Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/bzoR67O227Xj4mfPazifiA4SE_s.roa
File:                     bzoR67O227Xj4mfPazifiA4SE_s.roa (raw, json)
Hash identifier:          y+CNG59rLxBhYWoHRYsnWXGZPFFhb38C7Qvj1dsHTTw=
Subject key identifier:   6F:3A:11:EB:B3:B6:DB:B5:E3:E2:67:CF:6B:38:9F:88:0E:12:13:FB
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0166
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/bzoR67O227Xj4mfPazifiA4SE_s.roa
Signing time:             Thu 13 Apr 2023 09:50:46 +0000
ROA not before:           Thu 13 Apr 2023 09:50:46 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        125.50.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358 (0x166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Apr 13 09:50:46 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=6F3A11EBB3B6DBB5E3E267CF6B389F880E1213FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:34:98:45:cb:cd:af:1a:26:d1:c5:9d:d8:19:
                    32:05:8b:95:ef:7a:1f:8b:e0:5b:36:f8:7e:9b:3c:
                    ad:fa:52:55:11:ed:57:43:b9:10:94:98:ab:b7:0e:
                    7b:bb:cb:43:e5:e0:06:db:0e:16:b4:15:55:90:ff:
                    09:ba:cd:d0:d0:b3:62:f4:8f:3d:d6:22:77:0d:d4:
                    a4:17:f9:e8:d1:88:fa:bf:71:13:e5:01:db:1c:14:
                    20:c5:f2:85:ae:94:46:03:4e:84:96:29:3a:1a:41:
                    43:b7:e9:be:3c:ea:fb:b2:1f:1f:f3:6c:17:30:32:
                    19:6a:3f:70:d8:2f:90:f6:8f:2a:06:a6:e4:71:de:
                    b8:6e:7f:1f:e3:31:3c:13:05:d5:eb:02:46:56:ae:
                    ae:06:47:ad:03:67:8a:01:3a:d1:61:c7:1e:2b:17:
                    da:13:5c:de:65:91:fe:5d:a4:b8:c4:f1:48:4e:bb:
                    42:21:37:fc:e9:4d:cf:8e:f8:80:30:1a:ea:aa:6a:
                    1a:fe:3c:26:e5:3d:94:ab:2f:a3:16:db:8f:52:23:
                    2a:a8:c1:9d:e3:8c:ae:2a:7d:fd:23:ed:b4:fe:42:
                    f5:77:d5:d0:44:71:9d:1c:ea:57:63:68:eb:c4:45:
                    99:ed:8c:24:ea:7f:33:19:6e:ec:de:24:e2:f1:f6:
                    0f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:3A:11:EB:B3:B6:DB:B5:E3:E2:67:CF:6B:38:9F:88:0E:12:13:FB
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/bzoR67O227Xj4mfPazifiA4SE_s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.50.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b4:ce:7c:d4:dd:a3:27:36:7d:91:1d:53:f2:e6:02:4c:4a:93:
         b8:20:56:b1:51:68:04:06:f0:f2:76:8e:7e:da:87:1f:73:5f:
         b7:8c:d4:b8:e3:b3:59:59:30:f7:3f:6b:d5:10:92:b7:08:27:
         ae:8c:82:bd:1c:5e:d7:e0:6e:2f:9e:a7:df:ce:3b:a8:9c:c5:
         bf:0a:c0:5f:ba:d4:80:7f:f0:18:56:ce:23:c1:14:27:06:f5:
         62:40:28:f6:2f:68:5c:a1:d6:0b:0b:6b:41:4a:b9:6e:b6:9b:
         d7:02:60:a8:db:ac:94:34:ca:6b:10:78:d1:fb:76:5a:73:ab:
         62:43:1a:c6:97:62:b4:18:2f:a2:bf:2b:05:0f:ad:eb:2b:97:
         e4:f2:30:68:d9:2a:e2:8a:34:e3:51:f0:48:21:f9:76:c2:e6:
         8d:81:b3:06:0b:c8:95:f2:d3:ac:9a:85:8b:46:36:46:03:f9:
         f5:8d:dd:0e:86:24:9c:76:9d:46:ba:f1:c2:21:fd:8a:6e:f2:
         68:76:7e:eb:35:6b:06:16:cd:c2:e7:80:7a:46:55:c2:dc:2d:
         8d:62:6b:bc:07:ab:82:e0:1b:96:48:3a:dc:c1:39:b8:37:0a:
         a5:98:3d:d0:5b:a8:ba:da:d7:84:53:79:4d:09:dd:bd:61:09:
         25:e5:86:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org