Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Ls0icf_wyY7t7jACrLbNkn8z4YU.roa
File:                     Ls0icf_wyY7t7jACrLbNkn8z4YU.roa (raw, json)
Hash identifier:          YjG6RvXfTtTnLcvJTTr1Knk3ynUnq4fM4fGY6EWpU7s=
Subject key identifier:   2E:CD:22:71:FF:F0:C9:8E:ED:EE:30:02:AC:B6:CD:92:7F:33:E1:85
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       CF
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Ls0icf_wyY7t7jACrLbNkn8z4YU.roa
Signing time:             Tue 14 Jun 2022 09:27:57 +0000
ROA not before:           Tue 14 Jun 2022 09:27:57 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        182.248.0.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 207 (0xcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun 14 09:27:57 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=2ECD2271FFF0C98EEDEE3002ACB6CD927F33E185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:2a:e4:98:7a:5c:d7:6c:0d:02:de:0f:b9:d0:
                    6a:43:0f:7f:6b:bc:ec:11:c4:84:4a:8e:9d:25:38:
                    88:56:c1:16:5c:47:f8:f1:d0:0e:78:c1:9d:7d:7e:
                    28:e4:e5:ea:46:b1:af:93:b8:ed:8e:95:51:a1:0d:
                    80:9b:5e:59:47:81:af:35:21:50:ba:d4:e1:87:aa:
                    b0:38:90:d0:f1:0e:41:e1:b0:26:a5:23:0f:fc:50:
                    85:a0:1c:73:01:85:6a:d3:60:fa:09:45:08:f5:cf:
                    c4:aa:60:1b:2b:6f:6a:7b:39:5e:5f:e2:79:fd:0b:
                    d8:f3:95:08:1d:ba:62:95:bb:17:71:49:67:0a:ae:
                    5a:b2:52:80:f7:ac:a7:20:6c:46:4c:4c:ed:f9:04:
                    1b:8c:fd:33:02:fb:b1:80:04:d2:d3:34:6c:1a:fb:
                    9a:57:81:b2:d4:56:d7:45:06:b7:c0:82:bf:57:52:
                    86:e2:cf:95:87:13:a6:83:6b:8f:9e:2b:f3:e1:06:
                    d6:99:ae:c8:1e:bb:0a:bb:cc:f4:c4:c3:c5:c0:90:
                    77:ab:e0:d4:35:b7:f1:91:21:85:df:ab:77:5f:fb:
                    39:50:eb:01:a1:22:ed:1b:6d:ea:3c:7b:03:17:a7:
                    dd:07:06:59:71:3c:1d:c1:2e:b4:7a:a4:3f:38:4e:
                    cd:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:CD:22:71:FF:F0:C9:8E:ED:EE:30:02:AC:B6:CD:92:7F:33:E1:85
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Ls0icf_wyY7t7jACrLbNkn8z4YU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.248.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a9:db:c8:f3:66:38:84:16:72:ca:e7:30:7e:58:4c:ca:f1:4c:
         6a:84:5d:fd:a9:c3:ae:6b:6c:c4:cc:b7:d9:b2:87:bc:41:b4:
         5e:06:0c:c1:25:9f:ab:a3:c7:d6:5e:89:01:35:14:af:29:3f:
         ab:c7:6f:4f:e4:c9:aa:c9:39:d0:af:af:ab:70:b9:94:bc:2f:
         1e:34:8f:4b:7a:2e:bb:53:52:49:5d:61:47:00:cb:5c:cf:8f:
         7c:5f:29:69:66:5b:f5:16:4c:6c:8e:16:23:48:75:50:aa:71:
         c7:c6:59:35:34:c8:d2:7f:b3:0b:b6:b0:9b:b1:f4:b1:0f:af:
         5d:63:32:72:05:48:9b:9f:89:ac:86:a4:9d:3b:63:c2:22:56:
         7e:7a:f7:c5:24:10:c0:51:e7:67:ca:4f:0e:63:e2:78:30:9f:
         6d:be:b3:01:e7:44:92:05:a4:76:fb:02:50:54:f9:3d:17:6f:
         29:95:9a:ee:c3:68:0b:e6:3a:46:2e:ea:26:da:71:98:58:c5:
         29:11:9b:58:65:42:75:52:19:e7:31:34:97:f0:7a:3b:6b:2a:
         9c:64:ef:95:a1:cc:4f:9f:c7:71:3a:e1:1e:ad:f0:18:e9:f6:
         56:24:37:38:ba:ad:09:3c:25:b4:34:58:1c:24:55:e5:24:ac:
         66:ca:01:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org