Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/bHfzLtg5ILL5k6Wl-2npaV4yhb4.roa
File:                     bHfzLtg5ILL5k6Wl-2npaV4yhb4.roa (raw, json)
Hash identifier:          kosuCPeeAJeKRN4U//5J0BBtc21jYoVE7CJb8uciTbE=
Subject key identifier:   6C:77:F3:2E:D8:39:20:B2:F9:93:A5:A5:FB:69:E9:69:5E:32:85:BE
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       E4
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/bHfzLtg5ILL5k6Wl-2npaV4yhb4.roa
Signing time:             Tue 14 Jun 2022 09:32:08 +0000
ROA not before:           Tue 14 Jun 2022 09:32:08 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        118.152.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 228 (0xe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun 14 09:32:08 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=6C77F32ED83920B2F993A5A5FB69E9695E3285BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d0:cf:5b:3e:53:88:3e:d0:ac:51:22:5e:16:
                    13:41:c0:e5:b5:ee:37:90:eb:94:bf:e5:1a:45:2d:
                    bb:40:7a:58:14:5c:45:3a:e2:a5:5c:5d:1f:6c:7a:
                    ba:74:38:27:23:db:c9:6e:3e:67:42:8a:69:a4:63:
                    c7:24:eb:f6:4f:0a:4b:95:41:82:63:9a:44:87:71:
                    8d:43:cb:19:9a:2c:07:d8:0e:90:a0:d8:94:83:33:
                    cc:55:0d:cf:95:5c:d5:3a:14:cc:5c:d1:7f:fd:32:
                    e2:37:ce:d5:ca:dc:3c:d4:d4:04:4f:b7:ef:83:7d:
                    ed:9b:09:33:cd:5b:8e:bd:04:4b:bf:ac:e6:af:26:
                    45:00:e6:03:f7:39:ee:04:ad:01:30:23:b4:ea:3e:
                    d4:b0:36:6a:13:84:c0:11:17:03:b9:2b:ac:3c:bf:
                    05:44:0a:ef:a1:5d:90:91:e8:75:da:37:bf:ae:03:
                    e5:a0:17:a0:b0:af:5c:ae:8e:0c:8f:7b:b9:a4:d1:
                    9e:3a:39:03:2e:d3:57:42:dc:f1:4d:9b:50:8e:56:
                    21:72:67:2b:85:1c:bf:b1:22:d9:f5:11:0c:bb:34:
                    e4:81:5a:1a:2f:1d:78:e4:3d:cc:48:94:7c:f3:72:
                    1c:3b:dc:bc:37:b3:d5:82:af:72:d4:65:da:80:9b:
                    07:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:77:F3:2E:D8:39:20:B2:F9:93:A5:A5:FB:69:E9:69:5E:32:85:BE
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/bHfzLtg5ILL5k6Wl-2npaV4yhb4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.152.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3b:86:ff:1b:22:39:e8:87:6a:a6:0e:52:28:98:90:7e:f9:cd:
         ea:88:cf:7b:b2:71:94:cd:ae:fc:ea:df:f5:59:59:e8:e2:9c:
         1f:5b:4e:f1:7b:52:89:58:89:ca:6b:9d:1f:36:c0:66:e8:db:
         e8:be:81:4a:05:d7:8e:cf:0c:93:7c:ac:30:a4:5e:7e:e6:11:
         52:12:2f:e4:03:ca:ce:15:ac:e5:88:9e:4f:31:2c:b1:85:3c:
         98:6a:71:ff:5a:3d:96:c2:e3:fa:9f:bb:51:b7:5f:d1:3b:6a:
         37:f0:a2:0e:35:68:db:13:22:66:13:c9:e9:b5:0d:33:21:cd:
         70:7b:9f:d4:31:48:0a:6f:a9:44:37:2d:ee:0a:6f:3c:f6:10:
         b4:e7:aa:aa:8e:80:b2:60:7e:85:70:b7:42:4e:17:37:65:38:
         a1:e2:b1:c3:9a:c6:e5:39:ee:5c:c2:41:db:11:00:5c:a3:45:
         4a:07:5f:28:2f:a9:c2:ad:89:42:cf:1f:7d:2c:4b:da:ac:b0:
         bc:8b:cd:34:b5:2a:0e:ba:80:ce:6a:0b:2d:b7:d1:7b:31:3f:
         31:17:3d:c5:75:3f:35:b8:da:12:d3:ec:02:7c:97:9d:8f:c4:
         29:7a:ea:f0:6a:6f:31:24:a1:a9:33:53:1f:1b:6d:81:b4:46:
         bf:ca:af:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:08 2023 by rpki-client on console-ams.rpki-client.org