Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Myy8Rklj6AuG4rS3hfy-gxwQn1U.roa
File:                     Myy8Rklj6AuG4rS3hfy-gxwQn1U.roa (raw, json)
Hash identifier:          tMRLjn1+OClKIqp1xHZnn9UtY2PN9c/s+fPKpdTyWVE=
Subject key identifier:   33:2C:BC:46:49:63:E8:0B:86:E2:B4:B7:85:FC:BE:83:1C:10:9F:55
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       5D
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Myy8Rklj6AuG4rS3hfy-gxwQn1U.roa
Signing time:             Tue 07 Jun 2022 10:05:16 +0000
ROA not before:           Tue 07 Jun 2022 10:05:16 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        118.154.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:05:16 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=332CBC464963E80B86E2B4B785FCBE831C109F55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:eb:8f:77:14:5e:8e:a0:ce:06:19:f5:03:7d:
                    d4:90:01:8f:c4:0a:d5:c7:3c:a7:53:78:d1:0d:c3:
                    b6:4e:71:f6:ad:54:ec:f1:eb:83:d9:30:11:d9:3d:
                    a3:a3:82:21:08:86:e1:f4:e2:a6:fe:43:46:1d:fa:
                    cc:0b:e5:1c:fb:cf:1f:7d:10:40:1b:30:b3:b3:15:
                    a4:df:d4:f2:64:4f:26:1c:b7:ae:08:5e:c5:c8:01:
                    08:f9:1e:f8:fa:13:ca:0e:71:06:34:9a:09:2c:b4:
                    75:82:1c:49:29:ed:26:80:a3:6f:17:9d:e5:06:dd:
                    ce:c4:17:c4:78:8b:fc:aa:f9:61:d3:1a:6b:e8:c6:
                    12:3e:f0:3b:b2:5d:5d:86:67:75:4f:39:20:02:20:
                    99:a8:da:38:1c:e5:51:ad:13:48:fc:db:86:1e:d9:
                    16:c8:20:dd:c2:53:38:e1:00:e9:35:f5:b8:bb:37:
                    c7:67:8c:fd:73:ad:50:75:a4:35:f1:33:7e:ca:2c:
                    46:8d:76:9c:37:ef:7e:60:4f:33:28:cd:d9:e4:71:
                    3b:f7:78:7c:8a:34:fd:98:03:38:03:0b:f8:5f:47:
                    24:0d:56:70:f8:4d:7d:1b:0c:3c:8f:2f:f4:08:02:
                    dd:13:b4:8f:30:75:4f:67:a8:bb:8e:75:38:87:c4:
                    8f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:2C:BC:46:49:63:E8:0B:86:E2:B4:B7:85:FC:BE:83:1C:10:9F:55
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Myy8Rklj6AuG4rS3hfy-gxwQn1U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.154.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         37:ad:df:0e:75:0f:59:f5:34:8e:c2:d0:44:c8:17:3b:27:fb:
         a3:9b:4e:d6:0f:76:6d:19:5d:c2:20:b0:46:cc:59:2b:a7:dd:
         0e:d8:75:e4:82:f4:64:43:ce:45:71:5d:93:ee:ff:b6:bd:cb:
         3f:93:08:8a:8c:4a:e9:a2:8b:58:85:46:14:c7:5c:f3:88:87:
         e9:ff:63:13:41:a9:13:e4:ab:0f:0d:65:23:8a:19:6b:2c:63:
         b0:ff:64:2a:10:73:92:56:dd:87:e8:e8:c3:b1:f6:34:b3:ef:
         19:ed:78:ff:2d:30:58:52:a4:65:15:6d:2a:67:26:f4:31:e7:
         79:c6:11:da:fc:3c:08:bb:2d:56:7b:35:64:37:c5:8f:f1:50:
         e4:a3:80:f2:51:35:b6:05:60:9f:0f:37:96:99:04:98:fe:e0:
         e3:b5:ff:31:4b:2c:5b:64:6a:56:12:dc:ea:1b:91:9d:b5:5a:
         3a:b6:5e:ec:21:c7:fb:62:45:0f:9a:e6:0f:44:d7:0a:14:12:
         fe:97:89:41:4e:00:fb:82:3a:ea:b3:19:d4:dd:f0:21:7f:fe:
         80:5c:1a:2b:f5:a2:6b:44:6e:22:cb:50:68:43:9a:87:b2:ef:
         d5:c4:49:93:b7:9e:f4:f3:78:9f:89:f2:91:59:99:a6:ff:00:
         8a:93:78:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org