Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/WfE6yDsDQQltWfvbNfBLC5Ji830.roa
File:                     WfE6yDsDQQltWfvbNfBLC5Ji830.roa (raw, json)
Hash identifier:          dk1Xgz/kdpEBdYZRuRYfHsWNgfREzunTVzPxYSacoCo=
Subject key identifier:   59:F1:3A:C8:3B:03:41:09:6D:59:FB:DB:35:F0:4B:0B:92:62:F3:7D
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0212
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/WfE6yDsDQQltWfvbNfBLC5Ji830.roa
Signing time:             Mon 01 May 2023 01:37:47 +0000
ROA not before:           Mon 01 May 2023 01:37:47 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        61.120.0.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 530 (0x212)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:37:47 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=59F13AC83B0341096D59FBDB35F04B0B9262F37D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8a:dc:82:2d:af:ab:54:09:08:e2:82:ec:55:
                    81:28:0b:c1:a8:14:76:3b:cd:e9:88:f6:9f:2b:0a:
                    ef:89:89:21:a6:b1:97:1e:23:bf:f0:bb:c4:86:b0:
                    59:91:de:5f:21:10:14:01:ea:6a:91:0f:22:00:ad:
                    bb:a0:b0:cc:cd:90:9b:c7:c5:89:c3:13:a0:8a:24:
                    f9:33:76:0c:46:a3:7c:dc:ad:67:ba:aa:b2:cb:b1:
                    0b:b5:c0:1c:8e:57:1b:36:db:bd:5d:31:da:bb:50:
                    fd:83:d1:5a:de:f4:7f:e2:53:32:bf:ad:87:29:52:
                    a1:7f:11:28:8b:c3:3e:a1:2c:31:f3:b9:fd:8c:20:
                    81:40:dc:9c:e8:b5:f2:80:5a:66:13:50:7a:d7:e3:
                    78:69:db:ad:82:a5:46:60:41:3a:b9:cd:e0:92:f6:
                    bd:5e:05:d2:7f:3b:bc:59:0d:cb:a7:72:3e:c0:74:
                    95:f1:d4:de:d2:26:39:76:ef:5d:2e:ce:46:d9:b0:
                    1a:cc:a0:5b:1f:55:32:d2:bc:c7:a3:53:67:54:b1:
                    6b:8b:03:e4:9d:ff:29:b4:80:b4:90:38:0e:17:73:
                    0a:a3:62:4d:2b:55:40:4d:c2:1d:9b:2c:ad:31:ef:
                    86:56:6d:ed:89:b6:8f:d4:4a:ce:f5:cb:e7:19:13:
                    bc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F1:3A:C8:3B:03:41:09:6D:59:FB:DB:35:F0:4B:0B:92:62:F3:7D
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/WfE6yDsDQQltWfvbNfBLC5Ji830.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.120.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         3a:a6:96:97:da:93:4e:58:86:fe:e2:a3:f3:0e:e3:ae:79:24:
         6f:54:b2:e3:df:20:00:cd:d5:5f:e8:d9:aa:8d:01:38:fb:a3:
         0b:3e:db:99:37:d7:b2:87:0c:63:8f:53:f5:e1:24:05:8f:09:
         88:19:65:7a:f8:6b:50:e1:56:2b:1e:a5:5a:fa:57:77:74:5f:
         e4:68:86:75:53:d7:4e:4d:26:98:4b:92:f3:f2:e7:eb:8b:79:
         b2:d5:be:e2:8e:8f:ff:0b:bf:27:c5:67:cc:a6:d0:3d:ad:12:
         5a:ab:5f:d5:39:62:7d:64:05:c9:78:b8:33:51:45:58:7f:66:
         ec:e4:dd:69:90:e6:ef:ce:e0:da:ac:aa:6f:b6:8d:36:96:e5:
         39:25:91:84:46:62:6f:76:e8:3a:b4:9f:10:fa:3d:7d:8e:bd:
         8e:53:34:b4:e5:eb:3c:42:8a:56:dc:cb:30:01:da:06:b9:a2:
         cf:1a:ed:27:0d:78:cd:03:37:24:33:d6:3c:81:4f:82:90:bd:
         b4:09:31:6d:00:77:eb:6d:3d:48:d8:50:7d:eb:4f:62:55:16:
         d8:fa:a3:68:ca:bc:b2:02:e3:c4:a8:c6:7e:58:13:a1:83:b2:
         a8:c9:ee:7d:26:13:42:ec:e1:bb:ac:74:d2:b3:90:83:c7:74:
         bf:34:40:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org