Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Lb0j0GdGQoKzhwUPfffuLuUJScg.roa
File:                     Lb0j0GdGQoKzhwUPfffuLuUJScg.roa (raw, json)
Hash identifier:          BH7QNcxCXUNqzA/FLe/kv5nXV3u3V5VX/wRqqQfFNZk=
Subject key identifier:   2D:BD:23:D0:67:46:42:82:B3:87:05:0F:7D:F7:EE:2E:E5:09:49:C8
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       49
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Lb0j0GdGQoKzhwUPfffuLuUJScg.roa
Signing time:             Tue 07 Jun 2022 09:59:13 +0000
ROA not before:           Tue 07 Jun 2022 09:59:13 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        113.151.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 09:59:13 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=2DBD23D067464282B387050F7DF7EE2EE50949C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c5:5b:77:d0:ef:7e:ef:13:6c:2c:4f:f7:80:
                    c2:54:29:a6:ef:79:2c:1c:8a:fa:57:3a:fa:7b:25:
                    8c:51:72:1b:10:f0:4c:44:da:85:0b:49:3a:8a:cf:
                    6d:b3:dd:01:91:9b:b7:a3:49:65:45:e3:7a:df:7f:
                    1e:d5:ae:3e:d8:1a:54:4b:f4:2c:59:e4:cf:3e:fc:
                    a1:09:94:48:a4:d2:68:bc:8c:3a:22:ea:28:7d:d2:
                    ff:53:62:10:6e:4b:97:58:f9:60:20:3f:a1:87:1d:
                    bb:94:a6:f8:4c:2e:90:8d:5a:c6:b1:56:ca:c1:7b:
                    70:e1:a1:5a:50:62:82:db:cc:86:4b:0e:7b:47:4a:
                    d2:98:9b:35:e3:96:7b:5a:d9:a8:09:0d:ec:f0:b4:
                    52:01:c6:57:9d:85:95:ae:6c:49:06:70:c5:2c:9f:
                    a0:3b:cd:27:39:b2:81:c8:e3:47:7d:67:ad:bd:ae:
                    45:e3:30:e6:7e:1d:34:da:b6:c0:89:30:98:88:74:
                    cf:d4:ed:45:85:e2:7e:64:0f:2e:fe:f7:f0:9e:9e:
                    b8:a2:b8:3a:af:74:61:d2:28:6a:80:ed:26:ae:d0:
                    d8:ac:1f:69:f9:06:5d:29:8c:7c:c9:ee:b0:68:5e:
                    4d:f4:9b:31:21:26:6e:61:95:f6:76:4b:b8:17:b7:
                    78:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:BD:23:D0:67:46:42:82:B3:87:05:0F:7D:F7:EE:2E:E5:09:49:C8
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Lb0j0GdGQoKzhwUPfffuLuUJScg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.151.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         38:67:c8:58:d7:d5:16:d9:a7:ab:dd:3d:a0:c4:75:a9:af:64:
         7d:0b:cd:f5:77:4d:45:4f:34:59:1e:c7:5d:03:1a:cd:7c:57:
         3f:f3:bf:ef:54:55:0f:ba:3a:81:37:03:63:a1:a1:b6:bb:9f:
         0b:bf:84:43:cf:9e:bc:c2:f0:81:c7:eb:d5:a5:9b:2e:b1:d1:
         43:ae:28:74:11:5b:9a:39:e2:71:14:64:60:c9:0e:9f:b1:a2:
         a8:be:4b:86:9c:c0:6d:d8:7b:02:dc:53:ba:b2:2a:7a:0f:ef:
         9a:53:9b:ee:ee:af:4b:fd:86:12:9b:5c:58:5b:95:5e:2e:6a:
         11:9e:7b:41:97:8a:d4:a9:d2:4d:69:91:e8:b8:a6:3f:63:fb:
         7a:77:cc:af:a2:69:86:77:1e:d7:57:74:02:a6:2c:ed:3a:e3:
         7f:68:ba:6e:f5:2b:84:a2:e4:60:b5:8b:cb:d2:07:ce:5d:42:
         3e:05:b0:46:41:6e:dc:10:90:ce:2e:82:81:87:27:76:cc:1e:
         41:cd:ef:a9:8b:dd:01:a1:7d:2d:2b:10:87:98:b5:ff:35:5a:
         8b:e6:29:34:e1:26:a4:04:00:cb:c5:b6:b2:fd:91:15:95:31:
         ac:68:58:6f:b0:e5:7e:35:53:14:d3:07:c7:14:82:70:d7:fd:
         88:25:a3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org