Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/VBvzvdBYOo1a_g1-sSM25GV3jXw.roa
File:                     VBvzvdBYOo1a_g1-sSM25GV3jXw.roa (raw, json)
Hash identifier:          AqB+gImgi7es5KqrXpna0ZBUxnJ6Fh4OOywHUeO7W4U=
Subject key identifier:   54:1B:F3:BD:D0:58:3A:8D:5A:FE:0D:7E:B1:23:36:E4:65:77:8D:7C
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       01AC
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/VBvzvdBYOo1a_g1-sSM25GV3jXw.roa
Signing time:             Mon 01 May 2023 01:32:03 +0000
ROA not before:           Mon 01 May 2023 01:32:03 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        106.174.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 428 (0x1ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:32:03 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=541BF3BDD0583A8D5AFE0D7EB12336E465778D7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:eb:80:f7:85:3f:84:3f:72:b3:49:ff:e1:68:
                    ce:c2:58:ab:35:7c:71:b9:18:2b:8f:e7:8c:a5:7a:
                    e9:c0:d7:61:ca:e4:d6:6e:db:f4:c2:bb:5e:3b:67:
                    bb:fe:c5:f7:d7:6c:70:52:37:ab:b3:e2:94:cb:b5:
                    eb:33:be:28:7f:c9:e4:2c:1b:5e:be:aa:de:f1:d0:
                    f6:f3:63:52:fa:f5:0e:b9:1d:38:60:da:37:9c:6f:
                    8f:c1:28:a9:6d:67:c0:2d:34:db:63:f1:62:3e:5d:
                    4f:15:e3:c2:1a:49:8b:fb:63:81:00:23:29:b1:25:
                    6b:48:66:7e:b0:45:f8:50:42:37:8b:37:38:63:08:
                    ae:fd:87:b3:27:ab:1a:e1:98:f8:04:54:eb:bb:33:
                    cd:e3:2c:ee:97:7f:b5:fc:bb:c3:db:b8:30:47:f6:
                    d2:df:29:d1:d2:7d:94:ef:87:fb:7b:7a:72:15:6c:
                    1b:83:f1:15:5f:6d:f6:8e:24:81:af:9b:01:5f:4f:
                    23:30:9e:90:59:6c:aa:98:b1:75:9d:6d:eb:f8:18:
                    8e:9d:05:9e:09:fb:bf:9e:7e:90:61:6e:6f:d9:9f:
                    0a:55:ec:42:d3:19:2c:fb:ce:92:55:b8:5e:a5:57:
                    db:17:8c:7d:a4:59:8e:52:3f:5d:fa:cb:af:a4:eb:
                    e4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:1B:F3:BD:D0:58:3A:8D:5A:FE:0D:7E:B1:23:36:E4:65:77:8D:7C
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/VBvzvdBYOo1a_g1-sSM25GV3jXw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.174.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         09:19:52:61:c9:e3:cd:61:01:ea:13:43:50:52:8d:54:7e:e8:
         e1:a2:00:35:39:09:d1:93:3d:8f:81:ac:d5:a4:5d:2b:31:48:
         f5:60:03:a5:d8:91:fb:98:0d:3d:06:c0:2b:4f:53:db:e6:52:
         75:e8:a9:2a:17:cb:b0:be:93:59:c9:0a:4c:2a:cd:99:19:51:
         d3:12:89:c5:a2:32:18:01:c4:d3:bb:17:a3:28:82:8a:f0:dc:
         da:ef:2a:4f:06:c4:90:b1:29:1e:8c:27:ac:25:16:2b:1a:25:
         85:83:e5:52:65:2d:28:1e:10:3a:05:32:de:3c:c9:3d:d4:66:
         0f:5f:29:eb:99:70:ac:cc:1f:8d:c6:33:ed:bd:fe:95:d4:1c:
         d0:0e:75:87:52:5b:6e:28:06:b7:83:14:59:48:97:ce:0c:52:
         84:ce:1c:59:75:14:59:52:8b:91:5d:a3:fc:01:50:02:03:e4:
         12:cb:06:49:4c:2c:31:4a:23:39:21:2e:1d:b7:ee:7f:a3:61:
         21:75:b2:56:fe:fd:ad:b3:ea:25:dd:87:95:01:d8:7b:10:90:
         51:84:3a:82:67:fc:18:a1:e5:fb:ac:e7:80:00:c9:29:03:44:
         dd:72:69:7d:dc:29:79:86:7b:bd:18:da:c5:89:a2:5b:a9:ae:
         27:02:62:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org