Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/QQgEJJ_edzSnJidx99ue56cOECM.roa
File:                     QQgEJJ_edzSnJidx99ue56cOECM.roa (raw, json)
Hash identifier:          MH2ceNP/hghfc77vQVntDuFLriTssTDOcc5ueSaKYbQ=
Subject key identifier:   41:08:04:24:9F:DE:77:34:A7:26:27:71:F7:DB:9E:E7:A7:0E:10:23
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       FC
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/QQgEJJ_edzSnJidx99ue56cOECM.roa
Signing time:             Tue 14 Jun 2022 09:44:18 +0000
ROA not before:           Tue 14 Jun 2022 09:44:18 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        210.239.96.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 252 (0xfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun 14 09:44:18 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=410804249FDE7734A7262771F7DB9EE7A70E1023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e0:1c:12:80:ee:27:33:0f:10:f9:0e:8f:83:
                    ae:bf:87:93:d8:38:eb:21:06:fe:7b:73:37:ca:c5:
                    92:53:08:b7:df:d2:02:81:ae:ed:bb:a0:85:3b:27:
                    9f:84:a8:aa:f8:38:b0:a1:b4:d2:3e:5f:74:23:a2:
                    50:2e:a5:49:fc:fd:aa:e7:c0:bb:72:e9:6f:b3:0f:
                    a2:f1:2e:a0:b7:61:43:a7:0f:a3:28:a3:13:29:6b:
                    07:4c:bd:f6:8c:90:61:4e:71:5e:02:58:58:b1:9c:
                    27:78:61:78:b9:53:d6:65:b2:44:fa:20:8e:62:f2:
                    66:ce:88:cb:2a:43:e7:b4:c9:71:48:e6:38:db:f8:
                    8d:b8:e3:42:45:c9:b6:0c:6e:a0:da:a9:dc:ff:bd:
                    51:ee:d5:c5:55:02:57:41:af:c8:f9:6f:14:5d:75:
                    10:7e:27:78:ff:2a:5a:58:d2:c2:28:2a:44:14:9d:
                    e2:33:e0:a5:13:62:a8:75:35:11:ef:4c:ac:d9:b9:
                    6f:49:15:d6:91:cb:6f:69:ba:25:4f:f2:2b:15:e0:
                    81:63:b9:4d:06:f6:2e:86:ca:f2:f0:19:ba:91:15:
                    c1:8b:bb:52:46:66:2d:48:0f:47:86:73:bc:17:24:
                    c2:9f:c4:21:34:c6:06:f8:82:ce:f0:79:2c:8a:e8:
                    a2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:08:04:24:9F:DE:77:34:A7:26:27:71:F7:DB:9E:E7:A7:0E:10:23
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/QQgEJJ_edzSnJidx99ue56cOECM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.239.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b5:87:7b:dc:f2:6e:d5:7f:d9:d0:2c:83:25:a9:8b:b9:f3:82:
         da:af:db:88:9c:ac:f5:b5:0b:d5:05:f8:be:48:29:48:25:02:
         fe:aa:ed:bc:78:21:e4:14:bc:b8:86:63:96:33:fe:42:55:e5:
         89:09:5b:cb:f4:7f:53:46:9b:57:de:34:55:7c:2e:96:60:59:
         c5:e7:04:09:17:9a:14:32:39:71:d1:35:28:69:d6:1e:71:3c:
         9e:ea:ff:8f:24:46:1c:49:28:23:39:be:b2:72:43:b8:ea:f7:
         70:2a:02:77:f3:b3:9a:4d:2f:e9:84:37:f3:23:a6:82:ab:f9:
         81:79:fb:b4:63:5f:03:22:f6:95:f2:5f:27:4e:03:96:b3:11:
         ba:a6:07:c2:17:3d:23:07:9c:b8:7a:10:e9:78:82:6b:39:ff:
         46:8b:4b:d5:de:49:7b:6d:e0:f5:a9:d4:24:39:19:47:68:da:
         a6:19:d3:0a:9d:83:36:15:1b:40:6c:1e:d3:9f:df:d0:22:3d:
         ae:fe:b8:f7:34:2a:0c:e1:b8:ff:5d:e4:28:3e:5c:ad:34:36:
         8e:cb:f1:7f:8e:78:a3:d7:fc:50:ad:77:8f:bb:ed:88:73:47:
         c5:87:75:b4:96:70:c0:a1:2f:73:c8:e5:51:52:71:e4:05:40:
         0c:99:68:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:08 2023 by rpki-client on console-ams.rpki-client.org