Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/RATaBc0ucBOnbaa05n5LILewFHs.roa
File:                     RATaBc0ucBOnbaa05n5LILewFHs.roa (raw, json)
Hash identifier:          2C2Ahlc8BI7KvrhS3K+Bj+IIOPj2u8FK1LRVOpOYv+U=
Subject key identifier:   44:04:DA:05:CD:2E:70:13:A7:6D:A6:B4:E6:7E:4B:20:B7:B0:14:7B
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0233
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/RATaBc0ucBOnbaa05n5LILewFHs.roa
Signing time:             Mon 01 May 2023 01:39:36 +0000
ROA not before:           Mon 01 May 2023 01:39:36 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        106.185.0.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 563 (0x233)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:39:36 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=4404DA05CD2E7013A76DA6B4E67E4B20B7B0147B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0b:28:52:5d:88:22:b0:3f:4b:ed:d2:2a:4c:
                    a1:3f:0c:c6:cd:c9:13:05:b3:c4:8a:17:99:dd:e0:
                    a7:d3:de:0c:e0:3c:e6:5e:07:be:53:62:93:82:a7:
                    34:52:a6:56:66:b3:4b:42:a7:cf:d2:63:e8:85:af:
                    76:8b:c3:81:08:f5:f2:f9:23:89:c9:4f:23:04:35:
                    f0:62:26:1c:96:29:08:83:4a:a8:9c:85:b4:31:f6:
                    0d:7d:11:d8:a9:fb:21:8e:6b:29:8b:a5:ac:39:48:
                    bb:63:93:07:97:09:71:2f:77:6f:6d:da:95:6e:b4:
                    04:b6:ca:ad:47:a7:5a:04:23:63:e0:ad:60:c2:5e:
                    5f:5b:f7:86:91:c1:20:fc:6a:04:2e:b9:ac:46:a7:
                    8c:99:91:35:25:52:c3:92:6f:fd:72:f5:1e:1f:5d:
                    e7:cc:9a:da:ea:94:fc:5b:8c:fb:34:1d:1f:72:d4:
                    3d:cf:5c:88:ff:22:d0:c9:3a:2a:2d:fc:ee:84:9d:
                    46:ea:3f:27:58:28:76:f6:0c:2c:8d:3b:a4:5e:3f:
                    25:c5:a7:f3:97:9d:87:d0:48:39:37:2f:c4:ea:38:
                    c7:a8:22:b1:14:f6:5e:5f:c8:4d:e4:f2:cb:61:34:
                    d4:bd:5b:70:04:a0:fe:a2:8b:a8:04:7d:2d:ea:b3:
                    07:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:04:DA:05:CD:2E:70:13:A7:6D:A6:B4:E6:7E:4B:20:B7:B0:14:7B
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/RATaBc0ucBOnbaa05n5LILewFHs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.185.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         80:9f:e6:b5:84:d2:ce:7e:2a:12:89:f3:ec:20:72:d6:42:a8:
         3b:e8:c6:87:bf:c1:58:9c:5c:43:1a:1d:6c:61:b1:b6:00:22:
         ab:cb:26:3a:82:d0:15:55:6e:a0:e6:e8:21:8d:b8:dc:6a:f1:
         65:db:1d:12:c0:46:b9:8a:69:76:d5:d2:50:c4:55:bb:ee:fc:
         81:e5:78:17:98:6e:33:cf:65:b0:cf:50:9b:74:db:77:36:5b:
         df:67:a7:9b:20:2b:8b:74:1a:d9:1a:ed:28:a9:9b:74:83:d2:
         a8:57:0f:32:6a:68:f5:da:fb:b7:65:f7:23:50:52:18:ae:08:
         fe:2d:37:3e:20:8b:14:0d:46:a7:f3:84:49:bf:48:70:0a:04:
         2e:26:62:e9:c6:e9:c8:a0:b2:e3:73:ca:06:39:01:01:27:9a:
         e9:ef:79:52:4f:52:72:d9:76:75:4c:9c:22:55:2b:01:f3:97:
         1b:9f:57:83:0b:f5:99:ee:44:9c:56:29:b4:f6:dd:ee:e5:cd:
         af:32:19:ab:43:17:2a:e7:59:3d:75:e7:af:62:29:d7:e9:6c:
         0b:b5:13:84:96:50:11:54:61:e5:72:4e:30:4e:d5:a4:81:6e:
         60:49:a1:20:6d:65:4c:56:32:21:e7:e2:11:72:0d:7e:21:76:
         0d:e8:5b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org