Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/_fo9B-ugwJzVtPUyKqHu1jN7rys.roa
File:                     _fo9B-ugwJzVtPUyKqHu1jN7rys.roa (raw, json)
Hash identifier:          n/RCTWyYW81PDy/xa+QffmwwAgtDCO8ZHXksuNy2h+s=
Subject key identifier:   FD:FA:3D:07:EB:A0:C0:9C:D5:B4:F5:32:2A:A1:EE:D6:33:7B:AF:2B
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       9C
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/_fo9B-ugwJzVtPUyKqHu1jN7rys.roa
Signing time:             Tue 07 Jun 2022 10:21:15 +0000
ROA not before:           Tue 07 Jun 2022 10:21:15 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        222.0.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156 (0x9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:21:15 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=FDFA3D07EBA0C09CD5B4F5322AA1EED6337BAF2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3b:e1:45:43:75:85:5f:74:ac:c8:78:a0:3f:
                    8c:92:97:da:0b:ee:69:cc:0a:bd:d1:1b:84:e8:3d:
                    8a:3c:4b:5f:6d:17:77:2e:96:86:de:22:e9:49:90:
                    27:79:62:f2:76:5f:e1:cf:67:27:a9:4a:d3:3b:50:
                    77:49:ad:49:0f:e2:c4:44:67:26:e6:a6:c1:ea:4b:
                    52:50:9b:5f:3a:bd:b5:cb:bc:4a:60:73:7c:b1:62:
                    0e:a7:a4:0c:19:8a:ac:1b:45:a5:dd:00:a0:34:30:
                    be:4b:ff:52:d8:f4:6c:39:df:26:9a:7e:81:f3:92:
                    ab:10:9d:53:60:e1:15:aa:cd:bd:f2:2c:82:07:58:
                    ff:aa:67:5e:a2:74:31:38:38:62:8e:92:e3:13:e8:
                    ae:f7:c9:71:bd:10:fb:b3:5c:80:f8:d6:4f:bc:e6:
                    50:ed:87:d9:10:5c:f7:95:7a:9d:64:1c:26:42:c0:
                    ba:94:95:5a:64:62:88:27:c2:f6:bb:61:9c:e4:0b:
                    1b:ad:b4:24:98:ff:4e:16:35:c9:0a:93:75:53:ee:
                    fb:eb:47:3f:c1:30:4c:b9:e1:31:81:31:a6:f1:39:
                    9c:42:b8:a0:6a:45:db:38:37:82:53:70:51:e6:1d:
                    da:c0:1d:8a:d8:a2:f3:82:4e:78:5a:5f:5e:f6:eb:
                    60:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:FA:3D:07:EB:A0:C0:9C:D5:B4:F5:32:2A:A1:EE:D6:33:7B:AF:2B
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/_fo9B-ugwJzVtPUyKqHu1jN7rys.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.0.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         71:47:6b:fb:0f:9c:9b:f9:5b:fe:61:0c:d4:4e:4a:45:9b:63:
         f8:8c:2b:9d:c3:14:42:dd:e2:63:4e:88:87:c7:37:b0:d5:96:
         23:24:de:86:50:50:52:e0:18:66:7f:ec:f9:01:0d:13:33:96:
         d9:52:30:43:ca:95:be:60:e5:cf:9e:df:62:63:e9:1c:b5:be:
         8a:25:b2:13:31:84:05:f0:6d:86:e8:42:97:95:0b:b9:58:66:
         c6:c6:5a:44:84:d6:bc:9b:59:df:42:1d:3f:42:f0:6d:28:16:
         65:ee:b9:cc:a2:1c:cf:48:04:40:fd:62:d7:34:4b:02:42:fd:
         4a:78:69:4a:3f:9e:3c:66:ba:72:e3:4e:b9:5c:28:1c:ef:99:
         47:22:9f:9b:50:1b:b3:e4:fc:d6:97:d0:48:ca:87:43:e3:88:
         69:02:41:98:6d:04:52:40:37:b7:32:36:a3:ab:f5:6c:3e:81:
         0c:ea:58:15:8d:b6:4a:b6:1c:91:0d:2c:1a:d8:d8:6a:93:60:
         c0:d1:60:0d:1a:1c:cb:3c:25:ed:8a:91:09:e7:fe:7f:2d:ec:
         8a:63:a8:9e:d5:f7:90:be:06:27:e2:fd:24:99:e9:26:b8:91:
         cb:3b:f0:10:6c:40:01:e0:25:a9:64:13:2a:be:98:76:53:cb:
         91:31:88:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org