Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/NZq7cC3rEOMkud1CcsO6zxBkh3w.roa
File:                     NZq7cC3rEOMkud1CcsO6zxBkh3w.roa (raw, json)
Hash identifier:          xc0oSePe5b3XEVUD2E3i2eTWtzTalpNKRS2EqdFY9ww=
Subject key identifier:   35:9A:BB:70:2D:EB:10:E3:24:B9:DD:42:72:C3:BA:CF:10:64:87:7C
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       D0
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/NZq7cC3rEOMkud1CcsO6zxBkh3w.roa
Signing time:             Tue 14 Jun 2022 09:27:57 +0000
ROA not before:           Tue 14 Jun 2022 09:27:57 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        113.146.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 208 (0xd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun 14 09:27:57 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=359ABB702DEB10E324B9DD4272C3BACF1064877C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:70:f3:c2:7a:e5:a7:27:91:09:8a:e6:10:88:
                    ad:63:e7:52:45:86:3f:18:00:63:99:00:ed:ab:aa:
                    8e:05:6e:fd:87:8d:53:f7:f0:4e:db:d6:b3:28:c2:
                    d5:cd:24:f4:fc:d0:15:73:b8:a6:82:c4:ac:81:b9:
                    22:eb:39:27:c5:b3:b0:27:f3:32:2f:0b:f7:2d:3e:
                    d1:46:20:ea:75:ce:f5:ad:8c:7e:1a:c5:76:3a:6e:
                    d6:88:11:8b:1e:11:12:d7:04:b4:a0:d7:b1:61:86:
                    39:22:e7:8f:8f:4d:ae:6b:26:38:a3:3b:9e:2b:7e:
                    ac:09:70:50:50:70:a2:06:6d:19:83:0c:0d:13:a1:
                    fa:b1:08:95:9d:99:7b:87:84:ed:d1:28:70:51:08:
                    cb:5f:4e:ee:2a:88:5b:e3:16:48:29:a4:34:55:4f:
                    a1:63:d8:e5:b9:9b:a8:38:4c:f0:fa:b2:68:e3:c6:
                    f0:7e:24:d8:f0:72:5a:b6:39:79:33:dc:b3:80:cb:
                    db:76:41:dc:f7:7c:97:66:23:9c:28:d4:3f:3c:90:
                    16:58:14:1b:a8:6c:76:83:db:77:5b:a7:d2:27:a4:
                    ce:9b:aa:9e:40:87:d4:4a:05:32:9c:dd:83:a1:d3:
                    79:b0:dd:d1:33:da:12:98:c1:8c:b7:89:cf:c1:e0:
                    d4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:9A:BB:70:2D:EB:10:E3:24:B9:DD:42:72:C3:BA:CF:10:64:87:7C
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/NZq7cC3rEOMkud1CcsO6zxBkh3w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.146.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5b:1f:d7:d7:69:95:3d:3c:f3:06:a6:b3:56:23:b7:c2:1c:04:
         f5:cc:cb:4c:19:78:82:76:7a:e2:73:bc:99:9b:62:34:cb:6e:
         02:de:28:06:b8:c7:6d:9b:31:2b:b2:32:76:d0:4e:2d:f2:94:
         a6:1e:10:80:6f:d8:f5:73:f4:98:a1:04:04:96:dc:9c:9b:7e:
         d9:05:4e:1d:f6:5c:13:2e:d8:32:54:b0:43:aa:2a:b7:80:d8:
         68:60:69:36:09:d3:d7:dc:59:51:28:79:7e:6c:74:0d:03:32:
         2d:75:91:59:3a:ef:49:69:fb:a4:95:38:71:07:54:a4:98:4e:
         8c:f7:65:50:bc:fe:1b:86:8c:69:44:cc:f4:5c:29:56:4b:89:
         f9:0b:eb:61:75:1d:31:69:d2:91:83:8b:87:bb:a1:5a:29:bd:
         12:de:9f:78:b1:4e:60:ee:ca:64:33:c1:d9:4b:c7:e4:9c:cf:
         37:38:d4:58:f6:49:f4:ab:c0:89:22:3e:6d:32:0b:a8:a9:c6:
         c0:05:6a:70:2f:a8:ab:ab:8e:0a:1d:81:7c:c4:4b:1e:92:34:
         a1:ad:94:73:8f:a7:9b:8f:bc:68:84:2e:58:dc:2b:5c:9d:57:
         4f:3a:e0:b1:e8:5a:e1:e2:32:db:08:2a:f9:5d:6a:1e:f8:8e:
         8d:c6:07:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org