Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/cDAnY1rQ549NC-Y_7XFAZyKH_RE.roa
File:                     cDAnY1rQ549NC-Y_7XFAZyKH_RE.roa (raw, json)
Hash identifier:          OGbknRIpL/sRmqrSJWBsU/T6dJFgY4pKR7SziYVVElE=
Subject key identifier:   70:30:27:63:5A:D0:E7:8F:4D:0B:E6:3F:ED:71:40:67:22:87:FD:11
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       01FC
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/cDAnY1rQ549NC-Y_7XFAZyKH_RE.roa
Signing time:             Mon 01 May 2023 01:35:42 +0000
ROA not before:           Mon 01 May 2023 01:35:42 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        113.149.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 508 (0x1fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:35:42 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=703027635AD0E78F4D0BE63FED7140672287FD11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8b:11:91:5b:f4:a2:5b:06:ce:b2:03:e2:69:
                    52:1c:c6:fb:ae:70:00:10:e9:6d:de:47:28:0e:7b:
                    21:e5:32:0d:65:af:5f:75:3b:0a:fe:9a:fe:17:48:
                    97:60:e6:44:0f:00:4d:43:26:a7:d8:21:7a:fa:38:
                    7d:ce:d9:ba:e3:0d:86:63:ca:48:9a:f3:b2:a9:64:
                    e9:bc:75:41:5b:83:7a:dc:31:8e:5c:2c:0d:0d:43:
                    58:f8:61:8b:8b:dc:3f:4e:8e:2c:f1:3a:7b:12:db:
                    5c:a6:d4:ce:25:a6:d2:6f:4c:8f:90:17:2f:e5:de:
                    9a:49:27:ca:cf:6c:cc:49:e7:52:4d:e3:a2:aa:7f:
                    3a:63:81:7d:df:53:8b:66:b3:4a:83:be:e5:57:6a:
                    92:1a:ce:5c:ee:70:a6:1d:9a:3c:96:f7:72:c7:7e:
                    ae:43:11:89:5f:17:c3:20:ca:17:65:8d:38:6f:94:
                    5d:f0:1a:16:d3:b0:c0:0d:b3:97:18:20:76:03:fa:
                    47:45:f5:46:a7:46:e1:24:46:68:e8:9c:6b:1e:8c:
                    34:4f:06:a7:c8:01:63:c9:53:8f:ac:f0:01:a6:5b:
                    c4:64:55:5d:32:b0:6a:59:ec:96:f0:06:c2:c9:bf:
                    2f:c8:02:9c:40:4a:4e:6b:ce:11:8d:08:5c:28:ee:
                    46:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:30:27:63:5A:D0:E7:8F:4D:0B:E6:3F:ED:71:40:67:22:87:FD:11
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/cDAnY1rQ549NC-Y_7XFAZyKH_RE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.149.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         45:19:c3:78:79:29:f5:96:05:1b:bf:e1:ae:78:bf:c3:7d:c9:
         39:b7:52:4c:82:cb:e1:30:84:e0:1d:14:ed:07:14:e8:0f:27:
         21:db:d1:91:33:f3:5f:8b:58:b4:ef:15:24:65:11:f3:06:ec:
         a9:16:f5:cb:9b:20:fc:79:eb:0f:83:a7:b9:f2:1c:4a:2d:24:
         e2:b7:24:78:4e:c9:bb:da:fa:cb:4d:0d:db:c6:d8:d1:35:ac:
         b0:57:7f:9e:76:3a:61:65:2f:01:68:90:7b:99:b5:0b:c6:eb:
         7d:ee:7a:75:38:b0:71:c0:d7:aa:bf:dc:7a:59:f9:e8:c2:88:
         2d:0f:47:d9:bc:a7:20:03:94:17:c8:df:cf:9c:21:95:08:cd:
         57:e6:98:70:a3:09:f2:58:a8:86:3e:a6:ee:92:56:5d:b1:cf:
         94:65:d2:6d:00:26:78:2d:4b:83:e0:3e:18:20:1f:eb:84:be:
         cb:13:24:a3:75:34:5a:51:83:fc:e1:bd:44:77:61:3b:04:a7:
         0a:1f:b6:b6:96:f6:f4:c6:fc:b4:6f:d2:5c:09:fb:ba:61:fd:
         0c:91:1a:25:9d:26:8b:be:9c:65:7c:c6:32:18:b2:ac:e1:e8:
         12:0d:6f:ef:c9:29:6c:e1:3c:9e:ec:fe:c6:81:a2:59:11:e3:
         1f:9d:d2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org