Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/XY2bPrtkH2bDk4eIYU9HDMK2VyQ.roa
File:                     XY2bPrtkH2bDk4eIYU9HDMK2VyQ.roa (raw, json)
Hash identifier:          JOThZKsUaWzDqn8rhyDTvRfIpjFX0K1E16EckYq8b+s=
Subject key identifier:   5D:8D:9B:3E:BB:64:1F:66:C3:93:87:88:61:4F:47:0C:C2:B6:57:24
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0137
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/XY2bPrtkH2bDk4eIYU9HDMK2VyQ.roa
Signing time:             Fri 28 Oct 2022 04:47:20 +0000
ROA not before:           Fri 28 Oct 2022 04:47:20 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        27.86.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 311 (0x137)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Oct 28 04:47:20 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=5D8D9B3EBB641F66C3938788614F470CC2B65724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:71:7b:08:93:bb:6a:7c:07:75:04:3c:a1:fa:
                    e3:51:ae:15:d9:d1:87:ea:32:5e:c9:e1:50:0e:67:
                    aa:6e:d9:34:ee:06:1d:eb:b7:9c:f7:9e:57:f2:b9:
                    09:8b:ff:42:57:30:08:93:84:27:b4:24:e1:72:06:
                    08:16:7f:62:0e:b9:a3:dd:2d:a7:f5:85:a1:7e:8b:
                    ff:bc:79:a3:e9:2d:c4:f6:e8:c5:04:57:81:25:2e:
                    3e:d8:3a:05:6c:ad:07:b2:15:fd:11:49:79:d4:cd:
                    b0:30:3c:37:14:d3:d1:06:b9:99:dd:98:d6:8a:ca:
                    1a:bf:79:48:5d:99:e9:e2:a7:45:dc:08:e0:8f:0c:
                    42:9f:11:4b:19:81:2d:c7:c3:ab:07:53:9b:bf:7b:
                    83:98:6d:b0:74:66:0c:d3:51:75:85:17:18:92:1f:
                    d6:b0:7b:74:88:24:11:5f:3e:88:65:ac:13:16:5e:
                    94:e7:66:da:ff:2a:7e:93:22:43:52:0e:72:0e:5a:
                    ed:0b:45:64:a0:f8:02:0c:55:65:ad:dc:7d:38:c7:
                    84:74:7a:0b:ed:ba:6d:b6:48:15:79:2f:fe:91:5c:
                    37:f1:1a:7e:87:0b:86:7c:2e:6f:35:6e:76:9d:2b:
                    c6:31:0d:10:91:48:d0:a7:7d:62:43:d4:cb:ac:b7:
                    04:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:8D:9B:3E:BB:64:1F:66:C3:93:87:88:61:4F:47:0C:C2:B6:57:24
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/XY2bPrtkH2bDk4eIYU9HDMK2VyQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.86.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         29:50:fb:fc:39:5b:08:cc:53:aa:1b:03:f2:39:b1:86:21:22:
         90:ee:3b:3f:f2:91:c8:bc:ac:c2:03:6b:90:2d:16:dd:b9:23:
         5e:16:17:7e:1b:bd:66:5d:ba:1d:6e:53:71:41:f5:2e:3a:52:
         26:13:12:ce:c0:24:1a:0a:54:94:5a:00:ba:0a:20:86:62:f3:
         ce:51:2e:75:90:6b:4c:97:94:16:43:e1:73:4e:58:a0:a4:3d:
         40:93:a1:57:ef:06:c6:c5:4a:10:69:66:69:43:61:1d:89:97:
         29:8c:45:dc:fd:57:db:82:de:ea:b7:8b:65:4c:d4:e7:1f:48:
         e0:ae:90:3d:cc:de:59:01:79:00:81:3f:31:29:a9:70:da:8b:
         d6:7c:ac:63:2f:3f:74:ad:dc:27:ac:e9:02:e6:8d:12:68:f7:
         d1:8c:26:3f:11:e5:83:44:ce:c4:34:48:a4:57:4e:18:e9:c1:
         71:7b:f8:37:db:aa:b3:4a:97:47:d9:fe:ce:e4:ab:c8:4e:80:
         43:69:10:fe:3d:be:67:0f:eb:e4:97:25:82:ac:64:69:59:0c:
         0d:26:45:6d:68:58:31:81:60:b5:b1:a3:1a:a6:03:f4:2f:f8:
         3c:8a:d7:fb:ba:4c:fc:56:40:cd:c7:62:c2:b2:d2:f5:ad:af:
         2a:2d:95:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org