Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/P6fkQQEIQihm95Ay18Bj3OKv41k.roa
File:                     P6fkQQEIQihm95Ay18Bj3OKv41k.roa (raw, json)
Hash identifier:          kHkmMuMqAKZTtutcS21PmFn58sWs/FvwX56oZEenSPw=
Subject key identifier:   3F:A7:E4:41:01:08:42:28:66:F7:90:32:D7:C0:63:DC:E2:AF:E3:59
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       B8
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/P6fkQQEIQihm95Ay18Bj3OKv41k.roa
Signing time:             Tue 14 Jun 2022 09:11:51 +0000
ROA not before:           Tue 14 Jun 2022 09:11:51 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        111.236.0.0/14 maxlen: 14

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun 14 09:11:51 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=3FA7E4410108422866F79032D7C063DCE2AFE359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1e:c7:65:35:46:38:21:00:fa:d3:da:cd:20:
                    82:41:c1:1f:c7:14:b0:54:8b:ee:bd:6b:0d:4b:a4:
                    bd:19:6a:14:f5:6e:ee:47:bb:3d:cf:fc:c1:cd:e3:
                    a2:a9:7d:de:52:5b:d0:22:e5:b8:21:16:05:c8:a3:
                    9a:a7:c4:3b:f2:62:1d:52:3e:e6:0d:9b:68:f3:1d:
                    09:c9:02:5f:85:c3:53:e6:62:a9:31:34:c5:cd:09:
                    fd:e8:17:40:85:71:31:c9:ac:f9:87:3b:45:1e:ac:
                    3c:4e:05:f3:2e:f7:64:54:77:52:f9:46:fd:59:1d:
                    98:65:e7:a0:ab:f2:66:3c:bf:13:b6:a4:f4:39:bf:
                    50:5f:7e:51:13:15:f6:de:9d:02:6a:ab:47:45:11:
                    5f:ec:78:27:49:27:de:e5:ba:20:c9:90:38:83:8b:
                    87:8d:c3:c9:e0:91:37:27:8e:e5:0c:ff:bc:0e:66:
                    9f:86:99:a2:6a:ff:55:fc:8e:b3:fa:31:2d:31:40:
                    1a:f0:3d:ed:13:3e:d2:4c:3f:56:a9:79:9f:3f:26:
                    34:e6:da:bb:ec:51:c3:68:0e:8d:ee:17:4b:4d:b9:
                    e4:6a:a2:b7:16:82:5d:80:24:bb:5d:38:af:39:b0:
                    e6:d1:6b:56:4e:5f:a5:bc:bf:f8:28:ab:e0:d2:11:
                    dd:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A7:E4:41:01:08:42:28:66:F7:90:32:D7:C0:63:DC:E2:AF:E3:59
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/P6fkQQEIQihm95Ay18Bj3OKv41k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.236.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         86:da:11:44:b4:5e:4a:7a:aa:c5:d5:06:c7:73:29:64:dd:13:
         56:42:c7:f5:db:de:fd:73:ff:96:42:8d:d7:79:ca:53:49:d5:
         9f:16:1b:0c:0d:5a:e1:f4:55:e5:87:62:7e:2f:93:d8:1b:8a:
         d5:9b:e2:94:81:01:73:4d:a6:ef:0a:4b:7e:e9:cd:92:39:2c:
         5f:fe:e5:0b:9a:a1:59:e0:f7:ea:91:89:4c:63:75:07:4f:53:
         88:74:1b:06:4f:8a:d2:28:bc:f3:d6:d0:53:0a:6a:3c:46:2e:
         a2:24:c9:b0:ab:43:c8:aa:5a:a2:54:b3:32:7c:b2:f4:19:4c:
         12:62:e8:9e:14:96:6f:12:c2:d5:06:4d:09:34:19:3c:44:fb:
         63:79:ff:b0:f6:47:b8:f4:b4:43:28:bf:05:20:62:b8:0b:fa:
         30:d7:88:bf:5e:66:d4:d4:e1:4b:a0:35:5e:e9:bc:14:40:95:
         f2:04:58:20:63:cd:42:d4:c1:61:ea:00:62:ce:66:78:0e:b5:
         c2:63:5d:6b:8f:76:40:69:91:9b:45:bf:71:24:82:5b:4b:ac:
         7b:dc:31:ec:6b:0a:b9:8e:e1:53:bb:af:2f:6a:87:4a:95:45:
         b4:ba:0c:8f:e2:a6:c1:18:9d:db:88:69:1d:a4:12:05:3d:25:
         17:90:65:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org