Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/QRoRYobyQAPMxIPzTfpnUUOvTCo.roa
File:                     QRoRYobyQAPMxIPzTfpnUUOvTCo.roa (raw, json)
Hash identifier:          LykRc+PcQdUAzIPPOoOHzjMr78kbadmq/aAt77fpLec=
Subject key identifier:   41:1A:11:62:86:F2:40:03:CC:C4:83:F3:4D:FA:67:51:43:AF:4C:2A
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0223
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/QRoRYobyQAPMxIPzTfpnUUOvTCo.roa
Signing time:             Mon 01 May 2023 01:37:55 +0000
ROA not before:           Mon 01 May 2023 01:37:55 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        210.155.0.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 547 (0x223)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:37:55 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=411A116286F24003CCC483F34DFA675143AF4C2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cf:49:3a:08:9c:83:0c:d4:bc:be:e6:46:fe:
                    8d:19:63:93:a7:5d:ee:a8:17:4c:88:6a:ae:15:f3:
                    ab:1f:f4:03:15:7e:f4:a4:8b:08:bb:94:9b:b3:4a:
                    c5:83:94:66:90:8f:61:cc:e1:7a:3d:2c:1d:36:58:
                    92:3a:e5:1c:db:ca:25:e1:a0:ea:12:5e:36:e5:cc:
                    14:63:72:88:e0:5b:bc:1d:ca:d5:3e:8e:5f:c0:1d:
                    b5:58:29:ca:9f:cd:5d:3e:19:08:9f:63:13:00:e9:
                    51:3d:bb:9d:1b:b0:1f:52:dc:54:db:32:d0:f0:58:
                    3a:53:bc:b0:4d:53:00:ba:6f:72:3b:3c:4d:7a:ac:
                    82:60:22:08:a5:49:99:dd:1f:12:6f:05:2a:29:9e:
                    ec:9f:dd:7b:74:a7:09:d5:33:00:3b:14:fa:d1:cd:
                    6e:25:04:ec:a7:10:ba:42:3b:7f:8f:37:fd:ff:51:
                    ab:a2:c9:75:78:8f:bd:7d:f5:7c:2a:4a:94:13:c7:
                    73:72:47:3b:c1:6a:8c:db:85:53:31:0f:2e:b7:f5:
                    be:0c:e6:43:be:cc:04:b1:70:98:c3:a1:37:46:7e:
                    a5:bf:1a:5a:3c:f8:db:61:0e:1c:a7:db:09:52:46:
                    b4:d0:c9:ec:39:7a:e0:99:42:ba:3f:4c:00:c2:3a:
                    0e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:1A:11:62:86:F2:40:03:CC:C4:83:F3:4D:FA:67:51:43:AF:4C:2A
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/QRoRYobyQAPMxIPzTfpnUUOvTCo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.155.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         63:d0:5a:14:4e:89:03:2d:df:a3:a0:30:37:f1:84:45:8a:79:
         a3:d4:98:da:40:f4:c2:77:24:75:ec:86:99:d7:4a:0f:d2:41:
         39:f1:ff:ca:63:f9:44:6b:4e:19:f8:0b:9b:c1:a8:3e:7f:92:
         da:e8:89:6e:d0:fb:de:c7:cb:05:22:30:7c:c7:89:dd:23:02:
         95:ae:25:8a:56:c3:7b:30:86:f6:fc:bc:73:be:b4:15:f5:0a:
         72:d0:d4:55:62:cf:4c:a7:b7:15:46:b1:c5:70:aa:4c:5c:c1:
         ff:85:1f:c6:61:0a:63:3d:1b:f7:54:44:7b:96:e3:d4:b6:54:
         c6:15:d8:ab:b9:c6:64:c6:29:ad:7c:fe:ce:2f:e7:f0:4c:73:
         87:cc:7d:88:67:75:4d:52:4b:18:25:56:38:96:f5:03:df:fe:
         33:d9:e6:29:eb:40:d8:14:52:ba:0f:d0:f7:1c:ce:c9:83:b2:
         18:1d:db:d0:64:af:fc:bd:46:93:39:54:99:8c:ab:63:19:5f:
         c8:8f:55:84:f5:7f:6e:f2:ba:d2:88:43:89:4b:90:40:a1:13:
         3f:5a:c4:ed:5a:8e:4c:f2:d2:21:33:de:60:61:35:14:d0:5e:
         96:d8:0b:85:41:11:7a:a4:4a:1e:59:02:ef:c2:8f:31:4a:42:
         ec:8b:99:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org