0:
         d1:a3:69:30:b7:64:65:ea:95:05:e5:29:a5:c6:6c:31:cd:ee:
         7f:77:d5:15:10:56:89:03:7a:14:db:3d:39:8f:4f:99:51:e8:
         c3:5a:ab:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org