Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/M62oSU6G4gQvDncPMjt-UQdwXVs.roa
File:                     M62oSU6G4gQvDncPMjt-UQdwXVs.roa (raw, json)
Hash identifier:          aDs/G9LoTEwkfxlsDNItGimwI8ci4F+BGOSYOWvrk0s=
Subject key identifier:   33:AD:A8:49:4E:86:E2:04:2F:0E:77:0F:32:3B:7E:51:07:70:5D:5B
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       32
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/M62oSU6G4gQvDncPMjt-UQdwXVs.roa
Signing time:             Thu 28 Apr 2022 09:14:44 +0000
ROA not before:           Thu 28 Apr 2022 09:14:44 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     2516
IP address blocks:        59.131.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Apr 28 09:14:44 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=33ADA8494E86E2042F0E770F323B7E5107705D5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cc:f3:20:77:79:b1:40:a0:23:e0:a9:db:2d:
                    cf:51:35:5c:b8:ea:f8:6c:a5:e2:d8:4e:34:24:c8:
                    96:e7:d1:7d:7d:cf:62:3b:df:e5:6f:88:dd:df:79:
                    c9:91:29:bc:44:ce:46:c1:5c:fc:1b:5f:aa:41:7b:
                    b0:f6:b5:13:67:99:4c:f0:11:b0:53:bf:ee:0f:13:
                    6d:47:79:ed:be:a6:77:52:a5:1b:cc:8d:29:10:f9:
                    78:bc:50:71:ff:9f:d5:b9:07:ef:13:c5:cb:aa:45:
                    8b:f5:e8:d6:a2:c3:e8:1c:24:c9:9d:95:b7:69:cf:
                    64:73:e2:47:b4:5d:cf:ed:47:33:16:e8:6e:25:59:
                    a5:81:75:44:88:53:e2:e4:c8:b9:4e:5b:fd:8b:4e:
                    ac:98:73:4b:be:7d:24:77:86:f0:0b:cc:e5:0b:92:
                    c2:00:f1:ea:e4:82:09:64:98:a0:58:78:c9:4d:4d:
                    98:d6:66:ab:81:fe:5e:c7:cd:01:c0:f5:7c:e3:d3:
                    1b:f3:c8:8d:be:a1:48:77:08:d4:bf:1c:d3:86:ee:
                    b1:7e:73:3e:17:47:ec:66:e0:de:e5:19:bb:31:8a:
                    3a:95:89:eb:13:c5:74:62:e9:ac:8e:07:74:7d:0c:
                    70:70:8e:8a:36:ff:f0:80:72:6c:4c:aa:89:12:49:
                    f0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:AD:A8:49:4E:86:E2:04:2F:0E:77:0F:32:3B:7E:51:07:70:5D:5B
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/M62oSU6G4gQvDncPMjt-UQdwXVs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.131.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         82:32:4a:dc:0b:d1:92:66:82:0d:90:f4:6a:46:e9:7f:39:c4:
         f7:d4:0c:b2:73:7b:1e:9b:e7:dc:1d:de:fd:56:b5:fb:60:e3:
         a9:76:4d:5c:f0:1a:a2:9d:67:e2:e5:de:a4:c8:cf:0c:67:6e:
         a8:6d:f7:18:91:8f:c4:6c:39:c7:6b:7c:6b:fe:06:49:23:a2:
         82:b7:af:93:01:ad:0b:d1:48:a1:49:fb:c6:6f:fa:bb:9a:89:
         af:9b:8a:36:e7:56:c2:e4:19:67:e7:a9:f7:b8:43:cf:3d:25:
         29:77:38:87:04:d4:52:38:7f:cf:cb:eb:25:13:28:8d:07:b8:
         be:0c:53:a6:a1:13:4e:74:cd:4c:1b:d2:9a:ba:e0:a2:bd:ff:
         01:0c:62:98:00:7e:aa:1e:ee:a4:38:dd:56:52:65:28:93:af:
         ae:1d:10:51:ce:0a:c2:e7:1a:5d:f6:2a:b8:ef:0a:3a:35:09:
         99:25:b6:0d:59:6f:92:dd:99:1a:e9:42:eb:b7:93:09:26:8e:
         cf:5e:31:f5:6e:9b:f1:92:0d:e2:1e:33:bd:0e:a2:f4:b0:33:
         bc:77:33:e4:6d:2d:bf:18:95:37:d1:bb:be:0a:42:a0:44:25:
         9e:51:5c:5e:37:ca:9e:83:06:16:44:3c:53:d4:bc:6d:4f:7d:
         a6:93:12:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org