Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/LGVUiHrg0WZ81ljDVum1mwA6kOM.roa
File:                     LGVUiHrg0WZ81ljDVum1mwA6kOM.roa (raw, json)
Hash identifier:          UZarYvw6Q2wsWVySz6LBoou2jwvqSJd9pruAvhoqaFU=
Subject key identifier:   2C:65:54:88:7A:E0:D1:66:7C:D6:58:C3:56:E9:B5:9B:00:3A:90:E3
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       014D
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/LGVUiHrg0WZ81ljDVum1mwA6kOM.roa
Signing time:             Fri 28 Oct 2022 05:53:40 +0000
ROA not before:           Fri 28 Oct 2022 05:53:40 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        121.111.224.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333 (0x14d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Oct 28 05:53:40 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=2C6554887AE0D1667CD658C356E9B59B003A90E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f5:c6:fa:64:c6:6c:c4:60:08:95:aa:9d:78:
                    74:45:05:92:ff:70:94:86:62:2f:df:4a:6f:99:fd:
                    fd:70:da:95:6c:d4:3f:46:91:e8:ea:fb:a3:82:66:
                    fd:ed:95:b8:37:7b:73:43:9c:5c:8d:bb:54:36:5e:
                    77:a2:df:f6:b7:1c:b6:f2:ff:ce:48:16:e7:ef:ef:
                    59:97:95:fa:e1:36:4a:4f:21:1b:8f:dc:36:3f:3a:
                    2b:3d:90:3e:7c:80:bf:25:3a:94:f4:d0:a2:fd:89:
                    8e:7d:a8:98:69:6c:02:21:38:4a:ea:a5:7f:63:91:
                    c3:7a:87:ef:61:92:6d:8e:3a:33:16:9d:f9:58:76:
                    79:9f:93:a8:65:92:cd:64:7b:ce:57:b3:18:d1:99:
                    f5:a8:12:a3:b3:cb:40:ad:55:c6:7e:64:e5:bf:27:
                    f6:95:65:23:c4:ab:bf:57:8f:23:1a:3c:ee:90:12:
                    63:3b:77:94:f7:e9:75:ce:5c:03:ec:2b:27:a5:b9:
                    6b:21:a3:7b:a4:02:64:0e:a9:cf:d0:88:44:c6:b4:
                    1a:33:9f:a2:ec:1b:41:82:59:8d:3e:4a:93:1a:d8:
                    3d:20:03:53:ea:e4:01:97:f8:5f:4b:d9:59:dd:2d:
                    95:af:28:dc:2c:0a:f4:44:9a:b2:a0:4f:55:cb:2f:
                    2f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:65:54:88:7A:E0:D1:66:7C:D6:58:C3:56:E9:B5:9B:00:3A:90:E3
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/LGVUiHrg0WZ81ljDVum1mwA6kOM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.111.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a1:35:3d:35:77:24:20:52:2d:31:e2:ee:64:9b:55:58:13:31:
         c4:ff:5e:c4:5d:1f:21:08:11:d2:d0:7d:9a:91:73:1d:d1:77:
         f5:cc:95:55:df:4b:10:81:e0:fb:78:98:c7:29:2c:68:ab:c5:
         1e:1c:33:85:80:ce:1a:05:09:48:bc:6b:24:87:21:d5:9d:89:
         99:bd:ea:0f:aa:d0:28:64:00:62:d3:46:ad:a8:e0:e4:74:b5:
         05:e1:17:97:c7:97:32:83:a2:56:7b:df:22:ba:a4:78:66:36:
         52:f1:f4:0b:f1:e0:45:9f:18:ed:89:73:ca:46:2a:90:eb:c9:
         92:18:b3:22:e0:f4:06:e7:cc:65:cb:48:30:4b:4c:56:14:b1:
         c3:9e:3c:64:95:bf:7b:05:8e:6d:0b:1a:87:c6:fe:8c:82:4d:
         51:99:89:96:b9:23:f4:f8:ba:a5:bf:1e:7d:86:2c:07:77:c4:
         24:ad:18:91:e6:2d:0c:d2:e0:a1:93:b0:90:f0:b7:8d:5f:54:
         e2:37:cf:f6:b0:ed:bb:32:f4:0a:da:9e:c7:91:74:ac:af:cc:
         73:55:0b:70:1b:f2:e4:63:05:58:35:8f:52:ac:ae:00:be:93:
         75:ff:57:f7:aa:c0:e7:1b:ee:a9:0b:a1:f9:a2:0c:fa:59:d6:
         b7:f4:90:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org