Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/ZEp825ah7tTVRig6IyseHyryQAU.roa
File:                     ZEp825ah7tTVRig6IyseHyryQAU.roa (raw, json)
Hash identifier:          NfWqMr0hRky4T5m0P7wvRx48Y+G/cYoBiIS+NKOLPpI=
Subject key identifier:   64:4A:7C:DB:96:A1:EE:D4:D5:46:28:3A:23:2B:1E:1F:2A:F2:40:05
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       75
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ZEp825ah7tTVRig6IyseHyryQAU.roa
Signing time:             Tue 07 Jun 2022 10:09:11 +0000
ROA not before:           Tue 07 Jun 2022 10:09:11 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        121.111.0.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:09:11 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=644A7CDB96A1EED4D546283A232B1E1F2AF24005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7b:07:a6:5d:e5:54:38:1e:9a:0b:17:31:4d:
                    c7:4f:b7:20:2f:c8:91:9e:a4:54:50:6a:41:d6:fc:
                    f4:89:39:97:6b:43:c3:96:b6:a2:a2:e0:22:3b:6f:
                    89:b9:6f:32:87:47:1f:03:b6:cf:f3:dd:ce:c1:db:
                    3b:e4:57:2f:d6:e2:df:a7:3e:c7:b9:0b:76:15:dc:
                    53:c7:06:36:53:8e:18:94:8a:25:18:7e:d6:13:f5:
                    39:2a:f0:00:2c:86:8e:01:2d:d1:9e:02:35:94:eb:
                    7b:dc:31:d2:7d:bf:01:bb:45:8b:52:e4:9d:d2:ad:
                    3c:b3:5c:e7:1c:82:c3:1a:ab:46:5c:10:fc:f1:bd:
                    5d:d1:98:57:a7:6a:97:fc:90:03:c4:6d:66:ef:b5:
                    06:3c:40:35:ae:8a:13:fc:de:62:8a:8c:49:09:c6:
                    5b:b1:28:9d:d3:cc:1b:27:25:dd:f1:e1:a9:ae:e4:
                    39:fc:50:4b:03:65:50:3b:90:50:c7:19:15:50:0f:
                    00:14:dd:56:83:0d:73:66:5d:d6:69:56:13:2d:84:
                    9c:dd:9f:bb:a1:7d:c8:06:10:69:9a:22:f1:f4:e8:
                    bb:51:26:9f:1c:90:82:10:58:65:b9:85:d8:16:e0:
                    e1:88:95:e2:36:25:1b:34:87:5f:61:cd:c2:56:79:
                    05:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:4A:7C:DB:96:A1:EE:D4:D5:46:28:3A:23:2B:1E:1F:2A:F2:40:05
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ZEp825ah7tTVRig6IyseHyryQAU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.111.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         9c:11:b5:c7:93:b9:20:7e:ff:67:be:9f:c2:39:91:c8:20:25:
         c3:f6:08:27:e3:81:20:00:bb:c0:a5:d4:a8:3a:c7:4e:cc:15:
         4b:fd:80:20:bc:03:90:de:ab:3c:9b:62:03:a1:a8:97:a5:08:
         60:10:78:8e:26:58:70:88:8f:f8:ab:a9:2c:76:73:33:a7:bc:
         e8:00:61:71:11:85:b0:6e:de:70:9c:8f:2c:23:70:bd:50:34:
         6d:b4:6d:ed:20:b8:6d:e2:b6:5c:31:74:59:2e:25:4c:a8:a5:
         33:fb:60:aa:0e:6f:00:2d:17:c6:38:e7:a1:c0:dc:5c:75:5a:
         bf:9a:3a:31:43:04:ff:96:a9:3a:a4:ab:a9:05:64:92:e2:b6:
         ec:72:01:d8:74:d7:84:e7:64:26:4c:6a:fe:cf:57:79:34:88:
         53:79:e7:48:c5:da:7e:4d:ac:e5:2d:21:c6:70:05:af:f5:16:
         bf:c3:4a:05:f4:cd:40:d5:bc:9b:f5:d1:03:c2:74:4b:63:14:
         65:71:97:21:8a:f2:73:e9:e5:57:31:74:f1:d1:81:90:6f:29:
         80:1e:4d:0c:e6:a7:69:2b:3f:5a:7f:6d:82:ca:f6:1f:06:04:
         0e:05:85:03:88:48:00:e7:bd:2f:b6:d6:fa:3b:4d:37:df:dc:
         d9:7b:f0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org