Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/P86sWEujBfZhr7FSbnPpJ-vMT-E.roa
File:                     P86sWEujBfZhr7FSbnPpJ-vMT-E.roa (raw, json)
Hash identifier:          nKViTcHR7BodDmKr/ulLsB96S5RcgEguHMP0DoaMau8=
Subject key identifier:   3F:CE:AC:58:4B:A3:05:F6:61:AF:B1:52:6E:73:E9:27:EB:CC:4F:E1
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       E7
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/P86sWEujBfZhr7FSbnPpJ-vMT-E.roa
Signing time:             Tue 14 Jun 2022 09:32:09 +0000
ROA not before:           Tue 14 Jun 2022 09:32:09 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        61.120.0.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231 (0xe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun 14 09:32:09 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=3FCEAC584BA305F661AFB1526E73E927EBCC4FE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:91:2a:0e:f8:25:20:60:c9:c3:1d:b7:81:12:
                    96:75:6d:1c:4e:f1:6b:ee:7e:f1:63:26:a7:a2:a4:
                    5d:16:77:f9:9f:57:1f:d0:15:e8:53:d1:3c:03:54:
                    3a:36:e9:4e:cd:b9:ad:91:f9:86:c2:6c:63:7a:67:
                    04:e9:ef:62:b0:a0:80:2a:12:53:e6:32:2e:41:1d:
                    00:e7:c2:89:68:85:5d:a8:c1:d4:07:e2:ff:0b:fe:
                    6a:9e:6a:2f:10:b6:0c:21:45:ad:cc:2f:31:f9:3d:
                    99:68:48:b3:2c:40:5e:b4:df:70:30:33:79:a8:31:
                    58:42:55:ac:84:c8:68:0a:84:e6:44:b4:22:29:24:
                    cc:29:bf:67:f5:8c:27:25:06:2b:d2:27:fb:ff:6c:
                    ac:0b:89:73:30:f7:53:e1:04:bf:b4:d3:7f:0e:18:
                    fb:cb:ba:c2:a5:7c:08:21:6f:54:cd:f7:bb:29:c8:
                    e8:0b:8a:3f:16:c3:16:cd:70:da:50:01:80:d1:3d:
                    24:b7:9a:dd:06:ff:e0:7f:42:a5:e2:71:bb:7d:7d:
                    84:b5:8f:53:58:89:70:2f:7e:2a:3c:62:fd:8e:1c:
                    82:2a:98:76:29:dd:03:97:b5:76:4f:f7:98:a8:63:
                    f6:c9:ab:08:88:1a:f4:6e:fb:51:26:65:81:a9:84:
                    2b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:CE:AC:58:4B:A3:05:F6:61:AF:B1:52:6E:73:E9:27:EB:CC:4F:E1
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/P86sWEujBfZhr7FSbnPpJ-vMT-E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.120.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         0d:a3:15:92:0e:28:36:95:7b:57:85:0a:d0:b1:3e:d5:4f:8c:
         32:e0:c3:3d:d2:41:28:15:e1:ee:0a:ba:b2:9c:b0:fa:e1:57:
         4a:46:a3:c6:f4:12:3d:41:68:06:7e:e4:c4:fa:bb:a4:e3:e9:
         3c:b6:38:c2:f7:2d:97:a7:4c:2a:9d:55:cc:f4:c7:ca:78:b6:
         86:de:87:0b:05:1d:90:97:11:bd:db:1f:54:25:96:78:77:36:
         5a:f3:7c:c8:a7:fa:99:99:1a:96:ca:33:32:d9:54:a3:1c:16:
         48:37:bf:e3:1d:5a:b3:6f:d0:86:47:3f:f0:9d:4f:5c:ac:be:
         2f:a2:43:99:3b:91:c9:1e:a3:06:28:d7:8e:a6:08:54:93:83:
         24:f8:b8:11:3c:96:ed:1b:56:09:4a:6f:76:06:6e:7b:f7:41:
         c7:42:18:8c:da:8c:d6:6e:35:d8:d8:3c:1b:8a:95:b4:d3:88:
         a9:2f:f8:9c:a4:3b:2f:49:37:9f:51:cb:d7:aa:3b:0e:31:85:
         d3:68:82:e7:9f:ad:10:af:85:f6:63:d0:3d:a6:ed:22:a5:5a:
         7a:2c:b3:29:0c:22:66:f7:57:75:3b:b2:76:da:fc:ce:19:02:
         5b:11:eb:de:ef:43:43:77:99:8c:ea:5d:a6:60:4c:f6:3e:61:
         e8:6d:cc:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org