Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/eaQ-2vTWj0vVofSwvcIKcv05-eQ.roa
File:                     eaQ-2vTWj0vVofSwvcIKcv05-eQ.roa (raw, json)
Hash identifier:          cOVgiiCAvc5qgrtK0EZeq/fs/NberuntTz1LujPMvQA=
Subject key identifier:   79:A4:3E:DA:F4:D6:8F:4B:D5:A1:F4:B0:BD:C2:0A:72:FD:39:F9:E4
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       022B
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/eaQ-2vTWj0vVofSwvcIKcv05-eQ.roa
Signing time:             Mon 01 May 2023 01:38:00 +0000
ROA not before:           Mon 01 May 2023 01:38:00 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        210.224.192.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 555 (0x22b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:38:00 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=79A43EDAF4D68F4BD5A1F4B0BDC20A72FD39F9E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a7:4f:e1:6b:eb:8f:40:80:c1:07:1e:40:e7:
                    a3:11:dc:76:73:48:a4:83:87:ca:0d:3b:6e:8c:27:
                    bf:15:0d:b0:ca:e3:31:ad:12:d1:ec:10:e4:7a:fb:
                    30:18:5b:74:56:38:35:5f:24:82:96:eb:9f:fa:58:
                    a2:30:e2:7e:e9:8d:bb:54:cb:fc:3b:c1:60:84:67:
                    d1:82:26:8f:70:29:aa:f3:a4:b6:a2:99:9d:21:44:
                    a6:a8:89:26:f1:9e:99:70:79:e3:1b:2b:ef:ec:4a:
                    cd:43:35:00:d4:17:a4:53:a3:06:81:c8:3c:3d:6d:
                    6d:bc:1c:e5:c8:b7:7d:6f:ca:56:5c:5e:9d:ea:cd:
                    7c:4c:d7:3d:2a:6a:d5:35:61:ef:e0:76:38:57:4b:
                    78:d6:1f:af:1b:61:a0:81:98:ff:b2:65:cc:42:a6:
                    b2:46:5c:94:7a:89:1d:b9:16:b2:8b:b1:90:95:64:
                    1d:1a:51:10:c1:81:ec:45:50:e3:33:e5:d2:2e:64:
                    82:dc:35:45:b1:03:4f:0e:be:4b:0b:ab:51:97:bd:
                    ba:2e:b5:86:fc:35:51:9e:5f:8c:f1:60:e7:ec:e1:
                    fb:04:8d:28:d8:90:f9:ec:fa:ba:b3:79:e9:79:f9:
                    0b:79:ed:ba:cf:b8:e0:0e:2e:f5:04:f6:ab:a6:0b:
                    27:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A4:3E:DA:F4:D6:8F:4B:D5:A1:F4:B0:BD:C2:0A:72:FD:39:F9:E4
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/eaQ-2vTWj0vVofSwvcIKcv05-eQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.224.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a4:15:16:b9:63:b2:35:be:af:a1:ba:37:75:b8:12:fb:fc:78:
         63:11:24:3f:5f:7d:76:46:8a:8e:99:9b:f1:6e:bd:d9:e2:50:
         11:e6:38:94:9c:2c:66:0f:3b:f2:9f:83:1b:cb:d0:cc:8f:9a:
         f1:bd:27:95:21:b6:91:08:86:96:5d:9d:56:15:81:b4:96:da:
         22:f2:db:67:36:ea:40:18:cd:e7:32:7b:4a:96:23:24:31:aa:
         83:e8:b5:45:0c:18:5a:ec:a5:e3:4d:29:21:63:0f:c2:ce:18:
         04:64:29:84:0c:6f:79:ab:9a:03:41:47:6c:91:12:cb:b1:cb:
         70:9f:26:d3:63:3c:03:ff:2c:49:b4:a1:63:8e:72:b7:47:03:
         26:98:db:3c:d0:4c:86:15:3d:10:3b:65:e2:9f:16:28:df:a1:
         33:cc:95:7a:a3:e6:d3:3a:d9:2b:4c:3a:71:40:d1:1e:2a:1b:
         c3:68:1e:32:41:22:aa:77:2c:d9:ac:1b:1b:1f:63:9f:d0:ed:
         82:1a:99:17:4b:bf:a8:2d:aa:51:0d:7d:64:75:6d:38:e0:09:
         a6:d9:d5:43:68:dc:26:91:cd:f7:fc:93:9c:9d:62:45:fd:84:
         86:92:08:8a:5e:65:76:a6:98:74:5f:f6:5e:b5:4d:40:af:db:
         4d:0b:6a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org