Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/eGux61WSc7SxUo5jtBIdCZln3wc.roa
File:                     eGux61WSc7SxUo5jtBIdCZln3wc.roa (raw, json)
Hash identifier:          3SEu65XKIVjXCziNRYhy/embCqPPUUPhX3NAKQ4t948=
Subject key identifier:   78:6B:B1:EB:55:92:73:B4:B1:52:8E:63:B4:12:1D:09:99:67:DF:07
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       5F
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/eGux61WSc7SxUo5jtBIdCZln3wc.roa
Signing time:             Tue 07 Jun 2022 10:05:17 +0000
ROA not before:           Tue 07 Jun 2022 10:05:17 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        118.155.0.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:05:17 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=786BB1EB559273B4B1528E63B4121D099967DF07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b2:0f:dd:3e:fa:19:26:cb:fc:b5:e9:4b:5d:
                    e8:77:88:37:9b:ac:11:ac:4a:92:51:71:65:01:99:
                    cd:99:e8:24:a4:a9:8f:08:1a:19:c7:fd:35:cb:0a:
                    57:30:c3:f0:7c:50:99:cc:c1:57:54:d3:8e:b6:50:
                    ab:92:fc:8d:09:7b:34:bf:2f:cc:e4:a6:1a:96:92:
                    cc:f8:87:17:b7:dd:33:32:60:7f:c8:1c:a8:f4:42:
                    a8:b1:19:6e:5a:a5:81:87:f3:76:03:6d:8d:85:8b:
                    39:d7:8f:a1:47:e3:2b:11:b6:9b:ee:71:b7:e7:9e:
                    b6:e2:49:b0:26:9d:32:16:4e:34:61:87:5a:67:df:
                    0f:a5:df:06:1b:25:65:f6:d7:b8:5a:68:4c:e9:3f:
                    2a:e6:7e:81:80:47:11:f1:63:f4:0c:bd:ab:75:63:
                    8b:ea:7b:58:81:60:39:4e:fa:3b:d5:9a:5b:37:6a:
                    ed:27:40:83:d9:a6:01:ae:bd:2d:50:b0:d5:34:92:
                    03:f5:4f:1e:76:da:ed:14:9f:3e:1a:06:84:95:a5:
                    58:c0:52:d6:81:9a:ec:6e:3c:3f:ea:5c:17:75:63:
                    fe:b5:4a:d0:e1:ab:b3:e5:24:84:80:ed:fe:db:14:
                    8d:3d:cb:1a:29:f7:8a:cb:36:6c:38:2f:8c:30:30:
                    99:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:6B:B1:EB:55:92:73:B4:B1:52:8E:63:B4:12:1D:09:99:67:DF:07
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/eGux61WSc7SxUo5jtBIdCZln3wc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.155.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         66:26:2b:76:15:9b:d7:f1:a0:c0:15:c0:36:a7:ec:06:fd:d3:
         ae:8e:47:ad:50:98:dd:40:d8:3e:08:dd:7b:96:50:c1:cf:55:
         6c:c6:55:25:82:7c:b5:2d:89:95:33:c0:8a:b9:98:be:da:3a:
         01:ba:e4:d5:93:80:cb:72:f6:5c:59:1b:36:58:be:2b:fa:63:
         3a:d2:af:85:f7:2f:d5:b5:d7:d0:0e:2f:73:85:cf:e0:a7:51:
         bd:75:f3:ab:cc:d8:51:ba:f6:75:a0:b0:c1:68:c4:bb:29:bb:
         dd:cb:8b:d0:33:cf:ce:6a:1e:de:8e:06:4d:32:50:b0:80:49:
         d4:5f:9f:2c:86:03:e8:01:0c:f8:5f:4b:9e:40:de:01:33:d9:
         39:0d:f2:6c:49:1f:55:e9:fb:da:ca:5e:73:b8:dc:39:43:c0:
         7d:17:2e:e8:fa:f6:ed:c1:50:fc:19:aa:6a:c4:39:1b:e9:06:
         06:35:cb:81:75:de:13:98:a1:d3:98:45:76:93:02:cf:c2:98:
         55:63:59:86:fd:c9:e0:a5:18:1f:09:6d:3a:e6:70:f7:99:3b:
         31:cc:72:b4:df:36:9b:13:b6:ac:48:1b:0a:f7:54:39:31:38:
         f9:f6:78:56:b6:8e:e8:a6:a9:3e:c0:5d:b7:58:53:0b:b9:11:
         99:48:68:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org