Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/atkd8Hyb2UfoOGd-Rk4PQ1jTcAc.roa
File:                     atkd8Hyb2UfoOGd-Rk4PQ1jTcAc.roa (raw, json)
Hash identifier:          8GtsoHgbRPnhZhlchpUlw2pKhV2ZBTRjiZXFdlHl2UM=
Subject key identifier:   6A:D9:1D:F0:7C:9B:D9:47:E8:38:67:7E:46:4E:0F:43:58:D3:70:07
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       38
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/atkd8Hyb2UfoOGd-Rk4PQ1jTcAc.roa
Signing time:             Thu 28 Apr 2022 09:22:40 +0000
ROA not before:           Thu 28 Apr 2022 09:22:40 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     2516
IP address blocks:        125.29.128.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Apr 28 09:22:40 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=6AD91DF07C9BD947E838677E464E0F4358D37007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7c:f4:67:90:84:0b:29:75:44:08:01:a4:68:
                    55:0a:fa:28:5d:be:13:45:3d:d1:61:3c:13:e6:8a:
                    ec:f8:1a:52:1a:bd:17:f0:01:79:b6:bc:89:2e:f4:
                    33:45:bd:3b:43:18:4f:eb:41:b9:b2:ce:b8:0d:64:
                    0c:e6:3d:45:cc:51:9a:46:63:60:86:3d:00:09:3f:
                    7d:53:3c:b2:e8:c0:4a:54:48:3f:43:75:9f:7f:cb:
                    c1:35:8a:6d:fc:a4:4b:4e:3b:db:87:59:83:f7:30:
                    46:7e:d3:60:ca:7d:69:d6:fb:16:85:67:21:2f:1b:
                    b1:f6:af:02:6e:a0:0c:a5:ac:64:96:42:a0:79:a9:
                    43:62:03:d5:fe:1a:a4:54:84:1d:79:2a:80:60:1c:
                    6d:34:f2:9d:d6:4c:43:3e:2c:b7:cc:4b:e6:1d:67:
                    38:35:65:4d:b2:b8:bc:b3:b7:b0:35:14:46:7e:61:
                    11:d6:5e:ac:ad:f3:86:50:81:93:19:56:0f:f0:d6:
                    fd:7e:3d:29:10:fb:b8:d9:12:56:72:f0:58:68:d0:
                    e5:a6:51:34:cd:ed:fc:a9:ad:8c:0e:0c:fa:ee:f7:
                    0f:b6:01:56:b0:72:5b:4d:f0:94:db:42:50:c9:01:
                    5a:c1:be:fe:c7:15:0a:a7:92:98:6d:b3:f0:5e:8f:
                    33:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D9:1D:F0:7C:9B:D9:47:E8:38:67:7E:46:4E:0F:43:58:D3:70:07
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/atkd8Hyb2UfoOGd-Rk4PQ1jTcAc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.29.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         19:95:0d:b3:41:eb:d6:6a:20:cd:62:92:ed:fe:f8:68:ae:b9:
         69:a9:2f:25:5b:52:97:b2:14:8d:7d:03:18:4b:7a:97:7c:ef:
         1d:4c:60:21:94:95:c2:85:29:91:8c:13:b1:6b:36:be:db:1b:
         5c:d4:d0:0c:90:3a:80:01:b2:70:d3:7f:c0:01:63:94:48:47:
         21:4b:99:0b:d0:a1:0d:0c:64:f5:0d:4e:56:23:0f:72:76:6a:
         8f:3b:3a:de:10:1c:8e:15:66:dc:47:bd:43:12:2f:9b:f4:93:
         ca:55:9b:2e:86:46:fe:dc:fb:5c:1c:b5:9a:fb:ad:ac:09:97:
         9c:59:e4:00:02:ca:5a:80:61:c4:fd:8d:45:3c:51:dc:22:d4:
         da:ba:bd:6a:9e:13:ac:08:c0:24:4d:2e:65:65:9e:ef:46:2f:
         79:e7:43:b4:c9:a8:61:3c:21:22:6f:e3:7e:fd:a2:c2:a9:e2:
         7d:1a:5e:9b:da:63:0f:b9:f0:95:a8:5c:6e:71:32:61:72:26:
         30:df:98:e9:93:e4:0d:1c:ec:64:6d:1a:bb:ff:e1:42:30:7c:
         f6:69:c0:dd:5d:d2:bc:79:67:da:96:56:46:c1:5f:a3:02:b3:
         f4:cc:dd:bd:2b:08:88:8e:82:a3:10:74:27:6b:eb:ca:32:e1:
         76:f7:e3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org