Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/N2ABGNdJ8X7sMeBK2zp9bUCH1fk.roa
File:                     N2ABGNdJ8X7sMeBK2zp9bUCH1fk.roa (raw, json)
Hash identifier:          6/Uf9l+DNmDZRa8PtKsAJ4wBEXrBIRlDwvLFVoRmBUA=
Subject key identifier:   37:60:01:18:D7:49:F1:7E:EC:31:E0:4A:DB:3A:7D:6D:40:87:D5:F9
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       BC
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/N2ABGNdJ8X7sMeBK2zp9bUCH1fk.roa
Signing time:             Tue 14 Jun 2022 09:13:55 +0000
ROA not before:           Tue 14 Jun 2022 09:13:55 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        222.4.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun 14 09:13:55 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=37600118D749F17EEC31E04ADB3A7D6D4087D5F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c0:c8:74:65:c1:62:0b:e9:37:c9:6c:1e:2d:
                    c3:d7:4a:0c:59:6e:10:be:1a:f6:ee:3b:c4:57:22:
                    89:5c:cd:d9:9a:a0:15:2f:f3:39:48:80:53:3a:91:
                    6d:04:c6:8e:e6:d9:06:12:db:f0:4a:fc:70:ff:2d:
                    42:f1:95:ee:f7:0e:ff:b0:3e:9f:9e:45:2e:20:ff:
                    89:d7:6e:17:51:8f:13:02:da:9c:a6:d5:96:32:a9:
                    11:34:82:56:b9:b9:58:94:85:58:d0:8d:3c:2f:be:
                    ce:fa:66:c8:44:24:f8:0f:00:62:ed:9a:21:08:4d:
                    1f:bd:bc:19:38:b8:47:88:c9:67:0f:4b:59:ee:46:
                    ea:cb:33:37:f1:b4:a4:1d:3e:95:a6:4b:72:a7:ad:
                    7f:bf:0b:68:8f:6c:b3:26:e1:37:8f:39:21:83:49:
                    4b:fd:d8:85:31:34:55:05:0c:14:f7:ee:e3:2d:e1:
                    49:96:eb:ff:c1:5b:6b:8a:aa:ed:fa:5a:26:91:c5:
                    5f:3c:db:8a:54:e6:80:55:04:0f:f9:d4:d6:a3:0d:
                    a7:1d:29:1a:fa:55:44:f3:03:fb:76:9d:48:19:3c:
                    cf:8c:ab:a3:e2:c9:29:80:18:93:f8:cf:56:54:b2:
                    f7:f2:3f:bc:65:c4:bf:3d:31:f6:2b:6f:93:1b:1c:
                    a6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:60:01:18:D7:49:F1:7E:EC:31:E0:4A:DB:3A:7D:6D:40:87:D5:F9
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/N2ABGNdJ8X7sMeBK2zp9bUCH1fk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.4.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2c:54:c2:20:07:da:64:57:58:9c:31:b4:7c:3c:c5:c0:5d:ce:
         30:51:4e:9c:98:2f:7c:8f:bc:e6:12:04:d1:ff:5e:0f:da:39:
         bf:b9:31:43:2d:88:8e:6b:d1:38:5e:81:32:bf:9b:ba:ac:47:
         b3:b3:8b:6a:3d:45:27:14:e1:ed:17:5d:a0:e2:35:3c:cc:4a:
         02:dc:be:a5:6c:f3:80:c4:2f:89:a8:c2:f6:bd:41:92:ce:0a:
         8f:6a:80:61:53:1a:bd:26:d6:e6:59:a3:3e:81:cd:98:ab:9b:
         24:3a:f0:70:51:1b:be:3c:e3:33:89:d8:f1:8c:ce:c4:7e:95:
         f7:dd:8b:6f:22:a9:0a:f3:c4:d4:10:b7:1a:c6:a6:8b:52:0f:
         19:94:02:ed:20:9d:06:aa:a1:cd:00:9d:d8:59:b1:2a:19:fb:
         4a:70:85:02:fe:78:d9:7d:d5:39:aa:c6:b1:a1:ae:e1:39:f5:
         40:30:d3:3e:bf:d4:98:4b:50:cf:d5:4d:c5:da:04:27:ca:c9:
         d0:3f:23:4e:7c:c2:54:f1:57:e4:c3:26:b5:95:23:b4:7b:6b:
         d1:e9:8a:32:50:f3:14:8a:71:75:c0:4e:df:76:47:68:79:d9:
         d9:cc:3b:8d:fa:71:dc:b4:36:df:30:23:96:3c:2c:a4:25:8b:
         92:50:18:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org