Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/YXPGbBt-BnDZPy5RZhV-UN5nNNA.roa
File:                     YXPGbBt-BnDZPy5RZhV-UN5nNNA.roa (raw, json)
Hash identifier:          VXQ2UDeVTB1/cZy/XFt2lo97HmhYZ5tCF2vgJVjIaSo=
Subject key identifier:   61:73:C6:6C:1B:7E:06:70:D9:3F:2E:51:66:15:7E:50:DE:67:34:D0
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       AA
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/YXPGbBt-BnDZPy5RZhV-UN5nNNA.roa
Signing time:             Tue 07 Jun 2022 10:35:23 +0000
ROA not before:           Tue 07 Jun 2022 10:35:23 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        222.12.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170 (0xaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:35:23 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=6173C66C1B7E0670D93F2E5166157E50DE6734D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:41:70:fd:97:75:1c:bc:f2:cc:4b:84:51:bb:
                    1c:8c:01:3a:82:b7:59:81:51:ae:de:ef:25:51:7e:
                    4c:5e:db:fb:21:a6:77:08:c7:39:ff:aa:67:2a:1d:
                    fb:6b:c1:ef:96:cd:37:8b:f9:73:6e:95:83:0a:d2:
                    24:ea:42:ff:cb:a8:39:ae:bb:44:90:13:5f:f3:d5:
                    dd:1f:88:a2:ac:cd:7c:f5:71:f6:04:2a:83:31:93:
                    48:e4:79:56:0a:8a:1d:20:47:e6:12:e3:9f:24:a6:
                    24:54:eb:b1:27:ff:58:4f:9e:9f:7d:25:f2:a9:65:
                    2e:83:24:df:49:cd:e0:25:d5:15:a2:09:36:07:cd:
                    2f:96:9f:57:71:ea:42:2a:fa:45:b9:43:0d:60:8a:
                    4c:f8:6f:55:82:25:2e:81:d7:c0:bc:e0:b9:b3:bc:
                    6a:c0:ec:b4:f8:7d:14:83:95:d9:71:d9:cd:d4:14:
                    62:49:30:2c:b1:2d:af:ea:e2:ff:3c:d9:be:3a:10:
                    cb:78:30:a4:8b:73:ce:e3:fb:d9:e0:6a:c4:de:81:
                    1d:6b:ab:b2:5d:16:29:76:b1:66:dd:5d:b0:2e:13:
                    10:47:27:36:5e:73:69:99:cc:e9:60:cc:08:54:89:
                    6d:82:b9:2c:3a:9d:71:bd:69:c3:48:47:6d:8f:47:
                    27:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:73:C6:6C:1B:7E:06:70:D9:3F:2E:51:66:15:7E:50:DE:67:34:D0
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/YXPGbBt-BnDZPy5RZhV-UN5nNNA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.12.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a4:4b:b8:01:49:0b:8f:b9:5e:f8:67:15:dc:e8:90:c8:4d:66:
         8e:8f:ec:6f:d2:73:e8:47:55:ca:b9:42:83:4c:64:96:7b:07:
         ac:fd:90:d5:11:a5:ab:49:01:52:bb:0b:e8:17:8d:5e:7d:bf:
         5c:cf:8d:09:43:dd:dc:e5:57:27:24:09:62:08:ac:d1:f8:83:
         2d:a9:9b:7f:2d:71:65:3b:ad:2f:24:44:6c:ce:c6:92:43:d9:
         85:2f:95:63:ba:d5:8c:ae:c4:8e:40:05:af:f3:0e:be:d8:9a:
         80:98:a8:2b:29:8e:76:93:cd:51:84:a7:5f:5e:82:c1:f2:b1:
         03:88:b3:51:71:b4:ec:48:6d:1f:d2:fe:4d:3b:48:c6:28:39:
         57:28:88:89:9b:92:67:94:a5:4f:04:b1:e7:a6:ea:31:5d:b6:
         69:dd:0d:65:e3:1d:22:e3:43:e1:9d:cf:86:5a:22:a3:c5:27:
         79:e0:d9:06:e4:25:94:65:47:d6:34:c8:4e:bb:4f:a9:f8:33:
         8f:21:81:8f:c2:72:5a:89:e1:cc:86:3e:67:1d:5d:56:b7:12:
         86:3c:a7:9d:d6:d2:b1:1c:c6:a2:4a:9e:87:1a:a5:83:94:9c:
         b6:f3:55:82:86:50:b0:d0:81:7b:c2:af:11:c1:92:10:69:6e:
         3d:48:d4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org