Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/YVvifH--g_kieKD_Kq_YppU87IY.roa
File:                     YVvifH--g_kieKD_Kq_YppU87IY.roa (raw, json)
Hash identifier:          RjFj4Lkna6T43SMSEu8PZbpxWd5YzkMIxJRsYLRpTQU=
Subject key identifier:   61:5B:E2:7C:7F:BE:83:F9:22:78:A0:FF:2A:AF:D8:A6:95:3C:EC:86
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       41
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/YVvifH--g_kieKD_Kq_YppU87IY.roa
Signing time:             Tue 07 Jun 2022 09:57:08 +0000
ROA not before:           Tue 07 Jun 2022 09:57:08 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        14.101.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 09:57:08 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=615BE27C7FBE83F92278A0FF2AAFD8A6953CEC86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c5:bc:e3:00:bc:d7:43:e0:4f:1c:a1:25:23:
                    3d:e3:d4:a4:d4:51:55:b8:bf:85:25:6f:3a:73:59:
                    33:95:88:5d:54:da:2c:84:4f:ce:40:ed:da:e6:dd:
                    02:2a:03:ca:40:9e:7d:71:d0:e9:69:a2:26:ae:84:
                    56:05:e7:d1:2a:0d:82:69:33:e0:55:4e:9e:8c:d7:
                    b0:52:e2:f1:19:6b:f9:fc:75:68:9b:81:db:16:9a:
                    1e:88:3f:46:cb:ea:2f:3c:33:1c:ee:cc:13:c6:90:
                    e3:f6:06:a5:11:04:3c:ce:cd:d3:d4:b6:a6:1d:91:
                    db:d2:a4:98:97:36:6a:a6:6c:9a:17:c9:b6:c1:4b:
                    ae:17:57:6d:44:d9:4b:34:6c:00:22:5d:86:d2:4d:
                    ec:ec:6d:e0:48:c2:6d:b8:40:79:3c:2f:de:a1:6b:
                    6b:92:72:27:d8:e6:b8:d6:4c:e6:3b:12:fb:1e:83:
                    b0:db:19:e9:39:f0:c4:07:30:96:f6:6d:ab:6b:7d:
                    e0:eb:b7:22:3f:8a:61:4d:5e:ca:f2:07:fe:23:4c:
                    77:a8:ac:ac:ac:54:b0:75:b2:67:a6:9a:5d:05:27:
                    0a:e9:50:04:e5:1e:37:e7:6a:4e:90:87:c8:e9:55:
                    d1:37:90:fe:ec:d7:f6:19:84:bb:6a:68:56:48:d9:
                    20:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:5B:E2:7C:7F:BE:83:F9:22:78:A0:FF:2A:AF:D8:A6:95:3C:EC:86
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/YVvifH--g_kieKD_Kq_YppU87IY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.101.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9c:7a:e0:1b:7f:54:8f:7c:e4:e8:bb:d8:98:0c:ff:f6:f1:6f:
         fd:9c:0d:90:d9:60:e1:90:dc:10:dd:b6:5d:0d:38:5c:6d:61:
         dc:31:24:55:f4:b9:f7:4f:a6:68:eb:0e:63:a1:c4:22:eb:82:
         74:43:1c:9b:0d:f1:e9:f1:11:a0:53:f9:03:34:57:90:82:d7:
         d4:b7:88:d6:e6:94:b0:c5:f2:9b:95:63:ab:f6:e8:12:b2:27:
         b5:c9:15:46:9a:f0:ae:93:3f:a9:e5:e8:17:94:71:59:47:3c:
         3e:52:f2:1b:b4:3e:07:aa:fe:8e:b7:65:69:8c:56:a3:3b:ac:
         8e:6a:b2:56:1d:b0:bf:59:c8:66:8c:fa:05:85:4e:59:64:08:
         f7:b0:6f:81:db:a6:db:bf:b0:13:ea:67:2a:eb:01:77:a7:43:
         96:f2:30:34:1a:a3:35:b0:eb:28:08:f0:b2:57:a5:82:33:9a:
         35:93:6c:9c:ba:57:81:8d:0b:01:f0:28:f7:34:be:2e:d1:b0:
         44:3a:c9:53:cb:82:2f:df:83:f6:3f:49:55:9b:a0:3a:c1:e5:
         3d:ca:e6:80:10:1e:1d:4c:52:32:91:a1:47:d8:8b:b1:96:ba:
         f3:92:50:f1:cd:d0:66:9f:57:bd:3b:6c:d0:30:c0:78:4e:c9:
         59:64:f3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org