Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/YpmwlKUvLRMJ24HkDTLgwC344ag.roa
File:                     YpmwlKUvLRMJ24HkDTLgwC344ag.roa (raw, json)
Hash identifier:          cn0r4AeJDE9ZquyGCul69M/xJjvhrYKh/BzcAxINOMA=
Subject key identifier:   62:99:B0:94:A5:2F:2D:13:09:DB:81:E4:0D:32:E0:C0:2D:F8:E1:A8
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       7A
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/YpmwlKUvLRMJ24HkDTLgwC344ag.roa
Signing time:             Tue 07 Jun 2022 10:11:17 +0000
ROA not before:           Tue 07 Jun 2022 10:11:17 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        125.51.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:11:17 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=6299B094A52F2D1309DB81E40D32E0C02DF8E1A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7d:c9:b5:1f:2a:de:0a:17:bf:15:a3:aa:19:
                    74:f4:f6:31:70:38:65:7e:c5:58:dd:44:ec:c3:2d:
                    64:9f:7a:91:11:1a:42:f1:9b:ea:3b:b9:dd:79:84:
                    e7:a3:9d:55:ff:f7:55:ba:f2:48:fb:eb:f0:91:ae:
                    c8:1b:a0:83:eb:36:96:f0:87:59:5d:a4:a5:6a:15:
                    a2:1d:80:4f:10:a5:a9:ed:15:7b:cd:f6:ae:98:8c:
                    48:36:0b:41:7c:28:97:8b:ac:10:5a:af:9b:36:69:
                    d2:5e:9d:9f:b8:e8:cb:3a:a6:da:3c:48:e8:8e:f7:
                    44:f4:ee:35:a2:ca:f8:6f:de:99:b9:c9:c8:64:a7:
                    0f:f8:41:28:1f:11:86:d9:c7:93:2a:76:4e:90:5d:
                    20:cd:16:78:5a:3f:24:10:6b:37:98:07:90:d3:e4:
                    f4:f6:0c:db:6d:ca:2a:84:87:47:60:ab:a0:a7:45:
                    f4:e7:07:9a:49:c5:de:ed:ca:04:93:dc:ff:42:9c:
                    b1:d6:f1:cf:0c:c4:86:41:6c:96:6d:17:bb:fd:54:
                    e3:fa:da:4f:fb:a2:a3:4a:73:7f:a9:8e:11:23:32:
                    a9:09:e0:3a:8b:1f:21:f5:ff:33:8d:43:57:cd:0f:
                    0e:34:31:a6:27:6c:62:f6:50:a2:8c:a7:f0:16:13:
                    0c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:99:B0:94:A5:2F:2D:13:09:DB:81:E4:0D:32:E0:C0:2D:F8:E1:A8
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/YpmwlKUvLRMJ24HkDTLgwC344ag.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.51.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b3:d0:49:74:30:d7:ef:92:2a:76:aa:32:0c:9d:4f:22:81:7e:
         c8:2a:87:74:51:1d:9d:71:d5:c6:e3:ca:7b:a3:47:49:9a:bb:
         09:e9:15:df:c1:49:dc:50:36:32:cc:dd:5f:49:3c:4d:79:e6:
         29:8f:60:b0:2a:c2:ff:45:92:f3:cf:db:0a:17:f8:3f:15:eb:
         7f:a6:2b:32:7e:a1:ba:87:67:be:f7:69:11:ce:b3:02:98:60:
         23:f7:8d:e2:93:b8:bf:99:c5:dd:89:ba:2c:55:39:ab:64:22:
         e2:3b:9b:e0:71:74:eb:49:ce:46:65:30:99:77:55:73:4a:e8:
         32:48:88:49:bc:90:fd:21:f6:e7:d1:9e:97:6d:ad:d0:0a:3b:
         2a:b5:9a:7a:79:d0:1a:e8:4c:68:6f:c5:64:b6:74:c7:f1:f2:
         87:92:52:09:78:54:7e:eb:4d:67:1c:2e:9c:c7:1a:13:53:8b:
         32:07:aa:1a:fd:3c:c1:9c:3d:50:56:b1:5c:0b:b6:e4:0e:c5:
         50:cd:54:a5:07:23:e3:da:20:c6:71:9e:78:dd:ee:ce:6a:ba:
         43:41:5e:d0:6b:ad:34:c5:d1:19:41:87:ff:9f:b5:4f:2f:4c:
         18:7a:1b:54:bb:16:88:d3:20:b1:70:aa:52:42:25:aa:d2:af:
         bd:65:d5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org