Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/MYgs4VTj8XJOAJlqLHP-7R5E1Cs.roa
File:                     MYgs4VTj8XJOAJlqLHP-7R5E1Cs.roa (raw, json)
Hash identifier:          xkBJpQtQth3QHsX6oPJ04e0uPPTNSGqF9NrXQGdbp1c=
Subject key identifier:   31:88:2C:E1:54:E3:F1:72:4E:00:99:6A:2C:73:FE:ED:1E:44:D4:2B
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       68
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/MYgs4VTj8XJOAJlqLHP-7R5E1Cs.roa
Signing time:             Tue 07 Jun 2022 10:07:14 +0000
ROA not before:           Tue 07 Jun 2022 10:07:14 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        119.105.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:07:14 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=31882CE154E3F1724E00996A2C73FEED1E44D42B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c6:a5:f9:69:c3:7f:68:15:0b:ef:80:89:96:
                    24:69:16:4c:b5:05:b6:1f:c6:3b:13:72:40:33:29:
                    67:f3:91:e3:fa:0f:5d:6c:c2:f4:96:b4:75:66:5b:
                    86:16:46:12:43:6c:da:85:95:4f:af:4b:ee:d5:d7:
                    3d:ec:ab:87:9b:a9:3c:e5:1f:dd:eb:5e:61:c1:78:
                    ff:47:4d:6d:24:53:af:6c:55:67:2d:85:24:f1:e4:
                    1a:58:14:12:26:39:77:64:6b:1e:ba:df:7d:8a:fd:
                    70:01:09:1e:d7:99:2a:fe:90:18:fb:0e:08:49:ed:
                    22:91:76:57:ed:b1:d6:33:ab:49:3b:4a:de:b6:f2:
                    8e:dc:61:b2:24:71:1b:de:b4:45:51:bf:90:43:e0:
                    c8:32:ca:14:d5:b6:e7:62:4d:e9:50:9a:7d:5a:62:
                    dc:86:2e:ba:d4:95:f2:12:0e:e6:3b:e8:ab:ee:ad:
                    73:70:6b:64:45:c3:2e:3d:db:04:2a:4a:08:53:7c:
                    23:d9:41:e9:82:47:1c:bb:94:94:d4:15:ff:fd:45:
                    ac:ff:c3:ed:65:41:cd:9e:2d:9f:8e:e5:f1:de:34:
                    56:93:51:0e:fc:98:f1:95:29:7d:9d:63:15:d7:c6:
                    cc:cb:e9:58:99:6e:66:09:4e:5b:80:17:09:06:07:
                    d1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:88:2C:E1:54:E3:F1:72:4E:00:99:6A:2C:73:FE:ED:1E:44:D4:2B
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/MYgs4VTj8XJOAJlqLHP-7R5E1Cs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.105.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2c:65:cd:7d:81:8f:36:1f:79:02:06:8f:df:49:70:ab:1e:41:
         b7:aa:cf:58:98:25:95:17:c9:2b:2b:bd:fa:56:20:4d:81:a0:
         56:1a:78:0c:82:0b:99:8d:3e:8a:4d:ea:16:6f:20:84:26:78:
         a6:4b:f5:c0:e1:b4:ce:97:aa:84:55:02:08:8a:96:c1:62:e0:
         34:a3:bd:47:7d:24:d0:9d:8e:bf:ac:4c:fd:c4:c1:25:c7:36:
         54:70:7b:1a:b8:ea:ca:57:0d:b0:ae:64:67:26:8d:b0:da:83:
         47:47:84:e0:c2:af:43:05:ec:da:b9:b3:01:fa:e9:e7:2d:e2:
         7f:bd:d7:19:26:b7:e5:74:98:89:64:ef:49:85:8c:c5:fe:61:
         06:c6:7c:9d:aa:f8:55:ee:3f:84:ad:d2:f0:71:10:ef:3b:2b:
         51:1b:39:16:29:91:1a:6b:fb:3b:08:a1:e0:22:80:ac:22:53:
         ed:ca:6d:d1:62:70:d6:b6:79:79:af:78:bd:c8:d6:bb:5f:ee:
         6a:18:0d:d8:6a:52:bb:ba:b7:c5:ac:9f:b3:5e:ac:63:29:a4:
         34:2e:0b:a5:86:d9:ec:ac:4c:ee:f6:c4:6e:86:93:d0:0b:9c:
         f5:fc:27:68:6e:8d:ca:11:d0:6f:1d:0b:a1:7c:5a:b8:e6:76:
         cb:1c:fa:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org