Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/UfAJGcy2U6jJ40uDtK2LnUG5vU0.roa
File:                     UfAJGcy2U6jJ40uDtK2LnUG5vU0.roa (raw, json)
Hash identifier:          3YA+RIi5U2cMg+RhHWTVPzbWuB60YFzDiQlxNPVABEQ=
Subject key identifier:   51:F0:09:19:CC:B6:53:A8:C9:E3:4B:83:B4:AD:8B:9D:41:B9:BD:4D
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       9D
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/UfAJGcy2U6jJ40uDtK2LnUG5vU0.roa
Signing time:             Tue 07 Jun 2022 10:21:15 +0000
ROA not before:           Tue 07 Jun 2022 10:21:15 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        111.104.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 157 (0x9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:21:15 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=51F00919CCB653A8C9E34B83B4AD8B9D41B9BD4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:1c:3d:21:ee:68:85:4d:71:a8:e7:fa:5a:a4:
                    65:2e:7b:9e:c0:90:85:83:25:6b:1d:d7:0d:4d:21:
                    3e:1c:04:81:ca:de:d9:65:8f:85:d5:a7:94:e9:a8:
                    9c:f9:35:fe:2c:8c:49:ae:e5:91:7c:30:01:4b:d8:
                    67:8b:91:04:b5:04:dd:65:c1:9c:34:a2:87:ac:5b:
                    cd:dc:08:0e:aa:60:25:76:43:5e:11:0d:f5:3f:ab:
                    ae:b7:af:47:74:38:3e:26:98:69:6f:72:10:b3:9d:
                    dd:df:39:f5:9c:27:c7:3e:ed:4f:59:b8:5b:10:be:
                    b4:50:aa:43:61:6b:51:97:30:d2:16:53:a7:b7:89:
                    a3:63:62:f9:da:ee:34:cb:63:34:2b:37:e8:4b:ee:
                    2c:57:6a:5a:9b:e0:38:cd:69:bc:4f:cf:26:ef:dd:
                    dc:1f:28:f3:d5:66:37:c7:8d:da:4b:e2:71:5d:2f:
                    d0:29:56:27:6f:a5:24:ec:26:fd:55:2f:e5:c2:84:
                    b7:78:6c:b8:8d:ed:d0:7f:f4:1c:6b:4c:14:34:3a:
                    6d:38:a6:05:b7:f4:bd:d4:d1:11:ff:7b:26:2c:4e:
                    7b:30:df:10:ab:72:5d:88:54:8a:29:75:e4:3d:bc:
                    74:72:4b:dc:70:c2:fc:49:50:cc:cb:79:f2:96:1b:
                    a8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F0:09:19:CC:B6:53:A8:C9:E3:4B:83:B4:AD:8B:9D:41:B9:BD:4D
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/UfAJGcy2U6jJ40uDtK2LnUG5vU0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.104.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         82:4c:a2:ef:bc:9a:0c:96:4f:06:15:32:28:3d:6a:60:d9:8f:
         3c:13:d6:56:61:3d:97:24:88:6b:fb:30:d0:07:63:1a:6c:b9:
         d9:b5:f4:20:8d:fa:4f:e6:e0:25:2a:36:d0:45:0b:0d:c4:d2:
         b2:34:52:c4:d8:12:e0:2f:9e:37:2f:64:bd:75:dd:5a:05:80:
         f6:e3:0b:49:f0:40:7f:60:00:be:b1:7d:29:17:56:6f:1f:9c:
         b3:ef:2b:39:36:3c:bd:83:d0:7c:07:ac:38:85:73:24:a1:6c:
         80:4f:03:12:84:49:93:9f:44:29:65:8d:10:c0:0b:fa:91:cc:
         cc:44:df:e4:26:77:32:58:c1:98:45:ac:cf:2f:16:13:a6:7d:
         4c:2c:f1:1c:c5:2d:4d:1c:f9:08:d1:1a:1a:80:7c:b6:ac:56:
         9e:b4:36:5d:cf:97:47:07:7c:b4:b1:c3:61:c4:51:af:cc:4e:
         c3:d8:4d:87:90:35:8c:89:08:67:0c:06:24:79:ad:e7:e4:cc:
         bf:04:da:ed:15:09:bd:c8:95:b1:4c:51:85:00:df:bf:52:3b:
         81:9a:30:4b:a9:1a:56:ad:8c:08:7e:fd:87:42:5f:8a:ab:bf:
         b8:5b:17:e7:cb:8d:0e:77:7e:ef:d3:21:91:d7:63:27:70:56:
         f9:a5:b6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org