Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/aNCGZ1fJmxmS5BYCneHjSZlQKO4.roa
File:                     aNCGZ1fJmxmS5BYCneHjSZlQKO4.roa (raw, json)
Hash identifier:          tyv1Gr6cqdGVWT/y5SGQgNwS/pMn3mxyswBRq7cziXM=
Subject key identifier:   68:D0:86:67:57:C9:9B:19:92:E4:16:02:9D:E1:E3:49:99:50:28:EE
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       ED
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/aNCGZ1fJmxmS5BYCneHjSZlQKO4.roa
Signing time:             Tue 14 Jun 2022 09:34:00 +0000
ROA not before:           Tue 14 Jun 2022 09:34:00 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        106.164.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 237 (0xed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun 14 09:34:00 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=68D0866757C99B1992E416029DE1E349995028EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:18:44:f9:a4:30:b0:2d:ed:9c:b8:7b:f3:f9:
                    9e:09:f5:9b:1e:5d:9d:5c:40:fa:12:81:2a:c2:66:
                    63:eb:44:51:e8:d1:b0:d4:b6:c4:d4:63:0e:9c:43:
                    89:f3:4a:b2:f5:39:93:37:09:00:02:af:72:ed:84:
                    1e:96:e3:53:03:b4:7b:aa:77:e1:dc:ee:9a:50:e3:
                    75:05:1e:31:f0:bd:cd:87:4f:ea:ea:ee:7d:49:f1:
                    78:46:05:6c:16:69:95:52:b9:31:18:e8:4a:01:8c:
                    df:a9:89:1e:31:74:9e:33:96:91:d7:84:fa:ed:38:
                    26:c4:eb:bd:1b:fa:74:17:c4:3e:c2:ff:ce:9d:55:
                    44:62:14:f6:f6:f6:2d:3a:d9:12:35:ea:79:b6:72:
                    2b:43:4e:bd:4e:ec:ed:09:fd:1b:dd:88:52:5f:71:
                    f8:ac:51:13:b9:93:ef:7a:12:35:a2:1c:b0:aa:a2:
                    7c:22:fc:0b:53:39:6b:3a:9c:2c:5c:a2:ad:34:cf:
                    34:cd:9a:b8:b9:58:78:bc:3a:9f:92:2a:f9:85:b8:
                    df:09:01:50:01:21:95:b8:e4:79:8a:b2:da:18:44:
                    a0:a9:06:4f:5b:da:0b:26:91:9a:7f:b3:e2:c6:7f:
                    d6:37:0e:64:19:cb:d6:17:3e:07:dd:81:02:a1:9f:
                    9c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D0:86:67:57:C9:9B:19:92:E4:16:02:9D:E1:E3:49:99:50:28:EE
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/aNCGZ1fJmxmS5BYCneHjSZlQKO4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.164.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         86:89:7b:cb:91:7e:7a:ad:70:5a:6e:a8:64:aa:87:2c:e4:d0:
         bf:4a:92:49:09:23:f7:25:1e:e9:22:c9:33:73:2b:90:1d:08:
         18:6c:75:53:81:4b:79:d0:bd:b8:6e:5b:7e:eb:1a:6e:63:2f:
         0b:eb:a8:03:32:ff:81:2b:5e:d6:72:8d:08:69:cd:23:50:4a:
         2e:36:cc:60:00:d3:5f:db:62:64:d2:06:4e:35:e0:0c:f8:75:
         b3:06:41:fd:32:98:0c:61:21:3a:7a:e8:6e:c7:2a:c7:ed:d9:
         67:cb:be:a5:c8:36:7f:e0:90:56:20:85:94:1b:7e:bc:fc:4d:
         3a:2d:96:43:ed:0c:60:09:0d:14:ee:90:da:2e:b9:c0:47:1f:
         c0:12:90:62:25:59:47:c7:9e:ac:a3:04:91:ac:ec:2e:aa:b8:
         f1:5c:0b:75:b1:23:61:5c:b6:73:a7:f9:07:cd:11:b9:16:b3:
         02:97:7a:bf:e9:59:b5:d2:ca:d1:b5:28:2f:cd:8d:10:f8:e3:
         8c:28:f4:7d:d1:ef:d5:02:6d:e0:c8:d2:73:1a:2f:6a:91:15:
         37:3d:33:e3:f7:54:9f:1c:f6:64:53:a0:85:5d:c2:71:17:9f:
         f1:5b:57:9b:63:4e:a0:29:2f:ea:96:ac:66:52:fc:15:6b:bb:
         fa:64:17:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org