Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/RSL1-tao6jvz4P2d3LCZ_7m683Q.roa
File:                     RSL1-tao6jvz4P2d3LCZ_7m683Q.roa (raw, json)
Hash identifier:          +S2p+VlSTv9L6jmcVJ4VqMcguL06nkhZsV2LvaeZu/E=
Subject key identifier:   45:22:F5:FA:D6:A8:EA:3B:F3:E0:FD:9D:DC:B0:99:FF:B9:BA:F3:74
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       E9
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/RSL1-tao6jvz4P2d3LCZ_7m683Q.roa
Signing time:             Tue 14 Jun 2022 09:32:10 +0000
ROA not before:           Tue 14 Jun 2022 09:32:10 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        118.155.192.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 233 (0xe9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun 14 09:32:10 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=4522F5FAD6A8EA3BF3E0FD9DDCB099FFB9BAF374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cf:d2:8b:60:49:d1:58:ef:70:67:af:16:cc:
                    6a:d3:1b:60:3b:e4:58:e7:90:61:dc:02:3d:8a:f0:
                    2d:14:c6:bc:24:72:27:2c:9b:a8:49:61:a1:62:e2:
                    68:23:3a:18:dd:ce:70:51:04:19:cb:61:c8:ca:05:
                    b5:56:ac:5d:a3:ca:22:30:73:d1:df:c2:84:7a:ed:
                    f7:6d:a4:5c:5a:cc:b3:0e:e8:48:da:2a:4e:46:bc:
                    9d:11:0c:5b:96:21:ce:39:78:9f:3b:b3:eb:68:c3:
                    83:77:a8:e1:46:b9:25:ce:25:65:c9:fc:47:8d:23:
                    21:d5:82:35:91:61:fc:22:13:d2:1c:b3:87:6e:2d:
                    1f:9c:37:b5:40:7c:63:1d:b9:fb:7c:71:4d:0b:f9:
                    e3:04:1d:06:a1:5f:17:5a:19:67:92:31:72:d6:41:
                    be:a3:36:32:cf:4a:7d:2a:d1:f0:2e:28:ae:e0:a7:
                    2a:5c:f0:96:20:23:4a:7f:93:5f:e3:5b:d5:80:16:
                    93:48:42:01:1a:3b:c2:2d:c5:14:5b:ff:f9:c2:04:
                    52:66:68:54:f3:3f:73:af:8f:bf:b5:3d:2d:13:9d:
                    05:44:d3:c9:5f:f4:73:f1:3f:cf:d4:34:38:20:37:
                    12:14:4e:da:ad:a1:b1:1b:29:38:f5:01:60:14:f0:
                    5b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:22:F5:FA:D6:A8:EA:3B:F3:E0:FD:9D:DC:B0:99:FF:B9:BA:F3:74
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/RSL1-tao6jvz4P2d3LCZ_7m683Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.155.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         36:9a:14:dd:d6:51:be:2c:27:24:65:31:1c:a3:eb:35:38:10:
         03:80:06:e1:33:68:01:85:e0:ac:54:79:05:d3:d5:90:a3:75:
         82:d7:0a:1f:41:7e:98:27:d8:d6:69:ff:99:b0:14:9b:0c:03:
         52:82:ae:ae:34:67:11:92:9b:8e:6f:96:73:05:02:b0:a0:79:
         70:96:db:31:3a:7b:68:1d:2f:1f:82:61:d2:ca:85:47:e1:95:
         06:36:fe:d0:0e:b2:ef:ea:5c:ea:2a:81:15:94:b7:65:5a:9b:
         ce:8f:c5:0b:d8:b8:76:bb:b6:16:56:97:a6:06:ef:8a:73:4a:
         88:66:05:c3:06:14:7a:c3:11:1b:0d:00:fc:9a:c2:b5:32:9f:
         17:3a:69:e0:ab:3b:4a:21:2f:4a:4e:5a:83:86:48:80:1a:b0:
         df:9e:f8:2f:36:d9:fc:1d:95:40:3e:ad:82:dc:73:d0:cc:51:
         cd:ac:87:5d:b2:ba:c8:aa:f8:0b:f2:4b:7a:dd:35:70:d4:a9:
         d0:a3:e9:50:85:3c:64:bd:31:ac:40:18:39:4f:25:a2:7c:8d:
         a6:10:74:2d:cc:7f:5e:ad:bc:64:ff:f0:a5:3d:d5:73:a9:78:
         f7:7b:ec:8d:ce:55:0b:0c:9d:84:49:c3:b5:c2:49:a2:ce:12:
         60:b5:2e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org