Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/aJL56TPmzrvqm2Rk-JTVIZNAxi8.roa
File:                     aJL56TPmzrvqm2Rk-JTVIZNAxi8.roa (raw, json)
Hash identifier:          CZtCxyTJCYeNILOBTcfhrQMUAdfKRBEzq5f+ZCu2kIc=
Subject key identifier:   68:92:F9:E9:33:E6:CE:BB:EA:9B:64:64:F8:94:D5:21:93:40:C6:2F
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       01CB
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/aJL56TPmzrvqm2Rk-JTVIZNAxi8.roa
Signing time:             Mon 01 May 2023 01:32:16 +0000
ROA not before:           Mon 01 May 2023 01:32:16 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        222.2.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 459 (0x1cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:32:16 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=6892F9E933E6CEBBEA9B6464F894D5219340C62F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3a:7b:5b:cb:68:51:a7:27:c4:07:ca:4f:c7:
                    25:c9:04:83:5b:e5:9b:e7:be:47:13:9c:ce:99:cb:
                    81:dc:0e:f9:3d:5e:8e:dc:64:3b:8a:b3:90:a7:16:
                    11:c6:da:34:49:5b:f3:1c:c9:65:db:19:35:33:36:
                    90:8d:a0:3b:c0:05:40:40:97:e9:bb:d2:9b:76:21:
                    8f:35:aa:1f:31:99:5f:c9:fc:46:72:84:f5:4c:d0:
                    95:53:fb:48:2a:fe:8c:70:4a:12:fb:8d:a5:ca:17:
                    97:6a:65:6b:e8:c6:47:45:8c:d4:1f:e7:20:3d:32:
                    e3:bd:bf:86:b1:44:71:69:c6:c1:29:3f:2d:1e:d2:
                    d4:76:e1:b2:7b:f0:bb:74:21:da:a1:61:8e:a0:1b:
                    58:8e:3d:d3:19:29:45:f5:d1:aa:28:8f:9d:3f:63:
                    25:db:df:5c:a8:df:45:b9:97:96:71:b7:1c:65:d0:
                    21:76:83:5f:23:c0:aa:75:63:16:c3:c7:cc:b9:80:
                    4c:8b:bf:26:98:56:9f:c4:25:7d:af:73:30:ec:04:
                    37:dd:d0:9e:cb:b8:7d:9e:fe:04:cd:95:a9:0d:db:
                    4e:55:70:13:ee:f3:52:96:bd:9f:30:f1:28:f4:ca:
                    cf:29:c4:ba:cf:08:fe:14:cf:25:39:0e:37:70:85:
                    8e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:92:F9:E9:33:E6:CE:BB:EA:9B:64:64:F8:94:D5:21:93:40:C6:2F
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/aJL56TPmzrvqm2Rk-JTVIZNAxi8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.2.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         36:7b:cd:30:45:92:80:8d:ad:66:c3:72:2f:d7:f0:65:36:09:
         4a:46:16:3b:e8:8a:3b:47:2d:4f:da:4f:1a:36:c1:e5:e6:60:
         88:e7:5f:8d:71:99:b8:49:3b:3d:05:49:d9:62:84:ec:a3:c3:
         f5:5b:52:45:2b:ea:29:27:ff:52:0b:02:3d:3f:c2:7c:25:8a:
         40:aa:69:f6:75:52:34:c0:71:51:95:3a:88:e3:1e:a2:ba:cd:
         0f:74:a6:86:de:2a:93:7b:70:4a:ce:4d:7e:b1:8e:07:b0:0b:
         93:d6:c3:c0:63:fc:5d:e9:04:7a:95:25:bb:5e:2f:b4:ec:29:
         e3:84:83:67:2a:58:67:cb:20:b4:d2:3b:db:ea:ea:51:c3:16:
         ff:e6:01:c4:4e:ef:e0:58:fe:32:4d:b4:09:6e:e8:09:9a:9c:
         7a:8e:de:60:75:5f:6e:ad:59:a4:cf:7a:a2:61:51:ba:cc:40:
         02:0a:56:fa:8f:2e:9c:ba:73:f0:91:6d:93:62:49:bf:64:f5:
         c7:ba:ba:7c:c2:b0:1f:bd:f6:2c:fa:e4:96:bc:d8:c0:3c:40:
         7e:03:a4:c6:3e:75:fa:8c:70:bd:54:66:90:cf:6c:0f:ab:3e:
         fa:b1:eb:9c:48:94:46:8d:b1:bc:15:9b:73:f2:ad:f8:b8:70:
         3f:94:bd:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org