Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/_1PJCQ268iyn3XQnPZFmU6WqmJw.roa
File:                     _1PJCQ268iyn3XQnPZFmU6WqmJw.roa (raw, json)
Hash identifier:          wIVfHoD2G61i+I/DzMjE9y9mokXM6B8ISLEvULzyYBE=
Subject key identifier:   FF:53:C9:09:0D:BA:F2:2C:A7:DD:74:27:3D:91:66:53:A5:AA:98:9C
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       01A4
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/_1PJCQ268iyn3XQnPZFmU6WqmJw.roa
Signing time:             Mon 01 May 2023 01:30:39 +0000
ROA not before:           Mon 01 May 2023 01:30:39 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        125.29.64.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 420 (0x1a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:30:39 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=FF53C9090DBAF22CA7DD74273D916653A5AA989C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:42:1a:ef:e7:a9:79:0e:09:15:06:39:b5:34:
                    e9:5e:76:9a:88:30:85:d8:52:0a:f9:92:24:99:ac:
                    16:b5:82:b0:61:04:5d:3e:9c:84:5d:dc:30:6b:be:
                    fc:4c:8f:65:bf:dd:2a:ce:3e:36:2b:d8:42:56:a6:
                    38:f7:81:00:21:cd:4e:ab:d7:3e:f9:73:c1:4d:75:
                    d3:e3:39:8a:8a:b8:f4:5a:9f:03:56:c6:e0:94:c1:
                    4f:01:cf:3d:19:6f:a3:c2:d6:c1:f7:cd:fc:fa:35:
                    b9:66:1c:bb:e4:92:91:4c:9f:10:03:d7:a7:5e:e8:
                    cf:02:e3:2e:a9:77:9e:73:1e:bf:a1:a8:cb:c1:42:
                    c8:b7:58:09:18:af:e0:3b:53:7a:a2:3a:90:d4:79:
                    8a:8c:6c:01:08:6b:4c:2c:83:a4:b7:27:f0:31:c0:
                    5d:27:3d:6f:0b:c6:ca:55:25:fc:9c:53:99:e3:4b:
                    19:bd:53:1e:9a:5f:62:89:95:01:ef:a8:16:18:55:
                    11:32:5a:39:f3:7f:87:46:71:46:63:8b:2f:27:32:
                    c5:65:05:fd:10:1b:7f:49:ca:33:0a:1a:b7:83:37:
                    11:e9:fb:79:43:f7:00:66:36:1e:80:cf:79:77:ee:
                    51:95:2d:60:1e:9e:a5:da:4e:35:e3:fe:f5:11:fd:
                    f1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:53:C9:09:0D:BA:F2:2C:A7:DD:74:27:3D:91:66:53:A5:AA:98:9C
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/_1PJCQ268iyn3XQnPZFmU6WqmJw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.29.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         5a:35:22:75:38:f9:ea:4d:4c:27:1d:39:6e:ef:d4:8e:de:ed:
         d3:a5:c4:63:fe:bd:8d:a5:53:5d:11:3a:98:c0:5f:ec:db:c4:
         dc:05:33:7d:2e:3a:99:20:9b:df:4d:b4:6a:44:f6:68:75:a4:
         b4:80:f4:20:85:d9:6f:ea:3e:aa:f7:38:af:90:f3:66:74:95:
         7a:2e:72:5c:73:51:d1:9f:1b:88:1d:27:d6:d8:80:03:fe:8f:
         27:ec:15:c7:b2:ef:57:f6:59:1e:79:a4:e5:8e:02:16:ad:f7:
         7e:b9:07:69:7f:65:2d:fc:c5:98:eb:d5:d8:8a:39:7d:27:8c:
         39:f7:75:2e:fa:40:9c:9f:6c:41:a0:99:6a:1d:5f:d8:10:6b:
         79:9d:31:f7:30:3e:ab:b4:f5:e5:f5:7f:cf:00:77:50:43:85:
         33:04:01:51:df:c6:08:2e:81:ca:ca:ea:2c:8f:2a:2d:ab:ba:
         81:5e:53:db:8b:89:ff:5c:bf:ae:9d:85:26:71:dd:55:84:00:
         ca:e0:92:58:7f:56:43:2e:a5:9b:86:27:3f:d9:56:d6:68:10:
         ff:61:e1:fa:5c:70:51:36:39:81:c9:a2:41:10:5e:e8:a0:61:
         96:32:5a:d6:d6:32:dc:69:3d:1a:e5:2b:66:9b:0a:d6:e5:9b:
         42:bf:99:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org