Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/esTXmvmuCYAQEfafaFzv_0hLNUg.roa
File:                     esTXmvmuCYAQEfafaFzv_0hLNUg.roa (raw, json)
Hash identifier:          Yo2jB8V1urBWKnMuncklRCBZr15usdhD256cZdXTOq4=
Subject key identifier:   7A:C4:D7:9A:F9:AE:09:80:10:11:F6:9F:68:5C:EF:FF:48:4B:35:48
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       42
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/esTXmvmuCYAQEfafaFzv_0hLNUg.roa
Signing time:             Tue 07 Jun 2022 09:59:11 +0000
ROA not before:           Tue 07 Jun 2022 09:59:11 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        27.81.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 09:59:11 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=7AC4D79AF9AE09801011F69F685CEFFF484B3548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a3:97:e2:99:d8:e7:1b:0f:71:04:a5:c5:b1:
                    22:86:50:0c:ad:1b:3e:94:c1:ae:b0:70:c5:ac:25:
                    b3:46:5d:a3:27:a8:f0:ee:be:ba:23:b7:f8:d1:ba:
                    1e:ac:aa:d5:d0:44:57:c7:8d:00:e4:6b:d0:be:7b:
                    30:fe:3f:de:ae:99:b8:6a:7f:4a:cd:a7:34:13:a7:
                    09:0f:0d:96:a1:ef:17:da:6f:6c:6c:ef:d7:69:08:
                    92:90:ab:26:61:9a:c9:64:d1:06:54:83:d0:da:2a:
                    46:a9:69:2b:73:b0:52:42:09:d5:70:2f:af:81:59:
                    bc:fc:7c:7b:f3:d2:60:87:a2:a8:8a:9b:3a:23:9b:
                    56:4a:1f:e0:ce:f1:4c:0c:ef:38:85:ed:d5:fe:43:
                    14:d3:4c:0f:33:c5:5f:e8:65:e8:a9:fa:38:78:cf:
                    33:a3:83:99:f3:e8:f4:cd:02:85:b8:e1:98:4a:ba:
                    1b:76:00:2c:89:de:38:71:be:f1:c2:13:e2:1c:4f:
                    cf:bc:c6:d1:83:c3:59:6e:a3:61:8b:9f:d3:33:d2:
                    40:be:b9:3b:a9:ce:1d:a8:c2:dd:fd:a7:9d:08:7a:
                    df:7f:34:b3:5e:81:63:55:d3:45:51:e4:a5:50:a1:
                    7d:cb:7b:1f:92:78:f8:3e:ee:c4:41:40:30:68:7b:
                    33:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C4:D7:9A:F9:AE:09:80:10:11:F6:9F:68:5C:EF:FF:48:4B:35:48
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/esTXmvmuCYAQEfafaFzv_0hLNUg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.81.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b3:db:28:5f:e4:35:b7:b9:84:5c:88:d5:24:70:b0:fd:e2:1f:
         4a:39:1d:20:c6:46:60:99:3a:ca:99:e1:8d:51:e5:65:0d:c6:
         8a:2a:12:c7:0d:60:05:bc:c0:7d:25:30:e4:a2:f2:0b:ac:95:
         29:dc:45:0f:15:7b:c5:18:6a:52:fd:21:7d:d0:ee:a2:0f:d1:
         d0:4c:ea:f7:90:06:5c:43:c9:07:0a:ef:17:36:da:20:ba:fd:
         d5:0b:f2:45:56:2e:0a:34:a5:18:b0:80:d3:01:ff:67:e9:55:
         72:cb:a3:0f:25:31:98:b3:e9:6a:d1:f7:f1:4b:10:46:25:7d:
         fd:c9:13:be:d1:fd:99:57:5c:55:6b:b7:31:cd:92:ff:8d:7f:
         45:42:77:1c:d8:f4:44:e1:6b:a5:f3:17:c4:7a:2e:1b:cf:63:
         d3:34:a9:ac:87:cc:b1:ad:b0:67:ef:fe:57:f8:a9:48:c7:43:
         4f:a2:64:a4:80:77:16:34:56:85:b4:a5:44:3a:04:fe:07:1f:
         7e:ad:2d:e0:c7:fc:7e:d7:24:b5:ec:42:95:0d:22:a4:5f:63:
         b8:bb:a3:e1:67:6b:48:b3:40:8f:1f:01:7f:c3:6c:b6:b5:c8:
         aa:f3:92:63:2b:de:bd:94:13:15:bd:53:c1:db:2d:ed:a2:6d:
         aa:fa:21:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org