Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/cXUh35LYzjyW7X-gMW3ueUSLZEo.roa
File:                     cXUh35LYzjyW7X-gMW3ueUSLZEo.roa (raw, json)
Hash identifier:          Ez4C43A255w11cRGLJD6dHhg8V2zrjVImsq/xgsF46g=
Subject key identifier:   71:75:21:DF:92:D8:CE:3C:96:ED:7F:A0:31:6D:EE:79:44:8B:64:4A
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       022D
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/cXUh35LYzjyW7X-gMW3ueUSLZEo.roa
Signing time:             Mon 01 May 2023 01:39:34 +0000
ROA not before:           Mon 01 May 2023 01:39:34 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        210.233.0.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 557 (0x22d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:39:34 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=717521DF92D8CE3C96ED7FA0316DEE79448B644A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8e:d1:78:46:bb:b9:bb:9c:69:49:ff:7e:03:
                    7b:d9:28:0c:7b:41:24:6e:cc:a5:21:d2:2f:b1:28:
                    94:1a:7b:b8:6f:ac:e1:79:29:3f:64:db:fa:0f:5e:
                    53:26:5d:f7:4c:82:7f:31:cf:86:b0:4f:94:9d:5d:
                    5f:76:83:db:80:3b:7c:c8:d0:b5:b4:d3:1c:9c:2c:
                    50:6a:c6:48:a9:94:92:eb:b3:b1:3d:99:ef:ab:b1:
                    82:db:5d:38:d8:29:de:1d:85:82:e8:89:21:ab:47:
                    92:13:bd:ed:7e:67:64:2b:8e:0d:bc:fc:ec:d2:7c:
                    8a:f8:97:68:5d:24:3c:05:ba:e6:ea:fa:43:03:a6:
                    de:15:e1:52:d6:73:a2:a3:14:c1:76:b7:9b:bf:45:
                    9d:c4:f7:3e:f1:63:7b:4a:7b:9c:57:e7:c3:ef:c7:
                    97:e7:eb:76:c2:16:6d:68:7b:34:7d:a4:bc:52:b1:
                    c9:e5:55:9a:30:a3:ae:19:c2:b8:9b:cd:b5:98:4e:
                    3f:f4:2a:e1:07:ae:6a:93:30:45:7f:0b:c0:23:0a:
                    dd:cf:b8:00:cb:00:b3:dc:94:9a:06:0c:44:ac:86:
                    e3:01:8c:e2:9b:2a:a6:d2:b6:1d:2b:87:85:4d:8d:
                    7f:51:3f:a7:84:2b:0c:07:8c:db:4b:42:ad:53:3f:
                    11:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:75:21:DF:92:D8:CE:3C:96:ED:7F:A0:31:6D:EE:79:44:8B:64:4A
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/cXUh35LYzjyW7X-gMW3ueUSLZEo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.233.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         66:33:9d:a7:dc:65:f6:c0:02:10:1d:a8:5b:73:50:aa:b9:ea:
         83:bf:19:0c:e3:c5:d8:2b:ea:53:2f:3f:70:a8:91:50:ec:fc:
         4e:65:50:81:fe:1e:81:0c:0e:50:62:7c:b9:e9:b2:11:d7:b1:
         14:b9:20:75:73:e4:8b:8c:b2:88:37:f6:f6:4c:e0:9b:6e:f1:
         2e:9e:22:a2:ce:9a:c0:14:5d:9a:5b:e3:31:40:a5:7c:d5:c9:
         76:d8:59:e2:ab:ce:8b:67:18:ff:09:8d:67:f9:b4:42:45:9f:
         f0:a9:54:26:fa:17:a1:b4:6c:ce:e5:44:dd:fc:1b:53:b3:9d:
         40:58:07:3a:3d:ad:6e:12:b1:1b:99:69:79:a3:1c:d0:bd:0e:
         0d:86:7c:15:59:5d:77:75:38:10:8b:66:6f:c0:b7:11:3f:93:
         e0:f2:76:23:a0:66:e3:e3:a8:a7:ed:eb:0c:f9:9f:c8:81:86:
         49:16:c1:58:da:83:c0:29:97:fc:a4:4e:b1:55:66:68:73:2d:
         32:10:8a:ef:c0:77:db:62:bc:ad:ab:7b:f8:0f:00:bd:31:8c:
         c9:68:14:c0:72:cb:b8:3a:41:b7:d8:ef:76:9f:e2:da:11:3d:
         a8:0e:c1:e6:b8:48:c2:3f:9b:19:ad:15:6f:b4:29:27:3c:ac:
         ce:cd:f2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org