Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/a-SpD-dVFBFabcUhb2BHJgbCA7Y.roa
File:                     a-SpD-dVFBFabcUhb2BHJgbCA7Y.roa (raw, json)
Hash identifier:          +CtAMbTCMG0TtoxRDweD2TWziBBwHHveUL8Kag/lZgY=
Subject key identifier:   6B:E4:A9:0F:E7:55:14:11:5A:6D:C5:21:6F:60:47:26:06:C2:03:B6
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       BA
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/a-SpD-dVFBFabcUhb2BHJgbCA7Y.roa
Signing time:             Tue 14 Jun 2022 09:11:51 +0000
ROA not before:           Tue 14 Jun 2022 09:11:51 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        211.4.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186 (0xba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun 14 09:11:51 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=6BE4A90FE75514115A6DC5216F60472606C203B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:69:8a:dd:e9:80:ea:11:15:b7:a6:24:a3:27:
                    a3:9e:04:6e:64:d4:3c:12:ef:8b:c9:f5:67:95:c1:
                    69:43:54:f7:35:11:f2:88:33:2f:ee:8f:37:27:d4:
                    34:27:06:d6:b9:08:2a:cc:94:2d:80:ae:ae:1d:13:
                    d0:dc:09:a4:e2:9b:7a:86:05:9b:db:35:68:fe:ab:
                    83:d7:56:ec:73:0e:03:66:e8:cd:7a:e4:af:e1:cf:
                    3c:3f:40:61:92:6d:73:5f:3f:0e:6b:16:c7:fc:17:
                    60:0f:a7:b8:cf:4a:bc:50:59:37:ae:4b:d7:52:45:
                    30:12:de:70:7c:22:9d:e1:20:de:60:ca:f7:1c:ba:
                    4c:15:da:d2:6a:de:1c:81:41:c6:a4:dc:7f:be:9c:
                    6f:d5:f9:df:d7:4d:15:cb:01:6b:d7:d1:73:2e:26:
                    ca:09:14:fd:b7:c3:38:ed:bd:f6:d8:91:57:59:8c:
                    3a:46:c2:6e:f6:47:9a:13:f2:0d:74:a6:a1:8d:e3:
                    8a:83:72:16:53:88:4d:e8:ff:86:79:35:a3:d6:eb:
                    25:59:68:0b:3f:36:1d:dd:a5:3b:13:9a:dd:12:00:
                    db:76:f5:0f:c6:0a:e7:46:b6:f5:3f:c6:c8:d2:c2:
                    2d:d8:b3:36:7c:15:24:e4:50:6d:60:3b:61:c8:d8:
                    60:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E4:A9:0F:E7:55:14:11:5A:6D:C5:21:6F:60:47:26:06:C2:03:B6
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/a-SpD-dVFBFabcUhb2BHJgbCA7Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.4.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         16:83:62:b5:89:c0:9c:4b:f4:32:57:75:71:6c:e0:ff:fe:f7:
         4b:d7:e9:05:cd:4b:8c:92:b4:32:e8:bd:ff:0b:85:28:4a:13:
         d4:aa:b1:fd:47:fe:be:1c:6f:6d:8c:84:57:d2:a6:04:ca:e1:
         5c:00:f1:8d:09:56:80:3d:d3:9e:1e:0b:e2:db:41:90:fe:7c:
         ea:fa:7d:7e:e4:23:4e:26:bd:c6:25:b9:40:57:bb:e1:db:63:
         f0:fc:f7:73:d2:bb:e3:29:c6:1c:cd:10:32:d0:07:6c:d4:65:
         0f:68:7f:88:4c:68:b2:ca:b1:6a:8f:0b:c5:88:68:fa:ce:52:
         b7:14:bc:1a:f2:07:d5:eb:f9:f2:8c:45:13:ff:68:5c:2d:54:
         f0:e2:0e:11:a8:f6:2d:a8:50:98:a7:9f:7b:ca:53:46:7c:0b:
         2a:23:66:4a:f5:57:38:de:42:e9:97:2b:4e:98:72:9b:5c:d6:
         a5:8b:ac:4c:ce:29:09:92:37:b2:08:18:a9:35:a2:7d:b7:8b:
         7b:7e:08:8e:e5:07:44:85:00:e1:36:8b:35:c0:55:72:96:2a:
         a1:cb:e2:23:b2:25:ae:98:e8:03:3e:12:e4:5b:c6:ad:d6:af:
         53:98:89:84:5e:5f:fe:33:b6:0f:3b:b0:8d:18:9b:2c:a2:5e:
         6e:7e:c4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org