Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Xw2vDDRwkn-l5nToTyOsM3n7-Oc.roa
File:                     Xw2vDDRwkn-l5nToTyOsM3n7-Oc.roa (raw, json)
Hash identifier:          NkzFZ7182vqAXec2DrFW2zvTMEWsnL2rLQvAfYSjy4g=
Subject key identifier:   5F:0D:AF:0C:34:70:92:7F:A5:E6:74:E8:4F:23:AC:33:79:FB:F8:E7
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       34
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Xw2vDDRwkn-l5nToTyOsM3n7-Oc.roa
Signing time:             Thu 28 Apr 2022 09:16:40 +0000
ROA not before:           Thu 28 Apr 2022 09:16:40 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     2516
IP address blocks:        59.142.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Apr 28 09:16:40 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=5F0DAF0C3470927FA5E674E84F23AC3379FBF8E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:83:9e:e8:93:a1:4b:04:5f:08:95:c4:71:a4:
                    09:a9:a6:4e:06:48:2c:fa:fc:ef:9b:41:17:d0:03:
                    21:6d:de:e6:09:e1:6f:8c:90:2d:31:7f:4b:e8:f0:
                    51:72:d3:94:b3:78:d2:e9:09:49:93:a3:f7:0e:07:
                    d1:8a:cf:85:eb:dc:69:0c:67:68:75:c6:ff:4f:e3:
                    cd:e2:02:69:c7:c2:c6:98:6a:22:02:1b:11:7c:e6:
                    68:e1:2f:d8:37:76:03:ea:19:b4:03:50:e9:01:4d:
                    56:64:d0:d1:21:f7:cc:1d:21:f0:3b:4a:7f:28:70:
                    fb:66:39:f6:e2:c6:15:37:5a:08:13:1d:fe:0d:79:
                    57:2e:23:67:93:4d:ab:a9:2b:da:61:6a:1d:5a:38:
                    d3:4c:89:06:b7:75:3d:55:2d:1b:7c:b1:72:a8:f0:
                    f5:dd:67:4d:0f:ad:eb:07:7a:de:41:4e:81:d6:21:
                    04:6b:76:2c:80:35:e7:ba:f9:26:cf:e9:b7:ce:bf:
                    44:a5:d6:54:08:8e:11:86:26:81:2f:b2:b5:07:a3:
                    22:3a:16:90:5b:8f:86:8c:db:a1:a6:11:77:99:cc:
                    ad:24:3d:2b:5b:bc:a8:08:8b:76:10:cb:a3:97:50:
                    76:5a:06:a6:32:63:39:c0:62:a4:8a:22:28:12:9a:
                    57:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:0D:AF:0C:34:70:92:7F:A5:E6:74:E8:4F:23:AC:33:79:FB:F8:E7
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Xw2vDDRwkn-l5nToTyOsM3n7-Oc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.142.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b0:d0:12:4a:f7:57:63:24:95:f1:e3:73:a2:bc:76:71:06:3f:
         66:de:04:96:d7:27:9c:6a:72:6b:a3:6d:fe:c6:cc:d2:cb:c8:
         86:71:4c:d4:7d:fc:94:30:9e:a6:c4:fa:4b:d4:a5:be:19:65:
         04:d2:ef:46:a5:74:94:e7:99:90:50:aa:a0:8e:9d:66:d6:e9:
         4b:e6:7a:09:ae:5a:70:dd:af:da:ce:3a:a2:cd:2e:d4:a9:86:
         1a:79:d3:ad:b9:13:f5:01:4e:80:dc:7a:d2:a6:95:f1:30:1b:
         b9:c6:32:61:18:4d:73:69:7c:88:ec:84:0e:96:06:a5:4b:0d:
         c6:a2:68:8c:41:0f:38:ee:10:45:3c:79:74:ba:2b:e9:21:c3:
         b2:b7:28:85:0f:18:89:94:db:1a:58:dc:9e:ba:d1:e2:ea:9e:
         81:a9:1e:39:f4:2a:da:e7:7c:ac:95:c1:b1:27:f2:b6:b2:c4:
         2b:11:f0:b9:51:8a:2a:c7:ff:92:5a:cb:35:60:47:a6:63:25:
         43:4f:d4:14:2d:ee:72:5f:b9:d3:c3:06:47:e5:c7:6a:cf:d4:
         98:16:9e:a5:fb:83:2e:9d:81:fe:64:5f:cd:6f:65:59:1c:8c:
         44:66:18:a5:44:9a:bf:00:3f:66:6d:13:78:48:dd:98:02:25:
         d4:7b:b5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org