Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/WvvYCAaOD0fiBqXWg3U1hFelNOg.roa
File:                     WvvYCAaOD0fiBqXWg3U1hFelNOg.roa (raw, json)
Hash identifier:          4m8GCl5y38l5A7pNbIMPQEOzulolJLzAn/c4vTeIGKM=
Subject key identifier:   5A:FB:D8:08:06:8E:0F:47:E2:06:A5:D6:83:75:35:84:57:A5:34:E8
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       7B
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/WvvYCAaOD0fiBqXWg3U1hFelNOg.roa
Signing time:             Tue 07 Jun 2022 10:11:17 +0000
ROA not before:           Tue 07 Jun 2022 10:11:17 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        121.111.128.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:11:17 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=5AFBD808068E0F47E206A5D68375358457A534E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:be:59:00:a6:0e:53:4c:1a:0c:60:84:1f:9f:
                    e5:41:6b:f8:64:b5:32:23:9b:98:fd:3c:ef:14:28:
                    34:e9:62:ea:ff:b3:26:e5:dd:37:7a:89:79:d3:70:
                    50:38:3f:34:0c:6d:e6:68:67:3b:9d:32:a1:30:38:
                    a6:26:b8:e3:67:7f:ce:1a:35:7d:46:f0:ba:b6:6e:
                    82:c3:0a:1e:87:bf:51:4b:1c:7e:c5:7b:e5:d6:ea:
                    28:2d:b2:7e:2b:28:0d:f8:64:e3:d1:36:61:cf:eb:
                    a9:f1:3a:36:32:ea:8e:bc:74:14:53:8c:5f:9b:8d:
                    3c:f0:8d:e3:99:d9:36:31:67:8e:7c:fc:af:21:5d:
                    b3:96:b8:97:62:a7:4c:e2:17:55:65:aa:ae:f3:c2:
                    04:d2:22:33:d9:fd:2b:be:93:05:20:10:44:f3:be:
                    e8:6f:56:9e:cb:9a:51:82:89:f3:c4:19:7b:e3:51:
                    db:d4:cb:d2:e6:72:d6:14:af:28:c6:10:09:cc:a1:
                    cd:ab:35:98:1a:7d:67:86:07:63:ae:ef:12:58:8d:
                    3c:5c:21:7d:f8:89:13:92:8f:1e:d9:0a:f3:79:2f:
                    cc:49:48:c6:a7:2d:5e:94:97:06:e0:f2:d9:1d:a6:
                    92:1c:3b:f1:a8:a0:b5:d3:0d:90:24:5b:ac:3f:af:
                    27:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:FB:D8:08:06:8E:0F:47:E2:06:A5:D6:83:75:35:84:57:A5:34:E8
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/WvvYCAaOD0fiBqXWg3U1hFelNOg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.111.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         51:fd:0a:26:89:69:d8:1a:6b:89:76:d1:12:a0:b3:f1:0e:cc:
         62:ae:a9:61:fe:59:05:fa:47:55:ff:99:84:60:cb:ba:8a:11:
         9b:67:0d:99:5e:3d:a2:aa:ab:16:44:d4:11:06:6a:5a:94:26:
         eb:31:9f:4b:9f:82:eb:81:35:7c:90:c7:fe:52:b7:a4:6f:47:
         db:cd:74:92:03:f7:bc:c2:b7:81:fe:18:60:cf:48:25:03:ff:
         58:dd:af:1f:3c:cb:a7:78:68:b5:d4:2b:00:5f:9b:3a:e6:10:
         98:6b:8d:ff:0b:3e:88:c3:5a:f7:cb:2b:e8:81:ea:a4:9a:e2:
         8a:da:f8:1f:50:6a:a6:c6:de:a0:83:da:bd:de:df:29:b1:dd:
         9f:95:5f:ae:7f:a3:4c:6b:2e:f6:c1:11:96:29:e7:01:cb:45:
         f5:b4:f4:3a:0d:c2:43:23:4e:62:44:46:b2:09:6b:1c:7b:2c:
         b8:14:f6:1c:24:3c:7f:d4:ff:46:b6:36:9a:28:d3:15:f9:17:
         68:bc:cb:c7:3f:fb:af:70:cd:8f:f4:1a:24:a4:6b:95:44:53:
         f6:79:1e:05:61:a7:a4:4a:37:bf:11:2f:61:c0:e1:a6:49:4b:
         ee:e9:ec:bc:2c:b3:ed:21:36:bf:20:a7:13:ec:5e:28:54:57:
         71:cc:d5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org