Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/P8mj4M7Hrp4pMkM3mHuPikhS8Us.roa
File:                     P8mj4M7Hrp4pMkM3mHuPikhS8Us.roa (raw, json)
Hash identifier:          FJ6g/0KSzuJ4P9k8Q9CCl01hmfsPQymtpUVrgcFtWmY=
Subject key identifier:   3F:C9:A3:E0:CE:C7:AE:9E:29:32:43:37:98:7B:8F:8A:48:52:F1:4B
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       37
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/P8mj4M7Hrp4pMkM3mHuPikhS8Us.roa
Signing time:             Thu 28 Apr 2022 09:20:48 +0000
ROA not before:           Thu 28 Apr 2022 09:20:48 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     2516
IP address blocks:        125.28.128.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Apr 28 09:20:48 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=3FC9A3E0CEC7AE9E29324337987B8F8A4852F14B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f4:0e:96:12:99:a2:ff:37:a2:fd:56:a0:c9:
                    60:0d:a5:1d:67:4b:74:22:a5:4b:d0:5b:4d:4e:44:
                    8b:20:b6:88:05:b2:5d:45:07:74:96:ef:0c:d6:ec:
                    ad:48:1a:5b:95:1e:02:79:9f:a8:2d:d1:34:ab:63:
                    00:01:33:67:ab:f8:03:67:ca:24:4e:ab:6f:55:de:
                    de:c2:b7:7f:cf:a8:0d:3a:1b:09:96:31:8f:79:a7:
                    92:56:55:f3:a4:53:e4:1e:d4:43:3f:8c:9d:08:c8:
                    13:a8:0c:f9:53:14:54:5c:8a:94:5a:1e:bb:f2:43:
                    88:4d:61:f3:e2:c2:ca:30:9d:5c:07:74:9a:42:c9:
                    d7:f5:c7:57:38:36:55:22:37:be:f0:85:4c:4b:5c:
                    e8:f5:92:f7:e3:87:67:d2:80:bf:7b:4a:ac:bc:fa:
                    d2:fa:ad:5b:81:54:dc:84:d9:08:a3:c7:a1:ff:7d:
                    ed:04:08:d3:04:ef:fc:56:d9:02:ef:a9:75:1a:36:
                    93:52:3a:4d:d0:7d:4a:3d:55:f6:69:50:49:18:07:
                    d5:a0:19:7f:54:21:76:d3:9b:51:f2:3f:aa:c1:a6:
                    a8:3f:30:07:dd:a0:ae:53:b2:cd:01:25:46:b8:07:
                    8a:15:df:e5:5c:2d:70:21:9a:4b:b2:9f:57:aa:14:
                    53:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C9:A3:E0:CE:C7:AE:9E:29:32:43:37:98:7B:8F:8A:48:52:F1:4B
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/P8mj4M7Hrp4pMkM3mHuPikhS8Us.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.28.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         34:b9:2e:6d:2a:09:69:ce:d0:a1:08:c1:5f:d3:63:f7:dd:b9:
         a4:c0:77:41:01:32:29:2a:ec:62:d1:9e:86:ff:56:c4:89:d6:
         9b:6b:fc:75:41:df:ce:b0:f3:c5:cd:06:58:a2:7e:ec:92:92:
         ad:55:48:a4:14:85:41:27:98:4c:81:cc:75:f6:44:6d:65:00:
         f1:4a:1e:d8:38:55:19:3b:8b:eb:b1:c0:a3:76:87:fd:22:d3:
         c0:6b:1d:fb:ae:5e:0c:89:2d:0a:02:d9:f6:85:99:ba:15:ef:
         5d:df:cc:3c:63:6b:29:7c:3b:f1:6c:57:c3:f3:9c:4c:82:7d:
         b6:80:26:8f:cb:b2:ed:ba:46:27:55:41:51:59:9f:1b:a8:ac:
         2f:4e:aa:b3:16:60:7f:72:6e:7c:5d:a7:d8:08:fd:c7:b9:9b:
         63:79:ba:ac:27:5a:45:9e:d6:ce:ef:73:d9:a3:bb:79:05:5c:
         06:63:4b:01:65:2a:2e:2d:a3:a0:2e:a8:82:b3:48:46:23:0c:
         fb:6f:a5:55:36:2a:5a:93:69:a1:01:40:3f:f2:a8:92:b2:2a:
         7b:ce:0a:84:82:0e:57:69:ef:c5:dd:16:ce:f3:33:89:e8:40:
         6a:07:7f:72:b7:e9:57:5a:1a:71:24:88:c0:7a:96:6c:90:58:
         03:07:34:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org