Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/NNEJ0iTKxLYy6ITkTsPGignmD88.roa
File:                     NNEJ0iTKxLYy6ITkTsPGignmD88.roa (raw, json)
Hash identifier:          LXJidR0xcxJUJs/7IFFLr0XYVodnaqqNeMT3KnZbXh0=
Subject key identifier:   34:D1:09:D2:24:CA:C4:B6:32:E8:84:E4:4E:C3:C6:8A:09:E6:0F:CF
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       01E0
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/NNEJ0iTKxLYy6ITkTsPGignmD88.roa
Signing time:             Mon 01 May 2023 01:33:42 +0000
ROA not before:           Mon 01 May 2023 01:33:42 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        210.255.160.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 480 (0x1e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:33:42 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=34D109D224CAC4B632E884E44EC3C68A09E60FCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ca:0f:14:13:35:9c:c5:43:5a:86:c8:82:29:
                    25:eb:03:78:eb:45:e9:2a:aa:40:95:90:e0:83:00:
                    2b:84:ff:d3:69:e0:90:c8:5d:a1:18:c8:5b:2c:4f:
                    3b:fc:4d:07:2a:84:0e:82:a3:55:9f:77:eb:b3:1e:
                    f0:1c:02:e5:e4:dd:32:1e:c7:13:4a:52:d4:08:9d:
                    a0:e3:7a:f9:00:f1:b8:19:8a:b0:1c:73:54:5a:42:
                    97:04:f3:3a:a7:dd:04:b2:ff:79:20:7b:25:32:08:
                    a8:61:ba:b0:91:e6:9d:60:93:6c:8e:07:16:aa:f4:
                    68:b0:71:6a:b1:1a:0d:1a:69:fe:21:2a:da:00:4d:
                    d2:4d:30:c2:18:7d:7b:32:03:64:03:19:77:36:5c:
                    20:80:65:68:c7:3e:58:1c:a8:e4:6f:cd:44:23:24:
                    b0:99:ee:ad:40:16:9f:5a:fb:9f:eb:41:34:54:2e:
                    5a:6f:45:00:89:a7:58:35:c3:45:97:c5:93:4e:7d:
                    45:ce:f7:7b:7e:05:b9:09:49:7e:73:16:bd:5a:82:
                    69:2e:37:53:b8:37:62:08:47:71:c7:e6:76:e1:4e:
                    be:08:31:ca:23:3c:19:1b:47:10:38:c4:6f:4a:8d:
                    56:f3:59:2d:ca:8e:2c:8e:02:25:4a:8e:c5:f8:7b:
                    41:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D1:09:D2:24:CA:C4:B6:32:E8:84:E4:4E:C3:C6:8A:09:E6:0F:CF
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/NNEJ0iTKxLYy6ITkTsPGignmD88.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.255.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6b:33:93:7f:76:08:a7:b5:ee:a6:9d:ef:7f:72:f7:2b:75:73:
         ea:19:19:db:bf:c7:d9:e4:97:4b:3a:da:2d:e8:44:8f:c1:2a:
         e6:b9:54:91:f8:a4:9c:09:e8:34:b1:26:f1:b0:fc:2a:2f:2f:
         c2:5a:a3:96:f6:3e:b8:c1:e8:66:fa:36:b9:73:54:83:bb:51:
         f0:c4:84:59:a8:a2:fd:1d:f0:91:db:d1:fa:15:c6:24:c1:b3:
         ba:14:ad:dc:de:aa:10:8c:df:a5:b4:e2:51:09:05:ff:6f:44:
         fa:f1:af:ad:4c:fc:6a:09:8e:32:04:05:64:39:ba:ac:38:af:
         9e:8d:cb:fd:03:da:76:6e:61:17:94:a3:ae:9e:c5:6f:04:d6:
         f4:d6:50:9c:33:80:f5:6c:71:45:9c:93:76:1c:02:18:8e:0e:
         aa:13:06:bc:ca:de:4e:0e:11:a5:4a:eb:e4:17:70:26:5b:6e:
         a8:ad:e6:01:b6:31:56:df:87:77:a7:c4:1c:1f:bc:4a:54:61:
         c8:c6:44:07:91:1a:42:de:1e:0b:40:f6:9d:7f:a1:e6:2a:2c:
         fb:72:52:54:b3:10:aa:a3:1a:68:9d:43:b9:bf:8d:5d:71:d1:
         ca:92:7e:4a:1e:47:8b:01:1c:47:ee:74:bb:ed:c1:5c:47:86:
         76:1b:47:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org