Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/f88Z47bOrXO_FpRnX47vKDX8_sQ.roa
File:                     f88Z47bOrXO_FpRnX47vKDX8_sQ.roa (raw, json)
Hash identifier:          +4sJfGpN0Lnwr99L+xBH6feN+eOIWG2t+EdpuIO40fU=
Subject key identifier:   7F:CF:19:E3:B6:CE:AD:73:BF:16:94:67:5F:8E:EF:28:35:FC:FE:C4
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       01AD
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/f88Z47bOrXO_FpRnX47vKDX8_sQ.roa
Signing time:             Mon 01 May 2023 01:32:04 +0000
ROA not before:           Mon 01 May 2023 01:32:04 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        124.211.64.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 429 (0x1ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:32:04 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=7FCF19E3B6CEAD73BF1694675F8EEF2835FCFEC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:64:62:ef:f5:89:78:ba:05:5d:1c:01:dd:34:
                    81:da:91:23:eb:ad:2e:b8:65:ce:3f:ad:4c:01:30:
                    26:91:f4:13:25:59:dd:71:79:fa:60:ac:87:9f:d3:
                    d3:95:d2:d0:cc:01:d8:6d:7d:45:4c:2c:7c:24:e5:
                    df:9f:df:65:54:e8:cc:a8:d0:46:bb:d4:38:d1:d3:
                    43:27:12:8b:2b:da:5d:91:53:5d:f7:09:d5:b5:0c:
                    60:b1:1e:3b:ea:d4:52:30:32:64:dc:00:7b:16:c8:
                    f3:db:a8:f0:ed:69:0d:2a:ff:46:14:ff:87:72:a6:
                    92:37:f3:a3:60:34:ac:ed:af:fa:f9:8c:4c:21:ab:
                    21:61:b3:9b:54:86:ec:07:17:d0:a7:b8:88:ce:4a:
                    cf:58:58:a5:03:4e:d2:fa:7b:d2:37:40:5f:5f:4c:
                    de:69:f0:2b:cd:5b:4b:b1:16:fd:d7:e4:bf:95:5e:
                    45:5b:90:a2:87:51:8b:2b:55:fa:c2:98:19:d8:c8:
                    e8:d3:51:84:f3:4a:95:be:3d:2e:d3:ba:03:b7:9f:
                    79:e8:ae:d0:26:60:de:9d:bb:17:cd:4f:19:d8:a1:
                    78:1b:07:35:a0:14:81:95:a0:e9:ec:0c:7f:f6:19:
                    f2:98:c5:8a:97:1e:2c:7d:cd:3a:f9:a3:cb:ad:1e:
                    42:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:CF:19:E3:B6:CE:AD:73:BF:16:94:67:5F:8E:EF:28:35:FC:FE:C4
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/f88Z47bOrXO_FpRnX47vKDX8_sQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.211.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         11:0c:e1:78:f0:af:00:2f:64:57:d3:97:11:e3:7d:3a:0d:e9:
         cf:30:c9:37:e0:45:79:83:30:39:35:61:97:0a:4f:08:00:45:
         1b:02:63:82:22:b9:f4:8c:3f:3f:05:32:1e:c6:4f:dc:fa:46:
         ac:32:47:7b:4f:92:49:67:b6:dc:28:3c:75:42:86:0d:e1:ff:
         f0:52:5d:7c:72:82:3c:aa:b1:4c:cd:d9:2b:e2:56:ad:3f:62:
         20:dc:f7:d9:68:e2:06:e8:68:fa:b9:a4:04:ab:9b:e7:3b:c4:
         59:03:8c:91:41:2f:a6:2f:bf:ad:28:c8:68:61:40:fa:43:53:
         d5:44:0f:5e:df:4c:53:dd:ea:ec:ef:c8:66:76:08:d6:4b:d7:
         07:b8:eb:45:38:58:91:12:9b:52:b2:29:53:2c:00:85:b7:0a:
         9a:e8:b9:35:3b:f1:cb:ea:67:b5:f7:36:6c:70:8a:b5:da:f3:
         ad:6b:99:cc:cc:96:a7:f2:b6:50:ba:87:d0:07:10:00:d0:a6:
         b8:a2:ad:9c:16:85:b9:c7:3b:03:db:7c:2e:b6:22:fc:28:3d:
         1c:73:bd:31:a7:df:ee:23:c3:b7:b9:21:1b:e0:cc:e6:4b:e8:
         7d:fb:3e:6c:2c:92:57:13:20:d2:3e:b4:21:fb:75:02:ff:8b:
         7f:55:41:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org