Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/cH4w0AMeTOzdOFshFSWmxQahhlM.roa
File:                     cH4w0AMeTOzdOFshFSWmxQahhlM.roa (raw, json)
Hash identifier:          ZfnjSvzrLyHUZj0/6MW5G1Mp1jEydxTNuAOnNdcn9pk=
Subject key identifier:   70:7E:30:D0:03:1E:4C:EC:DD:38:5B:21:15:25:A6:C5:06:A1:86:53
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       84
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/cH4w0AMeTOzdOFshFSWmxQahhlM.roa
Signing time:             Tue 07 Jun 2022 10:13:14 +0000
ROA not before:           Tue 07 Jun 2022 10:13:14 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        106.175.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132 (0x84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:13:14 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=707E30D0031E4CECDD385B211525A6C506A18653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:75:e1:c3:b0:32:89:14:52:8d:b3:36:2f:64:
                    cb:2b:29:3f:62:d7:f6:4a:2f:7e:1b:37:e4:80:f2:
                    12:bd:ee:1d:0b:f6:1e:a9:42:3c:0d:07:69:03:5c:
                    72:e4:b3:78:e8:df:f0:32:1c:8e:e7:38:55:2e:a5:
                    74:69:55:52:7f:3d:4d:5e:90:67:bd:5a:60:4d:ee:
                    72:22:10:81:a0:6d:3c:a2:9a:79:d3:c4:67:d8:7b:
                    32:ad:6a:b5:f9:da:08:91:72:75:2f:d7:b0:aa:83:
                    85:9f:b9:aa:3e:da:7a:b7:70:90:51:23:cc:f3:00:
                    4e:95:b0:4b:a5:00:36:d0:db:ff:68:f9:a0:28:d8:
                    bb:c0:69:83:04:e4:77:76:fc:9b:24:24:de:da:42:
                    c0:84:e0:6c:8d:c7:2e:48:bd:06:41:fe:1d:e0:49:
                    5e:9f:d5:9d:57:b9:c9:6b:67:56:5d:a4:b1:59:da:
                    d3:06:b3:d3:42:40:3d:7f:ac:a9:fd:f9:5c:16:fc:
                    7c:f2:89:40:38:dd:20:cd:d4:c7:a3:3d:a1:01:84:
                    4e:2e:00:42:f4:f0:6b:77:d1:fe:83:e3:27:b3:06:
                    2d:0d:db:f8:dc:09:bd:d1:a8:9e:cb:2d:a6:01:1d:
                    a9:3f:92:5f:d4:14:d0:06:a3:79:8a:f9:59:ba:b1:
                    f9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:7E:30:D0:03:1E:4C:EC:DD:38:5B:21:15:25:A6:C5:06:A1:86:53
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/cH4w0AMeTOzdOFshFSWmxQahhlM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.175.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         84:2b:62:2d:4c:3b:37:29:81:ea:78:0c:fe:90:94:9c:3d:41:
         79:ed:37:f1:cf:a8:0b:44:b2:e8:fd:88:0a:a3:a7:df:7f:a3:
         88:b8:d9:d5:61:3b:18:63:8b:66:fb:1c:2e:3b:e6:90:f1:23:
         a5:72:db:5b:f1:f7:98:37:86:6c:75:d6:ca:c9:dd:a9:7b:d5:
         74:77:c4:5f:a5:1e:5f:08:8b:67:26:92:50:cd:27:2c:d9:fa:
         b0:83:b9:93:31:1a:67:fe:de:10:f9:34:b9:2b:96:31:b8:85:
         8a:00:b3:9d:f3:06:eb:ba:d6:e9:9b:12:f6:b5:7f:c9:22:e1:
         67:60:d6:a2:7b:2a:4e:4a:59:0a:bb:57:cc:bc:9d:13:b8:70:
         06:ca:55:69:77:da:d8:c5:24:70:17:bc:ac:3a:6e:fd:8a:e5:
         19:9a:25:fa:60:1d:77:ab:fd:4f:1a:a4:7c:69:77:a7:c0:66:
         8e:fd:df:64:e9:f8:fb:15:9d:e0:58:fb:e9:73:2c:33:52:aa:
         d4:87:43:15:0b:51:bf:14:40:6e:2a:72:76:8d:8d:61:01:e6:
         6c:07:5d:61:2f:f5:27:15:00:4b:e5:40:70:f5:6a:85:62:9e:
         a2:20:ce:84:80:6b:20:69:52:8a:f9:f0:26:87:d5:d5:8a:07:
         e8:e1:4b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org