Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/RKJ1lEw0Yf0MfU46mEtHMHj_YAM.roa
File:                     RKJ1lEw0Yf0MfU46mEtHMHj_YAM.roa (raw, json)
Hash identifier:          eE8ZCjA5/Nz9A3FgqW93+VtcoXsLLTENRgYM8+fbNfE=
Subject key identifier:   44:A2:75:94:4C:34:61:FD:0C:7D:4E:3A:98:4B:47:30:78:FF:60:03
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       01FB
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/RKJ1lEw0Yf0MfU46mEtHMHj_YAM.roa
Signing time:             Mon 01 May 2023 01:35:41 +0000
ROA not before:           Mon 01 May 2023 01:35:41 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        113.146.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 507 (0x1fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:35:41 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=44A275944C3461FD0C7D4E3A984B473078FF6003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:19:60:00:dd:65:a2:d1:ce:b7:86:6b:a4:df:
                    14:c4:a2:da:13:5c:82:71:f9:0d:97:ee:2e:b9:79:
                    91:a8:68:91:3c:e3:fb:7f:6e:23:f4:8e:f4:a4:f7:
                    28:83:5b:00:1e:35:b8:c8:09:46:96:54:32:c1:34:
                    cf:65:c9:20:2c:e3:53:53:9d:19:5d:1c:b1:66:56:
                    6f:d7:5e:dd:7f:a2:3f:7c:4c:ca:23:0e:65:1b:b6:
                    2b:a0:a7:cd:ba:01:ed:5e:1c:f0:4c:05:1d:6b:87:
                    b2:fa:81:6c:47:88:92:af:6c:fc:19:d7:e8:8c:81:
                    69:cb:ed:a4:e4:49:32:95:1b:f6:16:fd:24:6e:3a:
                    d4:38:cc:42:5a:47:24:95:70:17:eb:88:95:ba:0d:
                    4c:b3:e9:b4:c1:74:32:31:2e:f3:44:13:c0:b0:d7:
                    2d:99:8e:92:c3:23:d9:d4:f3:00:8e:1f:ae:c4:a7:
                    ff:53:6c:5e:6f:f2:f8:c3:f1:8a:39:c6:8c:98:32:
                    21:c8:59:f9:54:54:75:36:e4:cc:61:37:9b:d3:be:
                    22:89:c9:6b:7d:55:e9:e7:c4:4e:21:3a:b7:66:52:
                    2b:e0:7a:5f:ff:ae:4d:7a:7e:4c:ba:70:6b:42:39:
                    f8:b1:ff:f5:12:55:3d:a3:9a:ec:b9:0b:9c:43:5f:
                    d8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A2:75:94:4C:34:61:FD:0C:7D:4E:3A:98:4B:47:30:78:FF:60:03
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/RKJ1lEw0Yf0MfU46mEtHMHj_YAM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.146.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a2:41:d1:75:2e:26:80:e8:e4:84:c0:c1:8e:62:34:ad:c0:0a:
         a5:a5:4d:19:77:9a:83:a7:27:54:d6:52:88:6b:1c:c6:12:7c:
         35:a5:e1:5f:d0:88:38:30:ce:c9:ba:46:8c:95:6d:af:7d:71:
         c7:5e:8d:eb:4b:43:27:22:fb:ad:7f:ce:9c:b9:45:5f:80:9c:
         fc:06:40:23:a0:bc:b7:bd:03:9b:d9:d3:3a:06:9c:92:b8:6c:
         32:79:c9:e9:6b:69:01:05:a8:28:c8:07:17:b7:df:1a:b7:56:
         17:bc:1b:da:0b:2c:4e:b4:9d:6f:d3:d6:3e:8e:4b:9b:12:14:
         57:a9:c3:56:d5:0c:bd:54:72:ca:f6:c3:5e:56:8c:a2:8b:13:
         5f:e4:75:81:e6:10:eb:88:73:d9:db:ab:fa:f6:d6:48:9f:1b:
         80:89:c4:95:7a:c5:40:4f:8c:ae:0f:b8:48:a6:6d:e9:c6:be:
         ff:95:07:7f:61:8c:47:c6:52:d1:39:78:81:0f:bd:bd:5b:d7:
         f2:39:a8:30:17:99:15:54:2d:2d:7c:a1:be:c1:8a:9e:b2:f9:
         8c:72:f4:00:9c:56:02:0c:65:28:71:61:a5:eb:95:85:63:12:
         e9:3b:63:95:a9:e2:7a:04:f7:93:f0:3f:bd:bb:ac:41:c8:52:
         e0:5e:92:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org