Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/bScg8WNoCkaUONtGFmPDxagjP4E.roa
File:                     bScg8WNoCkaUONtGFmPDxagjP4E.roa (raw, json)
Hash identifier:          2FC5JOrqrvySTgaGBrUFGlfMNkNAguXYGdWySZESqy4=
Subject key identifier:   6D:27:20:F1:63:68:0A:46:94:38:DB:46:16:63:C3:C5:A8:23:3F:81
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0181
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/bScg8WNoCkaUONtGFmPDxagjP4E.roa
Signing time:             Mon 01 May 2023 01:28:51 +0000
ROA not before:           Mon 01 May 2023 01:28:51 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        114.16.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 385 (0x181)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:28:51 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=6D2720F163680A469438DB461663C3C5A8233F81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:31:9a:d1:d1:0a:f9:54:b6:5e:04:78:f8:ca:
                    5f:e5:71:ab:11:b0:c9:d5:c4:3e:2d:1e:65:57:43:
                    8c:c1:d4:23:a9:e5:36:6a:d2:b5:ea:2b:36:0e:f7:
                    28:6f:d0:3c:05:0f:3b:9f:61:c2:08:f7:f4:33:14:
                    4c:1a:35:09:d1:1b:fd:d4:93:30:6d:1a:e7:e0:26:
                    7f:01:fb:74:58:bb:68:66:35:76:5d:c8:9a:8c:1e:
                    69:da:7b:b6:fc:d4:bf:68:0a:9f:6f:44:21:d8:fd:
                    f3:bf:df:19:c4:7b:12:3f:10:1e:2c:f5:33:d9:b9:
                    ef:80:5f:fa:a8:74:c9:7f:d9:7a:61:bc:eb:67:17:
                    ec:1f:66:6c:4b:2a:f9:3b:aa:38:ef:05:12:55:a1:
                    41:16:03:ad:86:d9:56:fd:95:d7:e9:7b:cf:be:c4:
                    e2:c1:7f:97:49:e4:ca:15:4a:91:98:de:4a:aa:58:
                    0d:29:de:a4:95:2e:47:ee:a9:0e:c4:23:87:92:fa:
                    16:31:4f:ed:db:af:1e:d8:f9:03:60:45:49:a7:6c:
                    13:73:ac:1c:83:24:23:68:8b:cc:dc:53:d1:fa:48:
                    a7:3d:cf:c1:08:64:16:1f:74:83:b5:0a:f7:c2:a3:
                    29:39:a5:bc:5d:b8:d5:c0:3c:88:eb:a5:2a:4e:81:
                    42:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:27:20:F1:63:68:0A:46:94:38:DB:46:16:63:C3:C5:A8:23:3F:81
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/bScg8WNoCkaUONtGFmPDxagjP4E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.16.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         68:d2:06:09:97:fd:7e:e2:73:9e:50:43:5e:b4:a0:ef:60:fb:
         24:1c:87:b5:4e:28:61:59:ed:b2:0b:9d:43:25:f2:fd:48:e4:
         52:1c:06:4c:e7:4e:96:9b:04:14:a4:5b:7d:58:e0:b8:b2:14:
         c1:41:62:24:56:93:9f:dc:8d:35:a9:4d:c8:ae:f5:52:b3:d3:
         97:d3:09:a8:d7:ea:c1:32:4d:d5:b9:af:23:60:8e:0c:8a:6c:
         90:c1:a9:45:3b:9c:91:37:af:fc:9e:26:ae:88:67:9e:5f:96:
         ef:bf:a7:43:e8:59:b7:ba:a0:1f:16:55:d8:a4:69:ce:99:77:
         7c:b7:8a:3b:fa:37:d8:a7:cd:22:14:72:f4:f1:7e:45:a3:e8:
         21:88:38:46:04:22:0c:c4:82:5b:92:e2:74:14:cc:09:fd:3b:
         8f:1c:72:da:c8:2a:59:1e:19:a4:de:41:2c:59:d7:05:02:e2:
         5c:ce:84:df:9c:68:10:45:0b:ad:b7:4b:cd:a0:b1:1f:2a:f4:
         48:ca:a0:c6:e2:6a:08:ed:30:d5:d1:20:b3:ad:56:35:10:3c:
         3f:d7:70:97:16:bd:a8:81:38:a8:7c:6f:e9:fe:e1:11:9b:f4:
         f4:44:b5:38:a9:ef:b6:5c:9e:71:58:17:8a:cb:57:c9:e9:4b:
         8d:3b:9a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org