Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Z7CtDqnVnRddFD08wK_tpWN8tW0.roa
File:                     Z7CtDqnVnRddFD08wK_tpWN8tW0.roa (raw, json)
Hash identifier:          zhiGl/oDNVuS+PFzkviTxHyxdM+V0uqQO9calOQD3yU=
Subject key identifier:   67:B0:AD:0E:A9:D5:9D:17:5D:14:3D:3C:C0:AF:ED:A5:63:7C:B5:6D
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0149
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Z7CtDqnVnRddFD08wK_tpWN8tW0.roa
Signing time:             Fri 28 Oct 2022 05:45:43 +0000
ROA not before:           Fri 28 Oct 2022 05:45:43 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        113.152.128.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 329 (0x149)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Oct 28 05:45:43 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=67B0AD0EA9D59D175D143D3CC0AFEDA5637CB56D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c4:95:2b:c7:8e:c4:6b:50:7e:82:df:fc:40:
                    72:c1:0b:fb:ac:e8:c6:ce:1e:d0:64:12:9b:ac:5a:
                    0e:2c:f8:33:4c:6c:5e:04:31:9c:ac:e6:9c:1a:a5:
                    47:80:7b:e5:56:15:85:33:e7:62:b0:12:63:9b:e6:
                    e7:2a:d4:a7:d5:7f:86:c7:a1:9f:f3:88:f6:ef:0a:
                    ba:0f:a1:b2:17:db:c1:69:74:bd:19:22:0f:07:e8:
                    26:06:bc:eb:0e:ee:a5:1d:9d:60:f9:e8:a7:8b:e5:
                    28:2d:f0:7a:ba:ca:f2:d2:ca:57:5f:f8:07:c4:5a:
                    b1:34:8e:5e:58:31:d2:39:2b:28:36:25:09:2b:b1:
                    d9:86:88:91:84:a4:0f:43:8d:42:d7:8d:16:fd:11:
                    2f:17:e6:1b:8f:c9:0a:c2:05:99:86:ec:58:88:51:
                    f1:ed:60:75:da:64:8c:96:39:b9:f5:cf:dc:3e:5b:
                    fc:31:8f:b5:c2:e4:e9:37:e7:14:cb:0d:d1:56:7d:
                    ab:30:46:84:3d:4f:6f:7f:a8:b6:4d:2a:af:89:3f:
                    5c:75:28:ec:06:eb:63:37:d2:9b:02:8d:9f:be:6e:
                    97:ee:c7:fb:01:5d:84:26:3e:19:fd:fd:ad:c6:76:
                    0e:e4:8c:29:06:69:b7:4d:b9:e8:35:c9:8b:88:12:
                    96:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B0:AD:0E:A9:D5:9D:17:5D:14:3D:3C:C0:AF:ED:A5:63:7C:B5:6D
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Z7CtDqnVnRddFD08wK_tpWN8tW0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.152.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         ac:66:9f:3e:a9:3e:b5:20:31:43:38:98:1d:40:bd:b6:2d:3c:
         0c:1d:96:d1:11:16:8e:df:70:6b:2d:2e:df:61:b1:cb:d0:8d:
         42:da:0d:e4:ad:67:1a:ad:77:ef:55:5a:1a:4e:41:6d:dc:ac:
         43:9f:43:9c:a3:c0:5f:f7:6a:d1:1e:8d:f0:0e:4b:44:52:42:
         54:d2:01:22:06:d7:70:17:c5:c1:f9:7e:f4:d2:b9:c7:95:19:
         19:cf:9a:7a:cd:b5:b5:a4:98:51:a3:19:94:78:77:57:d0:30:
         40:cb:12:48:79:d1:d7:b6:0e:bb:35:6c:f5:6e:64:e2:95:8b:
         c8:a7:09:1b:da:dc:89:b4:2c:c2:a2:45:ef:bb:a2:4e:b2:31:
         f7:80:5e:a9:c2:30:97:42:10:42:ad:b3:71:29:0f:c3:c3:ea:
         07:63:1e:11:fa:b6:31:04:83:72:ff:81:bf:70:83:bf:78:47:
         1a:71:f2:cd:05:c5:24:9c:73:75:1b:2c:77:1f:3a:db:e3:5b:
         02:be:e3:73:47:28:e5:16:2c:38:7e:52:47:1a:98:cf:5f:6c:
         35:9b:ad:7c:d3:11:d7:0d:fa:96:d5:d6:aa:6c:ac:ff:ad:fb:
         97:a5:5b:64:db:e0:30:b0:d8:89:aa:91:ee:ca:c5:30:2f:af:
         4c:59:0d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org