Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/TWwd9_B9NU_nsKN9mNeVOPKkzbk.roa
File:                     TWwd9_B9NU_nsKN9mNeVOPKkzbk.roa (raw, json)
Hash identifier:          fLEEQ62K67U3Gmxayq0efAblckH4i1CGoI98WtFBmmU=
Subject key identifier:   4D:6C:1D:F7:F0:7D:35:4F:E7:B0:A3:7D:98:D7:95:38:F2:A4:CD:B9
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       01EE
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/TWwd9_B9NU_nsKN9mNeVOPKkzbk.roa
Signing time:             Mon 01 May 2023 01:33:49 +0000
ROA not before:           Mon 01 May 2023 01:33:49 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        124.211.0.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 494 (0x1ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:33:49 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=4D6C1DF7F07D354FE7B0A37D98D79538F2A4CDB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:93:ff:ea:3e:16:f7:bc:f9:83:37:65:61:49:
                    8f:91:52:d4:30:bb:cb:03:62:2e:33:15:ca:43:3d:
                    b7:ca:1e:fc:b6:c1:ce:e7:6b:68:c0:16:9b:53:45:
                    dc:b2:ee:7b:4f:6d:e4:45:a4:e4:5d:7c:f7:fc:1e:
                    98:23:71:f7:d4:46:54:fd:77:2d:d1:66:f4:85:86:
                    64:9b:0f:d3:75:43:c7:9d:2e:d2:86:30:8f:f3:02:
                    f9:39:b2:e9:9f:de:c7:7d:3d:42:e2:4c:c2:29:df:
                    7e:49:cb:03:e5:00:61:8b:70:a8:a5:98:20:39:98:
                    bc:f1:a7:9e:d3:ec:cf:0e:6e:02:ce:2f:b3:af:c4:
                    a5:5f:6e:7e:2f:fa:28:14:b6:87:44:c9:0e:0e:0e:
                    87:12:26:14:1f:5d:31:79:de:8e:77:5f:45:19:15:
                    04:59:f9:71:55:99:4c:cd:8c:29:f6:e9:6b:2d:60:
                    e2:6d:cd:bc:2b:a1:05:90:7e:86:4d:2b:91:f2:4d:
                    0e:2e:89:20:40:9b:e2:d1:fb:d5:c3:bf:46:19:5e:
                    e4:d3:73:ba:02:fd:44:de:88:41:01:c8:74:a3:fb:
                    41:e2:f6:8e:73:47:d9:f6:b5:79:0b:7d:4a:9e:75:
                    d7:1a:5b:05:d5:41:b0:c6:89:80:36:32:d4:d7:67:
                    0a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:6C:1D:F7:F0:7D:35:4F:E7:B0:A3:7D:98:D7:95:38:F2:A4:CD:B9
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/TWwd9_B9NU_nsKN9mNeVOPKkzbk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.211.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3e:d4:45:e9:6a:10:0e:0b:bd:26:23:68:1f:3e:43:0e:1c:9d:
         5d:8e:64:08:dc:ba:54:4f:2a:75:1c:e7:96:2f:7d:40:30:fb:
         ae:69:bb:44:e5:05:b4:ee:0e:06:c7:a3:ec:d0:13:d6:15:27:
         c1:21:71:64:9c:52:15:4f:16:c7:fc:b5:68:95:98:9e:de:77:
         5f:ac:3e:66:a6:20:c8:c4:d2:7b:bf:ff:9f:5c:87:20:1e:4a:
         8e:b0:e1:59:0b:8b:c0:e8:32:88:0a:1b:8a:9f:c2:f4:8b:57:
         20:5b:a4:50:65:14:ed:18:d4:63:da:b2:88:ba:47:97:c5:c3:
         b7:9a:b5:99:94:17:ed:ce:4a:15:eb:0d:09:66:75:e6:23:c7:
         a2:8e:16:83:81:17:00:14:e0:50:8d:d9:6d:af:5a:d5:b4:b9:
         08:8f:97:8e:ff:b2:d7:e9:ef:a9:21:ef:35:56:9a:00:a5:31:
         d7:aa:06:34:9e:a5:14:6c:96:5d:21:5d:c2:03:91:4c:a7:51:
         ce:87:d7:0f:32:9b:e7:b5:c9:a6:99:95:a1:92:f9:a1:d4:3d:
         eb:21:86:4b:c9:2b:2c:16:b8:9d:67:4c:ca:fd:3f:9c:1a:55:
         d9:20:81:00:f0:fc:4a:62:85:88:ff:70:22:f9:06:2c:11:87:
         12:d5:c8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org