Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Wi7sOg31Vx6vN1KwXZ01-sZ6MyY.roa
File:                     Wi7sOg31Vx6vN1KwXZ01-sZ6MyY.roa (raw, json)
Hash identifier:          GVrjEVWAVSaRsp2H76tXHf5gVyxByalBHrFOzW7ZIHk=
Subject key identifier:   5A:2E:EC:3A:0D:F5:57:1E:AF:37:52:B0:5D:9D:35:FA:C6:7A:33:26
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       015D
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Wi7sOg31Vx6vN1KwXZ01-sZ6MyY.roa
Signing time:             Thu 13 Apr 2023 09:50:34 +0000
ROA not before:           Thu 13 Apr 2023 09:50:34 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        59.130.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 349 (0x15d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Apr 13 09:50:34 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=5A2EEC3A0DF5571EAF3752B05D9D35FAC67A3326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d9:9c:49:49:11:c1:14:ff:c6:be:cf:9c:70:
                    04:8e:b8:f5:cd:b6:af:e2:94:f3:72:29:52:59:f9:
                    bd:4c:14:3c:88:cc:d6:57:2c:a6:b3:cc:ea:6f:91:
                    4d:0c:a3:b8:6a:0c:fe:0c:38:d2:6b:1e:88:e5:d8:
                    76:09:db:b0:4a:b6:64:fa:26:42:b7:2c:ae:6f:75:
                    a2:cc:58:63:8c:19:65:b4:5e:57:34:f0:f8:a2:54:
                    55:f7:f4:ad:c9:c2:3f:84:93:f8:5c:2b:a0:fe:82:
                    e7:39:69:c5:98:a9:8e:22:bc:34:c5:87:d6:52:bc:
                    08:8f:8c:1c:bc:4a:79:1a:1f:e0:49:0b:58:68:90:
                    4c:ce:f2:35:2e:c9:fd:c1:51:94:c3:7d:05:a5:a4:
                    72:99:f8:5b:e4:1a:37:29:e7:26:2a:0b:eb:ee:d0:
                    4c:63:0e:0d:d5:39:24:49:01:36:63:90:31:bc:50:
                    e7:0a:83:b7:41:e2:26:0f:e6:dd:86:d1:aa:f3:92:
                    79:08:c1:b6:22:c3:87:f2:63:96:6c:05:a2:c9:f8:
                    9f:c3:54:5b:e3:c9:89:24:58:10:67:02:7c:e4:20:
                    78:f3:a1:c5:cd:73:60:6b:e2:cd:55:83:90:76:80:
                    ad:58:b2:cd:a5:20:c4:15:03:2a:76:12:3a:0d:8f:
                    47:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:2E:EC:3A:0D:F5:57:1E:AF:37:52:B0:5D:9D:35:FA:C6:7A:33:26
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Wi7sOg31Vx6vN1KwXZ01-sZ6MyY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.130.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         90:83:36:5b:c3:7c:ad:23:76:2a:8d:8f:b0:0f:94:0c:f8:03:
         9b:73:00:09:a4:bc:7d:38:8f:47:d1:11:e7:2f:1b:6b:f1:32:
         e7:fc:9c:7f:5f:35:5c:c5:2a:30:7c:67:a4:9b:1a:e0:47:c9:
         ad:10:2b:8c:fe:63:08:12:45:f6:c6:cc:0c:e5:6d:ec:04:3a:
         84:58:65:3d:97:42:c7:db:e6:22:3a:16:99:28:22:83:85:60:
         5a:d6:f4:61:1f:53:7a:63:a9:cb:7f:db:0f:9f:22:ee:99:f2:
         a3:3f:1c:5b:14:a2:d0:bd:c0:e0:07:0e:1f:56:c1:92:c5:9c:
         ac:72:da:45:b4:ce:1e:b9:6b:9b:40:32:0e:b2:e5:2b:22:55:
         66:49:7b:a9:78:de:a9:d9:7d:4c:ae:b4:91:59:05:10:08:45:
         c8:7e:dd:69:31:f4:b1:f9:40:8a:c5:67:92:cc:ef:84:40:92:
         0e:e6:91:9c:28:b5:8f:93:4f:18:af:64:69:b3:d8:12:c0:1b:
         57:f1:be:55:cb:07:20:31:31:22:74:22:e9:d0:9b:46:3e:ae:
         3a:50:07:57:3f:7d:37:67:63:f3:b6:f9:d9:90:e8:76:d2:0e:
         59:36:64:97:59:fa:8e:f3:01:c3:2a:46:63:c4:34:3c:6c:9c:
         93:2a:58:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org