Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/UCZ9HrGFUpKhTrHnZAlcQdXF2FQ.roa
File:                     UCZ9HrGFUpKhTrHnZAlcQdXF2FQ.roa (raw, json)
Hash identifier:          5LLOTE8F3YlhCwNlONbXpm7k1wXfIZMR7v5lmJ7pb4k=
Subject key identifier:   50:26:7D:1E:B1:85:52:92:A1:4E:B1:E7:64:09:5C:41:D5:C5:D8:54
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       69
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/UCZ9HrGFUpKhTrHnZAlcQdXF2FQ.roa
Signing time:             Tue 07 Jun 2022 10:07:15 +0000
ROA not before:           Tue 07 Jun 2022 10:07:15 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        119.106.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:07:15 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=50267D1EB1855292A14EB1E764095C41D5C5D854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:dc:01:62:3e:e6:28:a7:28:48:c2:98:14:bb:
                    8a:94:27:e6:77:5a:a0:9c:00:2f:36:06:b3:c4:ba:
                    91:30:1c:4e:07:19:89:f4:c7:0f:ad:4e:b3:6b:e6:
                    b7:90:52:07:ef:51:48:98:95:5f:77:39:32:18:1f:
                    59:c9:46:0e:3a:e5:2d:1a:24:e6:ac:5d:6e:b5:7f:
                    84:ec:8a:35:1f:94:42:c8:bf:a1:3b:4d:e6:fc:63:
                    0c:69:06:75:5a:9d:84:f1:5c:9d:4d:db:fb:77:34:
                    94:c3:22:4c:a8:2e:b5:05:74:e1:97:c9:99:6c:a2:
                    c3:9b:f7:df:b7:e5:4f:b9:79:9e:61:ad:f9:dc:d0:
                    b1:70:e3:33:74:97:f0:45:d2:47:f7:2e:b8:a0:03:
                    ad:da:20:76:cc:e6:a2:bd:51:d7:f7:c5:db:07:21:
                    55:ac:db:8e:a9:a6:1d:a8:23:d6:2a:a8:1e:5f:19:
                    61:ed:18:26:8d:35:45:da:0e:ea:b6:f1:f1:2d:c1:
                    8f:10:00:09:75:6f:42:85:0f:d8:bd:74:5a:3c:d2:
                    24:0e:7a:bb:0e:d2:fa:9b:e4:c9:af:a3:d6:07:ee:
                    3e:cf:a8:c0:c7:13:0d:9e:4d:d5:c7:04:94:15:c5:
                    3f:0d:50:7e:72:2a:20:f0:c1:e1:6b:1d:48:43:fe:
                    4d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:26:7D:1E:B1:85:52:92:A1:4E:B1:E7:64:09:5C:41:D5:C5:D8:54
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/UCZ9HrGFUpKhTrHnZAlcQdXF2FQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.106.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ad:2c:cb:4a:f3:1b:52:a7:d3:5f:cf:be:b3:52:1c:27:3f:54:
         7f:02:81:ed:5d:0d:e3:1a:e1:06:16:b1:ab:32:02:2e:ac:59:
         80:c8:4c:05:40:67:a1:82:f0:12:c2:45:c1:2f:01:46:c7:83:
         96:5b:c4:ac:01:41:80:d4:35:46:03:1c:56:1b:8b:c4:d8:03:
         ea:ac:28:5e:a3:b8:08:5f:39:9a:b8:60:c1:fb:19:4d:86:0f:
         25:02:61:f9:d8:bb:90:cd:57:32:3c:1b:c1:ff:9e:e4:fd:f1:
         db:0e:8f:13:b0:49:d1:54:1d:52:41:3b:87:48:02:8d:17:b7:
         d4:1b:81:61:bb:be:1a:a3:03:52:6a:91:5f:5e:0f:84:e4:a5:
         fb:6a:3c:d4:4d:af:c8:02:85:2a:9e:cc:54:1a:04:84:98:be:
         30:f6:2c:69:b8:22:83:a7:a2:26:6a:9f:31:72:57:00:6d:ad:
         a8:b6:c5:33:6d:b3:59:e8:99:1b:39:fd:c2:3d:3e:df:4f:b2:
         1c:91:ab:ef:39:89:da:37:c9:77:57:ae:09:d9:4c:43:cb:fc:
         32:d7:c7:9a:06:9e:5c:22:60:a4:b2:c1:ee:01:5b:ad:ae:73:
         a1:79:c2:a8:b7:8d:06:75:49:51:5a:11:bd:ca:69:ad:5e:56:
         0d:94:fb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org