Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/LuTnwUQHtlmaLthlmJs_O0-e3Cg.roa
File:                     LuTnwUQHtlmaLthlmJs_O0-e3Cg.roa (raw, json)
Hash identifier:          O77uWQXiUpRp1TVnNfFvNmC3rNeUIZVG9p4ISYRgK80=
Subject key identifier:   2E:E4:E7:C1:44:07:B6:59:9A:2E:D8:65:98:9B:3F:3B:4F:9E:DC:28
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       01A0
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/LuTnwUQHtlmaLthlmJs_O0-e3Cg.roa
Signing time:             Mon 01 May 2023 01:30:36 +0000
ROA not before:           Mon 01 May 2023 01:30:36 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        121.111.0.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 416 (0x1a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:30:36 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=2EE4E7C14407B6599A2ED865989B3F3B4F9EDC28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:25:eb:51:9f:6d:8d:54:22:3e:ab:ea:a8:69:
                    3f:67:be:34:19:9a:32:90:55:22:3c:22:64:9b:74:
                    35:3d:40:ff:76:48:75:46:28:82:ff:d4:5d:4e:e3:
                    f8:c1:ae:0e:25:8a:c7:da:02:8f:f1:6c:29:fa:be:
                    93:5a:8a:19:af:13:8b:a2:c7:02:c8:9a:03:0a:0f:
                    8a:6c:0f:73:63:ab:3e:7f:40:6d:b4:e0:96:66:11:
                    ae:08:e2:a9:b0:ce:a9:68:d6:c5:58:00:b3:72:d2:
                    bb:15:61:bc:0c:b3:81:8d:01:9d:22:40:06:fd:cf:
                    41:de:0e:88:c8:45:c0:b3:31:e3:81:38:2a:6f:2c:
                    86:14:aa:29:b4:40:88:3c:2f:de:a9:12:2d:0d:0b:
                    7e:47:8f:62:c3:c3:97:ec:cd:f8:4f:d7:e8:16:5b:
                    06:58:89:e7:a8:12:7a:c7:f3:01:ba:91:42:17:75:
                    58:86:61:a4:7b:ed:83:4e:f4:7a:3e:d1:4c:65:92:
                    d6:f1:6c:3d:6b:9a:41:46:d3:de:1c:12:25:27:86:
                    cc:a1:f3:1a:4f:15:bc:14:f1:be:4c:81:3b:20:d5:
                    8f:fd:82:be:b3:2a:04:af:1b:cb:81:98:e7:d8:34:
                    c2:87:7d:8f:30:a2:97:86:87:22:45:b0:3f:31:a8:
                    0b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E4:E7:C1:44:07:B6:59:9A:2E:D8:65:98:9B:3F:3B:4F:9E:DC:28
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/LuTnwUQHtlmaLthlmJs_O0-e3Cg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.111.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         0a:f9:35:80:2e:d7:f7:5c:d6:23:90:2c:d1:c3:34:14:a8:f7:
         9b:5b:99:0b:a2:b2:3f:a4:19:0f:6e:fa:f2:01:8a:6a:54:54:
         66:83:20:cc:b7:de:b4:8e:ad:61:9d:bf:d3:6d:8d:db:f6:0f:
         00:bd:c0:8a:df:02:bd:bb:e0:83:b3:35:8b:fa:4f:d9:67:5e:
         0c:96:23:12:78:fa:93:c4:4f:b0:76:56:11:81:e2:9e:6e:9f:
         53:af:20:1a:d2:8d:3f:27:5b:d0:1e:22:a6:c2:3a:e3:85:53:
         cf:02:d4:d1:99:d6:61:8b:20:01:2e:04:cc:48:24:b7:6d:c5:
         de:ec:17:12:a7:ff:91:33:a0:b2:04:14:08:82:c8:af:af:ce:
         0d:13:36:90:8a:48:09:a7:b6:8e:4d:63:7f:c6:1e:1d:43:be:
         90:5c:b6:8b:9f:68:3e:91:63:a3:77:8c:8e:a3:21:a9:d9:a3:
         5f:bd:10:fd:20:d6:90:a4:cb:40:d8:f0:4f:5b:52:29:df:21:
         09:0d:42:87:fd:43:9a:3d:66:24:67:72:0e:7e:bd:8b:da:b3:
         d0:63:2f:b3:63:d1:c9:0c:52:25:ee:9c:87:7d:62:7e:84:5e:
         fa:3d:cd:ab:78:56:97:e4:86:14:ed:71:85:a2:08:eb:26:b8:
         ed:57:00:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org