Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/_6Dw7PzDfOi8RSM4MfdZB6tjUvU.roa
File:                     _6Dw7PzDfOi8RSM4MfdZB6tjUvU.roa (raw, json)
Hash identifier:          fCp7hF7gDXSDz+uR8H6tFRKU6RDeCj7PY6QZbCGZWdc=
Subject key identifier:   FF:A0:F0:EC:FC:C3:7C:E8:BC:45:23:38:31:F7:59:07:AB:63:52:F5
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       01B2
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/_6Dw7PzDfOi8RSM4MfdZB6tjUvU.roa
Signing time:             Mon 01 May 2023 01:32:05 +0000
ROA not before:           Mon 01 May 2023 01:32:05 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        175.108.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 434 (0x1b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:32:05 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=FFA0F0ECFCC37CE8BC45233831F75907AB6352F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:0a:db:5c:29:97:49:68:eb:6d:4b:8e:9b:96:
                    90:b9:42:19:e1:b2:e1:a3:b8:95:58:d5:97:bf:95:
                    fe:4d:3e:e3:6b:22:28:cf:57:1f:15:8d:b3:0d:72:
                    2d:00:4e:17:70:b6:c3:59:1e:c2:e0:0e:5c:17:77:
                    2e:4f:60:f6:78:e4:f0:4a:1a:0d:f2:e2:93:e8:8a:
                    f5:70:ef:b1:59:6a:bf:1e:65:29:0b:59:11:81:4a:
                    56:e1:74:6c:d2:a5:de:89:2c:23:95:0f:37:d1:c9:
                    21:0d:15:7d:fa:14:e7:9c:63:64:73:7c:af:2b:04:
                    70:84:73:53:c7:bf:d5:69:2d:d7:c5:df:cc:19:85:
                    d5:30:b9:28:c9:eb:a3:d4:05:0f:a0:39:fc:7c:5c:
                    44:de:f2:0d:d9:45:88:c1:53:54:2b:db:7f:00:f6:
                    ff:12:62:3f:0a:49:75:55:cf:b6:c9:ad:e7:84:34:
                    7f:1c:94:5e:18:65:aa:41:a8:35:e8:07:83:10:67:
                    e0:a3:a4:7e:76:7e:22:07:88:4f:d0:03:fc:0a:88:
                    94:01:81:7e:a0:8a:41:05:12:33:33:14:b7:ea:55:
                    86:b4:9e:d6:89:89:e7:49:83:61:6b:16:40:3c:5b:
                    88:f2:12:42:6d:88:4b:12:6c:d0:c0:22:f5:70:3f:
                    15:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A0:F0:EC:FC:C3:7C:E8:BC:45:23:38:31:F7:59:07:AB:63:52:F5
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/_6Dw7PzDfOi8RSM4MfdZB6tjUvU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.108.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a1:34:d3:0f:d5:6c:38:1f:55:a0:0b:6c:31:61:78:ea:0b:27:
         49:f6:9b:24:7e:a2:de:38:d3:52:33:84:62:f0:fe:ec:d5:dd:
         4b:f4:33:aa:15:49:fc:e1:51:e2:19:b9:34:68:e3:dc:37:cc:
         85:3e:ca:cf:1e:a0:a9:9c:91:d4:01:49:0f:b8:fc:98:7d:02:
         4e:4e:45:c4:77:50:c4:57:f1:50:b6:fd:5e:07:d9:1a:99:14:
         67:68:34:7a:2c:93:13:a3:9f:25:8d:15:d8:be:9d:cd:ac:f9:
         c7:93:dc:bf:87:03:03:ee:8f:59:fa:3f:79:12:e7:e1:b3:f1:
         6b:23:da:f0:cd:55:e7:4a:b0:97:02:c0:cf:62:2a:78:95:a5:
         36:5e:99:af:2d:5a:e5:f2:71:cf:09:c0:8b:15:71:d2:a3:4d:
         2e:4c:e0:75:3d:9d:1a:33:ad:78:f6:b0:be:13:5a:66:61:36:
         a4:58:b0:f9:af:d4:de:d0:78:84:b8:e4:9d:0a:94:a3:22:ff:
         2b:37:25:46:74:81:5c:50:8b:71:70:8f:f9:af:21:ce:bd:b0:
         51:1f:8d:fc:27:f4:64:30:11:e8:9f:06:a0:8c:c8:c6:0a:a7:
         12:95:c4:c4:79:3d:79:ce:b8:0d:0c:89:2b:56:cd:7b:0d:de:
         00:78:7f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org