Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/TeaML9j2eRknkwfrq3piNbvkT_I.roa
File:                     TeaML9j2eRknkwfrq3piNbvkT_I.roa (raw, json)
Hash identifier:          /NZ8bHW6PCHhzqQ6Pn9dI/nABj/aJIrG+EorHQf/urw=
Subject key identifier:   4D:E6:8C:2F:D8:F6:79:19:27:93:07:EB:AB:7A:62:35:BB:E4:4F:F2
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       012B
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/TeaML9j2eRknkwfrq3piNbvkT_I.roa
Signing time:             Fri 28 Oct 2022 02:05:10 +0000
ROA not before:           Fri 28 Oct 2022 02:05:10 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        210.230.128.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 299 (0x12b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Oct 28 02:05:10 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=4DE68C2FD8F67919279307EBAB7A6235BBE44FF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:16:31:b4:ca:e4:1e:9b:ef:bc:6e:ed:67:c8:
                    de:a5:42:da:d1:ca:28:a3:5f:68:78:79:d8:81:b5:
                    09:08:58:c6:d2:7e:cc:1b:f0:70:b8:a7:9f:72:a0:
                    42:d3:0e:dc:58:31:56:21:03:71:4e:86:6d:d9:cf:
                    85:c1:e9:25:39:68:ef:ad:20:74:27:5e:0c:4b:10:
                    3a:ea:ea:a6:cd:17:a3:a9:c3:e4:2d:47:f6:4c:b3:
                    62:8a:62:66:c4:46:9c:82:a2:8c:b8:4a:b0:3c:dc:
                    27:69:d0:5a:ed:c3:05:19:61:7e:4e:0c:e6:71:6c:
                    ba:20:f8:95:25:9b:a3:6d:a8:c1:93:f5:56:fe:34:
                    cc:19:7c:ab:68:c2:02:c8:f3:61:e5:0c:63:0e:91:
                    7b:b3:64:f9:dc:90:af:f9:22:45:36:49:2e:db:bf:
                    7a:dc:fc:91:e3:12:9a:dd:0f:e2:b6:52:0a:94:a1:
                    82:47:b7:2e:86:0b:56:b1:9e:55:d9:95:87:6d:66:
                    f8:10:1e:65:51:27:70:12:db:a1:59:e4:4c:95:a5:
                    c6:c1:6c:fb:a4:dd:5a:0b:25:a5:21:fc:4b:ce:cb:
                    1f:4f:82:34:6b:8c:78:19:84:5d:72:b3:ed:f3:f0:
                    cb:f1:02:a2:2a:48:35:02:77:5c:6d:b2:78:b9:04:
                    bd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E6:8C:2F:D8:F6:79:19:27:93:07:EB:AB:7A:62:35:BB:E4:4F:F2
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/TeaML9j2eRknkwfrq3piNbvkT_I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.230.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         82:b8:90:75:e3:32:81:4d:29:e0:bf:75:d5:d4:e4:f5:ed:8f:
         a4:4a:0f:23:a1:d3:7c:02:fa:7f:7a:45:e8:db:2b:d9:3c:df:
         b5:d6:a0:eb:a2:a0:2b:53:24:ab:72:cc:14:22:ee:62:c5:14:
         a4:40:e1:21:2a:fb:ec:dd:e6:55:69:52:d6:a9:92:bf:ee:84:
         13:59:ad:53:a8:e0:36:1e:8e:23:0f:67:78:fa:b8:c1:e1:54:
         cd:e6:f9:70:99:5f:68:f0:17:56:15:67:4b:fa:ad:39:7e:53:
         b5:8f:d0:65:b6:ad:37:6b:f4:7b:c0:2f:e2:2f:24:5f:5a:05:
         fc:2a:19:98:5a:5e:cc:30:47:1d:73:7a:20:36:e8:7f:26:ca:
         75:4f:9e:69:ba:f6:62:b2:44:cf:56:f3:19:2b:f7:40:cb:1e:
         7c:ef:90:1a:67:78:ca:6c:22:5b:30:45:28:99:98:8f:9e:e5:
         34:e8:43:fc:a3:32:b7:86:0e:33:19:e2:79:92:91:3f:33:07:
         f2:13:0f:7a:98:ea:65:29:d5:c1:ac:41:99:e4:fb:2c:f5:ce:
         0f:ac:15:89:d7:59:2c:d4:65:93:61:3c:2e:71:96:4a:8c:1f:
         31:63:c5:05:d0:69:1b:53:24:9d:ab:94:21:e4:68:ac:01:d4:
         c7:09:16:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org