Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/XKbwhgQnt7FhMCCqTiEsbv9kNgk.roa
File:                     XKbwhgQnt7FhMCCqTiEsbv9kNgk.roa (raw, json)
Hash identifier:          kCsmm8zZKcpOrJWfr+0xtEaIQgy0h2UaMCY0hhKO12k=
Subject key identifier:   5C:A6:F0:86:04:27:B7:B1:61:30:20:AA:4E:21:2C:6E:FF:64:36:09
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       87
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/XKbwhgQnt7FhMCCqTiEsbv9kNgk.roa
Signing time:             Tue 07 Jun 2022 10:13:16 +0000
ROA not before:           Tue 07 Jun 2022 10:13:16 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        175.108.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:13:16 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=5CA6F0860427B7B1613020AA4E212C6EFF643609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4d:ee:8b:46:f8:4d:d4:88:75:fb:3b:25:6d:
                    c3:55:31:68:03:d2:d1:10:d9:0a:80:6a:74:a9:56:
                    1c:a8:b7:ae:a5:eb:2d:7d:54:23:77:1b:63:48:95:
                    d8:f0:fd:09:c4:2a:a7:79:b2:22:a7:89:ae:bc:d0:
                    f8:96:ee:01:7c:a1:68:31:d4:00:7f:db:f7:9b:69:
                    40:d0:7f:d0:48:1a:c6:1f:ba:ab:a9:a8:a8:36:f6:
                    3f:ff:7a:7c:af:e1:4d:ac:04:1d:e0:b9:b4:4f:44:
                    11:a9:ab:fb:f1:09:f5:fc:39:c1:ef:c0:f4:8f:65:
                    87:ad:d4:4a:ba:b7:8e:0c:85:0f:cf:d6:10:95:38:
                    a1:28:52:d8:56:37:3d:03:31:3d:9a:ed:de:4c:3c:
                    ff:df:cc:82:f2:fc:88:7e:69:f9:e8:c0:80:a8:31:
                    e2:71:d1:10:9e:77:fd:c3:d2:03:d2:26:60:98:21:
                    f2:d9:85:6d:39:3f:80:34:2d:7e:a5:64:48:af:ed:
                    8a:dc:04:26:45:69:dd:81:5e:4d:ce:da:e9:5b:bf:
                    20:2f:1e:c4:ec:58:3c:a8:5d:7c:15:93:6f:9d:9f:
                    8b:d8:d3:cf:7d:3f:2c:de:75:55:12:5f:0a:6e:3e:
                    74:39:0c:11:fe:6c:d4:0a:a5:d8:37:80:6a:6f:ee:
                    c2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A6:F0:86:04:27:B7:B1:61:30:20:AA:4E:21:2C:6E:FF:64:36:09
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/XKbwhgQnt7FhMCCqTiEsbv9kNgk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.108.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         62:ea:8b:32:a8:b3:d1:43:30:3e:70:37:cb:3c:ff:55:e3:f6:
         e9:ce:27:e9:c9:2f:51:8f:7b:73:83:f4:b9:53:b3:2d:51:07:
         a1:3a:75:a5:8e:ce:42:0e:47:5c:67:de:27:38:dd:b2:c3:31:
         ea:33:b8:8e:ee:4f:b8:e7:5a:db:7d:c2:5f:9c:5d:53:ce:53:
         2d:34:5d:b5:5e:1a:30:e7:7a:9f:e6:3d:8f:8c:b6:77:aa:a5:
         4c:32:68:ce:74:f3:82:79:72:f3:95:77:9c:05:82:68:51:1b:
         eb:5e:ae:f2:35:81:71:fa:17:81:51:16:09:27:f8:81:45:4f:
         17:c2:45:ac:41:f8:de:16:d0:ec:23:97:bb:d0:00:18:1d:d6:
         0a:2c:87:8b:b0:aa:15:a4:0e:a7:c5:b6:c3:39:f4:58:1e:5c:
         08:a2:3e:50:0b:da:a1:10:e1:74:20:ea:43:a1:bf:3d:5c:06:
         87:e7:8a:c8:0d:bf:5e:8b:2e:63:8f:cf:75:d9:1d:50:c5:c2:
         d6:30:ca:19:89:f8:8e:ec:ea:76:cc:95:b0:66:4b:66:a6:ce:
         c5:50:ae:13:2b:61:c2:18:b8:d1:58:67:e5:32:de:7d:1c:25:
         ea:f3:86:e6:0a:0e:59:a3:a6:0c:a4:85:9b:58:1f:ef:07:4e:
         b0:77:e0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org