Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/PIjXS5dPtUeKJNN234JiwTVSsaE.roa
File:                     PIjXS5dPtUeKJNN234JiwTVSsaE.roa (raw, json)
Hash identifier:          iVf6wf2hIpVsR0wr9TXFTFHIWlQkVjOtdp76ZSIE2TY=
Subject key identifier:   3C:88:D7:4B:97:4F:B5:47:8A:24:D3:76:DF:82:62:C1:35:52:B1:A1
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0105
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/PIjXS5dPtUeKJNN234JiwTVSsaE.roa
Signing time:             Tue 14 Jun 2022 10:04:02 +0000
ROA not before:           Tue 14 Jun 2022 10:04:02 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        106.186.192.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261 (0x105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun 14 10:04:02 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=3C88D74B974FB5478A24D376DF8262C13552B1A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:68:11:49:42:28:fd:a3:ae:ed:cf:2e:17:44:
                    48:77:f7:14:76:2b:2d:46:2f:ad:1e:02:d7:56:90:
                    30:55:3f:0e:5d:01:3b:e1:69:12:48:41:a7:e4:b7:
                    5e:13:37:c0:36:ca:c5:9d:f7:d3:2d:fa:3d:0f:29:
                    41:8a:12:bc:3e:8c:a4:2c:46:26:c8:68:56:e1:db:
                    6a:d0:cc:8e:a0:de:cf:70:e8:5c:fb:e1:9f:a3:5f:
                    79:14:98:2c:65:29:1b:91:38:77:ae:97:cb:d6:ac:
                    bb:c8:1d:aa:15:23:37:90:88:ef:1a:b8:d0:5c:e8:
                    3a:1c:06:48:2a:a9:ae:0f:fa:ad:b8:b5:35:58:fa:
                    cb:8c:ec:cc:49:c9:71:eb:c4:85:11:5d:ac:28:55:
                    cb:b2:63:69:1a:88:b5:ce:2c:80:36:e1:43:8f:91:
                    e8:1d:88:a2:4f:f3:e0:57:bd:67:2d:4a:7c:b6:a3:
                    9c:57:a2:48:d9:ff:17:9b:c2:30:47:21:9b:49:df:
                    fd:6b:b8:c3:6b:58:09:f7:2c:8a:f9:8f:df:c9:6f:
                    bd:ee:e1:8b:9c:fa:4c:fd:0d:2c:74:08:17:4e:5c:
                    11:b4:58:c3:60:9a:40:7b:d9:b0:ac:f5:03:67:e9:
                    d1:8d:7e:f5:67:b4:c3:d9:14:b9:74:86:c1:89:e2:
                    f0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:88:D7:4B:97:4F:B5:47:8A:24:D3:76:DF:82:62:C1:35:52:B1:A1
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/PIjXS5dPtUeKJNN234JiwTVSsaE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.186.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         36:23:be:19:e8:78:4f:cd:4f:ae:54:d6:8d:fa:81:22:7d:57:
         11:d9:23:e5:00:9b:b7:39:b3:e4:7c:d6:6e:f1:b4:cc:0d:05:
         98:14:ab:3b:9c:20:03:b9:52:c6:dd:d0:b7:0a:69:ed:5d:86:
         5c:72:b7:9d:b8:c5:08:07:17:96:c1:8b:cd:fe:dc:45:ea:5a:
         2d:f9:58:4b:95:ee:ec:94:bb:11:7a:37:ad:95:6b:9d:7d:d9:
         e1:c6:43:b8:38:86:fe:60:e8:f4:89:9f:34:2a:a9:dd:5d:41:
         18:cb:88:d5:e0:c4:a0:e0:f5:7e:86:0d:65:dd:d3:44:8c:1d:
         cc:82:f5:a3:91:1c:78:d3:7f:e1:89:b3:60:e7:03:41:62:58:
         6d:f5:ed:78:b2:7f:10:8e:03:30:c2:64:3b:35:30:e8:f0:d9:
         03:4a:cb:c6:86:68:d2:be:a3:21:9e:e8:22:09:91:b1:cd:0d:
         d6:b8:1d:ce:41:7e:f5:41:05:12:01:3a:13:0c:40:1f:0c:18:
         56:a6:73:23:25:e2:96:fd:4e:e2:e6:3f:d5:54:31:20:65:cc:
         a0:03:52:66:61:c6:6b:67:62:fa:9f:de:cc:64:3f:5e:f9:e0:
         a5:0f:e0:b3:e4:20:2c:f7:32:a3:26:dd:f8:43:fd:91:80:9a:
         31:9e:3f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org