Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/UvtIOwIqStOfb6EPb3b822zBcl4.roa
File:                     UvtIOwIqStOfb6EPb3b822zBcl4.roa (raw, json)
Hash identifier:          3Af4Zc92EpsfqVMj6GCq/UeTf+OjLRT48mG7YLftqfU=
Subject key identifier:   52:FB:48:3B:02:2A:4A:D3:9F:6F:A1:0F:6F:76:FC:DB:6C:C1:72:5E
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       D8
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/UvtIOwIqStOfb6EPb3b822zBcl4.roa
Signing time:             Tue 14 Jun 2022 09:30:09 +0000
ROA not before:           Tue 14 Jun 2022 09:30:09 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        36.8.0.0/13 maxlen: 13

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216 (0xd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun 14 09:30:09 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=52FB483B022A4AD39F6FA10F6F76FCDB6CC1725E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:16:a6:1a:26:03:a7:70:69:12:a4:88:e1:fc:
                    24:ee:80:4e:0d:12:23:e9:e4:e4:ec:e3:92:e4:14:
                    b8:4e:f8:88:2c:7f:53:1f:a5:58:07:00:40:38:6e:
                    cd:db:2e:b9:d3:af:e5:2c:fa:86:a5:7c:38:b8:af:
                    4e:e9:7f:fa:fa:f7:58:d9:80:09:2e:ac:42:ef:85:
                    9b:92:20:8a:19:3a:be:6e:40:c6:4c:16:50:b2:d5:
                    14:d5:c9:07:a0:e1:c8:7c:fa:37:24:57:8a:b9:7e:
                    9a:da:4e:d3:4f:c2:84:0c:70:7f:90:7e:ef:4f:3b:
                    1c:cf:a3:58:18:c1:1e:fd:ec:16:23:f6:3d:b6:42:
                    95:91:79:a3:4e:48:0f:e6:38:d0:bf:50:04:35:e6:
                    68:1e:32:77:e7:6c:26:f3:b6:8a:bc:c6:87:b6:2a:
                    34:d8:ac:d5:42:bd:54:8d:f5:b5:93:69:d5:43:c5:
                    59:34:92:df:f3:fa:1d:2d:41:f3:0a:22:df:ba:8f:
                    7e:c7:5e:b8:17:85:c2:10:04:bb:b3:c8:c2:0d:ff:
                    8f:78:f0:72:77:38:9a:6e:a1:03:e5:2d:5b:88:30:
                    11:6b:cd:f6:14:cb:9e:8b:0d:b7:7b:30:b8:88:9c:
                    eb:3a:97:4a:d8:a5:72:8c:b8:94:f5:37:6d:14:5d:
                    c6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:FB:48:3B:02:2A:4A:D3:9F:6F:A1:0F:6F:76:FC:DB:6C:C1:72:5E
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/UvtIOwIqStOfb6EPb3b822zBcl4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.8.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         7f:ad:1e:73:2f:3d:fd:e4:70:9e:54:45:d0:59:f0:c1:62:a3:
         14:ba:b7:89:6f:67:39:07:83:b1:21:20:ec:67:c1:cf:c4:23:
         1e:04:67:95:5e:4c:f7:4d:f8:0b:56:ac:68:a4:5c:18:6d:e6:
         86:6b:27:17:ee:4e:51:17:d7:30:d8:8d:ab:a4:71:61:23:fe:
         75:93:a2:95:fb:e9:64:5e:a6:6f:d9:25:16:08:8a:c0:90:3a:
         54:7a:93:4a:3b:35:14:09:37:49:dc:1e:cf:b2:d3:84:8f:be:
         f8:73:35:b6:c2:28:0a:b1:86:04:27:44:98:6a:73:44:ef:38:
         6c:eb:79:a9:56:c0:a9:86:97:c5:66:8b:26:55:e4:e8:5a:2c:
         93:ea:3d:a2:48:2a:5b:39:ad:31:54:9a:70:9e:d2:76:a1:32:
         80:fc:ae:58:f2:b0:64:30:aa:ba:63:99:af:a4:5c:bc:00:47:
         b2:1b:d6:78:39:ff:c1:60:cc:27:85:3b:ff:8c:81:f5:05:cb:
         4b:97:7a:be:2e:f4:6b:93:37:0f:d6:fc:2e:c6:58:af:dc:31:
         4f:96:b6:43:a4:13:2b:1b:84:0c:9f:2b:24:7b:6b:01:43:15:
         72:1c:57:26:fb:aa:15:26:56:68:d2:0d:54:3d:71:cb:6c:52:
         cc:a4:30:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org