Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Sc2oZ7txoVhvroPEZX6FEXXu3rk.roa
File:                     Sc2oZ7txoVhvroPEZX6FEXXu3rk.roa (raw, json)
Hash identifier:          Y5IQwwIcZNmw7MDUFvUSGFwOa6orCzVmpgoDjVx7NXg=
Subject key identifier:   49:CD:A8:67:BB:71:A1:58:6F:AE:83:C4:65:7E:85:11:75:EE:DE:B9
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       8C
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Sc2oZ7txoVhvroPEZX6FEXXu3rk.roa
Signing time:             Tue 07 Jun 2022 10:13:18 +0000
ROA not before:           Tue 07 Jun 2022 10:13:18 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        124.214.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140 (0x8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:13:18 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=49CDA867BB71A1586FAE83C4657E851175EEDEB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:53:91:c7:a5:67:ea:1d:dc:79:2a:6b:3b:e3:
                    17:58:2e:b7:fb:ea:47:ed:bd:8d:08:8a:df:c2:3a:
                    cf:b4:b8:9d:d2:df:16:a5:1d:9b:45:2c:18:36:29:
                    c6:f2:2e:27:5c:4a:9f:07:37:f6:1b:7d:95:24:b9:
                    c9:6e:d2:ab:15:b4:ea:e5:48:9f:03:79:17:8e:9c:
                    d0:26:78:4f:c5:1b:82:95:21:ef:6c:10:c2:23:a6:
                    53:1e:4d:0e:6b:85:56:39:48:d6:b4:42:73:ec:54:
                    dd:40:e1:4a:c9:13:3c:22:bb:d1:8a:d0:8e:01:b3:
                    34:75:00:99:e3:b4:9f:5b:1c:60:07:ae:e9:72:12:
                    8e:df:19:75:f6:d5:d3:23:b1:6d:80:14:f3:25:f9:
                    a5:ec:bb:83:f6:1d:dd:91:13:54:56:70:ce:98:58:
                    02:a7:8b:1c:83:e3:b0:9e:d1:47:ea:ac:f0:f2:00:
                    e7:20:61:f7:9b:2a:0b:72:66:68:c1:ac:16:a6:e1:
                    e0:d6:d1:d2:c4:b4:ff:7d:fd:ee:90:68:b2:ae:16:
                    8c:89:11:fc:0c:2e:f4:1d:56:ce:80:b5:8e:69:4e:
                    38:23:83:84:ba:bc:d6:86:09:de:de:33:33:1e:9b:
                    68:27:97:b5:94:9c:b6:a6:a3:ec:87:84:14:74:58:
                    99:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:CD:A8:67:BB:71:A1:58:6F:AE:83:C4:65:7E:85:11:75:EE:DE:B9
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Sc2oZ7txoVhvroPEZX6FEXXu3rk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.214.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9b:4d:46:32:a6:11:04:28:2e:fd:24:63:9c:cf:1d:47:e2:7e:
         25:0d:a6:23:c1:30:ac:67:f4:a6:d6:33:45:cd:2d:48:c0:04:
         03:ac:56:ae:db:60:62:4c:6e:0e:12:a7:a3:29:33:01:92:7e:
         63:f6:92:e3:f3:02:03:3d:71:7f:c2:cc:18:ed:74:d5:bf:2a:
         c6:44:dc:9e:d8:d3:c0:c3:4f:fa:aa:d4:dc:e4:8a:6a:92:98:
         94:41:ec:45:bb:9a:88:1a:f1:33:3a:e2:84:05:f9:eb:9e:99:
         e6:cf:87:7a:56:d5:9f:5d:6d:e7:ac:84:4c:46:61:0d:e5:ae:
         84:3e:e4:1f:ea:1b:9f:f2:3f:e3:49:4f:2c:d1:89:d9:cf:1e:
         a7:cd:aa:6b:af:ea:9b:82:86:4e:0d:5c:21:dd:15:0a:2b:bf:
         3b:10:bd:c1:b9:f4:9f:af:a1:8d:4f:81:82:b4:8a:9c:b1:16:
         1f:82:22:35:32:a5:ae:04:42:5c:c6:f2:ee:7e:96:ad:56:58:
         54:8f:88:30:21:11:0a:57:d5:f1:7c:df:60:14:bb:9a:b0:bc:
         c2:5d:f6:7f:6f:6f:9f:a6:46:2c:00:88:0f:80:49:0c:a6:61:
         78:ac:a8:b7:84:16:8b:ed:02:9d:bf:80:92:35:80:71:2c:a6:
         92:d8:a0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:08 2023 by rpki-client on console-ams.rpki-client.org