Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/OOBDlqXiTFHOs3wM_CTUj2Vc3R0.roa
File:                     OOBDlqXiTFHOs3wM_CTUj2Vc3R0.roa (raw, json)
Hash identifier:          tp0fEaJbS8wbIaTeIAVs001mH8YSB7RPhpVKWKajYQA=
Subject key identifier:   38:E0:43:96:A5:E2:4C:51:CE:B3:7C:0C:FC:24:D4:8F:65:5C:DD:1D
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       010E
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/OOBDlqXiTFHOs3wM_CTUj2Vc3R0.roa
Signing time:             Tue 14 Jun 2022 10:14:26 +0000
ROA not before:           Tue 14 Jun 2022 10:14:26 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        106.186.86.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 270 (0x10e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun 14 10:14:26 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=38E04396A5E24C51CEB37C0CFC24D48F655CDD1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6b:3f:d8:e4:ed:38:1c:0e:0f:26:b5:56:7c:
                    dd:c4:0e:fe:ff:dd:50:85:81:13:95:31:3a:6d:ee:
                    ca:92:81:34:e2:5c:e7:69:2f:06:87:85:0a:74:61:
                    16:d4:63:56:1e:3b:e5:f7:17:b3:a4:82:72:c0:dc:
                    ca:6c:2b:c6:d5:e1:28:6f:eb:77:27:c6:4c:61:b2:
                    62:4c:51:1e:91:d0:22:cf:25:aa:dd:a4:97:26:d4:
                    7e:71:6a:0a:22:6b:ea:75:b9:2c:35:bc:3d:1f:b9:
                    0f:0e:61:05:7a:b3:2a:8d:ef:63:72:c4:b6:78:98:
                    df:40:4f:00:af:a7:fd:f3:64:d6:44:25:41:85:e6:
                    9e:59:66:7e:b6:45:eb:bc:0e:75:d5:d6:65:5f:57:
                    bc:9c:55:2f:fe:49:64:81:84:85:26:8c:ce:1b:41:
                    26:a3:6f:93:99:7e:a8:f8:8a:7c:87:c6:1b:75:c6:
                    33:ee:db:25:5a:be:92:9d:2b:56:5b:aa:02:3e:fd:
                    9c:72:8d:38:15:33:56:54:99:56:9f:be:cf:f8:37:
                    02:8f:9b:4b:18:12:ef:8c:e3:31:7d:08:e5:fe:fc:
                    55:63:1d:97:f0:dc:8d:10:87:c1:d7:44:d9:98:24:
                    6d:c3:d3:c3:93:93:7a:69:59:0e:0c:79:07:69:23:
                    79:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E0:43:96:A5:E2:4C:51:CE:B3:7C:0C:FC:24:D4:8F:65:5C:DD:1D
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/OOBDlqXiTFHOs3wM_CTUj2Vc3R0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.186.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:b9:94:ce:23:63:75:2a:12:48:c0:c8:17:e7:c2:a6:e9:cd:
         10:1b:63:5e:28:48:a3:df:8a:35:af:5d:99:41:dc:ed:05:73:
         26:75:52:b2:11:45:b0:7c:f4:4c:6a:4f:60:c5:bd:c6:c3:82:
         1f:a3:95:4a:ca:79:4b:39:4f:be:e2:e0:ee:dd:fd:0d:c5:82:
         b0:15:87:e0:0f:1e:82:46:c4:7a:89:f7:09:ab:51:8e:c4:8e:
         f7:4d:4e:bf:31:24:3f:d3:74:94:da:f6:6f:ca:61:2d:71:39:
         32:b3:2f:aa:51:5b:22:d8:ad:e2:c4:72:db:99:57:a5:2c:fb:
         94:5c:a1:97:9f:86:63:f7:b1:0c:95:e5:94:ef:7b:0f:b1:6c:
         d9:7e:c9:b1:5d:44:6a:5d:ad:bd:80:94:1a:c2:6c:84:1e:bc:
         d8:10:04:3e:a8:76:e0:1b:e8:a3:0f:6d:d4:d8:45:0f:d8:0f:
         1b:89:3e:16:c7:61:0c:e9:16:76:4f:cb:48:fa:7b:04:59:23:
         f3:c9:46:0b:10:68:21:93:7b:0f:bd:48:2d:e3:31:b9:f6:87:
         33:a2:9b:2a:c1:a5:18:7e:13:50:2f:e3:f2:b1:5e:8e:75:0c:
         92:c0:d4:cf:05:ad:89:ae:e2:e7:b5:5b:79:b2:a1:71:45:c4:
         7d:36:be:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org