Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/b1haRPjHmbCfsze6K3eT5wB3qTE.roa
File:                     b1haRPjHmbCfsze6K3eT5wB3qTE.roa (raw, json)
Hash identifier:          TCtVtCqR/iK1kdIoAEakZwDA0oh9dcGEyCxmgXuy1o8=
Subject key identifier:   6F:58:5A:44:F8:C7:99:B0:9F:B3:37:BA:2B:77:93:E7:00:77:A9:31
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0142
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/b1haRPjHmbCfsze6K3eT5wB3qTE.roa
Signing time:             Fri 28 Oct 2022 05:29:34 +0000
ROA not before:           Fri 28 Oct 2022 05:29:34 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        106.128.0.0/11 maxlen: 11

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 322 (0x142)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Oct 28 05:29:34 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=6F585A44F8C799B09FB337BA2B7793E70077A931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e5:2e:3f:f1:d1:1c:a7:85:5c:22:01:56:61:
                    ee:5b:d0:95:2d:e7:76:50:a0:e5:50:2c:08:d1:c1:
                    3a:a0:85:01:57:39:ef:b2:61:41:da:83:d7:1b:26:
                    26:6d:57:5d:4d:55:c9:87:57:ed:61:5d:29:65:97:
                    26:c2:e6:ac:d2:b3:78:3a:0a:a9:bc:31:98:00:6d:
                    4c:e0:f8:b3:94:8c:7b:00:32:91:15:3d:da:d1:17:
                    ed:bd:a0:30:0c:85:28:7e:73:65:14:0d:2c:73:25:
                    ed:27:64:0f:6a:ad:de:f7:a1:18:20:96:5a:8e:14:
                    1b:77:28:eb:8b:7e:64:cd:22:85:8d:30:ba:f7:dd:
                    55:57:e2:d2:43:9d:e9:d2:72:46:bf:d8:9f:65:a2:
                    be:2c:57:11:e9:97:d0:41:44:04:b8:09:55:90:97:
                    e3:61:d2:e3:34:62:9c:dc:18:04:b4:66:7d:19:0f:
                    34:a5:ef:a4:30:68:9e:f5:74:59:5f:19:02:a1:cd:
                    f4:69:19:1d:d7:04:5a:9e:98:f0:07:31:a2:cb:be:
                    e1:ac:b9:b4:dc:52:5c:8a:1b:34:67:34:d2:2d:0b:
                    58:ef:58:21:c9:04:66:6d:42:2d:50:56:37:d1:48:
                    1a:4c:9f:c6:4f:f1:a8:79:10:53:86:46:15:3b:18:
                    10:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:58:5A:44:F8:C7:99:B0:9F:B3:37:BA:2B:77:93:E7:00:77:A9:31
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/b1haRPjHmbCfsze6K3eT5wB3qTE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.128.0.0/11

    Signature Algorithm: sha256WithRSAEncryption
         57:3b:f7:fe:0f:df:e0:43:4c:21:3d:79:28:58:a8:f2:48:e4:
         c7:f5:0e:92:0c:00:6c:7d:0d:83:d5:df:cd:33:91:54:14:f2:
         8a:d8:6f:41:62:50:52:9d:fc:5d:cb:e0:6d:7f:96:07:02:05:
         b9:d8:0b:38:39:95:b5:04:62:c5:20:04:e4:12:1e:96:35:7f:
         35:88:af:36:f7:f5:9f:62:36:77:c5:80:e2:d6:ec:ac:23:15:
         45:7e:e4:b7:ac:6d:ff:bd:01:41:62:94:20:a6:0a:44:26:6c:
         46:c0:43:dd:ae:10:b2:6b:48:55:2a:44:ee:02:4c:d3:a9:79:
         12:86:67:76:04:61:88:c7:bc:5c:da:59:11:5b:1b:47:68:d7:
         85:1b:fb:f4:91:db:7a:16:ca:ef:7b:f0:34:28:98:bb:e0:fc:
         89:00:43:24:e5:54:76:8a:5c:d7:09:e4:18:d3:f1:1a:ef:5e:
         be:d9:55:0d:c2:d4:40:c5:0b:ea:71:2e:fc:9b:bb:4d:01:a9:
         5e:66:60:92:35:27:e0:d0:41:62:0e:13:b5:7b:fa:8e:31:a7:
         01:74:ea:69:ca:dd:83:cc:e4:b0:44:b6:0a:cc:8b:96:c2:97:
         c1:f4:4e:fa:1e:e8:a3:f3:7a:f0:40:db:25:fe:7f:fb:b4:f9:
         b0:3b:54:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org