Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/ccUwecS76tezj3yJKPOg-VPy1M8.roa
File:                     ccUwecS76tezj3yJKPOg-VPy1M8.roa (raw, json)
Hash identifier:          5mLgFRumIAhdXLdIBU7BaOk6LeqLk5EuuxTB893I38w=
Subject key identifier:   71:C5:30:79:C4:BB:EA:D7:B3:8F:7C:89:28:F3:A0:F9:53:F2:D4:CF
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       011A
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ccUwecS76tezj3yJKPOg-VPy1M8.roa
Signing time:             Tue 06 Sep 2022 03:06:47 +0000
ROA not before:           Tue 06 Sep 2022 03:06:47 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     2516
IP address blocks:        14.10.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282 (0x11a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Sep  6 03:06:47 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=71C53079C4BBEAD7B38F7C8928F3A0F953F2D4CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:03:72:40:fe:57:78:2e:ae:a6:c6:0c:f5:f9:
                    67:51:85:46:bf:53:dd:d2:3e:26:cf:bb:01:fd:40:
                    f1:76:00:17:e4:0e:b2:ef:ec:16:c7:3f:61:3f:a6:
                    d9:ae:55:cc:81:e7:87:0d:b1:c4:53:93:07:48:54:
                    87:5b:5a:f3:ac:fc:de:d3:ef:bd:b2:5d:fb:9f:8d:
                    30:66:c5:8b:35:f1:d6:a4:8b:53:b0:d2:c4:81:c0:
                    9c:33:a6:8d:2e:e8:24:af:98:e9:6b:1a:07:cd:23:
                    db:df:f8:f0:cf:30:54:57:98:51:f8:05:af:e0:29:
                    91:2d:de:0b:fa:c9:73:44:d5:be:7e:86:0c:76:26:
                    5d:42:22:7d:35:bc:ed:e7:bc:e1:ae:58:b8:8b:0d:
                    92:60:9b:e7:9b:5c:dc:f0:7b:b5:e2:1f:ca:ca:a1:
                    11:5b:f9:29:32:80:ca:7c:3f:4d:a7:a5:be:63:cf:
                    a1:a6:b5:77:6c:62:5c:42:8a:14:88:82:ad:eb:8c:
                    bb:5b:da:a2:86:df:f3:6f:28:7f:49:cd:6f:3c:3b:
                    d0:8d:cd:84:04:37:c9:cb:f6:ff:3b:08:bf:df:eb:
                    ba:34:b6:ec:3d:ae:5b:9f:35:3a:44:7f:e5:a8:1f:
                    e7:ff:0e:67:dc:47:f0:78:ee:5b:01:65:37:50:e1:
                    7a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:C5:30:79:C4:BB:EA:D7:B3:8F:7C:89:28:F3:A0:F9:53:F2:D4:CF
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ccUwecS76tezj3yJKPOg-VPy1M8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.10.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         00:44:ad:7a:78:75:96:bf:83:38:de:1b:9d:bd:3d:c5:ae:09:
         9d:ff:1d:6f:2e:4c:6a:e4:5a:3f:41:15:75:d6:54:6f:e7:9d:
         50:34:83:07:f9:cb:1d:60:69:5e:02:56:ae:c2:4e:26:fa:5e:
         ad:6a:bc:44:3f:0b:de:ea:5d:52:8f:f0:20:61:43:aa:a7:fe:
         cb:d7:ae:df:c0:4b:20:fd:6c:ee:58:a8:ce:5f:d8:1f:a0:69:
         1b:58:c3:72:bc:b4:bb:b4:d1:b3:0a:73:81:07:91:f3:ab:c9:
         81:7f:3b:d8:62:bd:e8:d1:84:0a:40:e4:5d:37:d2:5b:11:67:
         46:9c:1d:64:78:c7:e8:39:6a:40:22:67:4c:59:d4:1f:93:16:
         d3:aa:21:fe:c5:c3:aa:a9:fa:32:e1:0b:8f:68:e1:a8:be:77:
         22:70:ff:25:8a:f6:94:9c:86:d2:ac:70:e5:21:e9:9f:5e:b5:
         cb:57:ce:4e:c5:15:97:10:34:cd:94:32:3a:43:3c:36:55:63:
         1a:68:d1:45:54:bf:01:b3:6b:5f:86:4f:b5:2e:c5:5a:4b:50:
         b7:8a:1f:08:24:92:8f:b2:16:bd:a1:38:6e:1a:42:5d:9e:b5:
         7d:43:88:99:06:91:b7:bb:d7:56:fc:77:23:84:0b:fe:47:46:
         0d:fd:0b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org