Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/fJj-32uLGj2N0av96VUjUA1Bm-M.roa
File:                     fJj-32uLGj2N0av96VUjUA1Bm-M.roa (raw, json)
Hash identifier:          YEA6VKpMhlc+vRjXE0Kk97bnaEd/MK+ztnbWxEpv02U=
Subject key identifier:   7C:98:FE:DF:6B:8B:1A:3D:8D:D1:AB:FD:E9:55:23:50:0D:41:9B:E3
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       7F
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/fJj-32uLGj2N0av96VUjUA1Bm-M.roa
Signing time:             Tue 07 Jun 2022 10:11:18 +0000
ROA not before:           Tue 07 Jun 2022 10:11:18 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        124.210.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:11:18 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=7C98FEDF6B8B1A3D8DD1ABFDE95523500D419BE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:69:4b:16:1e:e1:1c:7b:e8:37:6f:06:83:e3:
                    5c:9f:1c:6a:c7:c7:36:69:b4:dd:68:d1:a7:29:d8:
                    65:0f:de:15:d3:cf:67:e4:e7:c9:e2:e9:7f:b2:44:
                    29:6f:03:78:11:ab:1e:0d:fd:47:16:cb:c2:6c:f3:
                    04:c0:30:4c:13:97:5c:d3:12:c4:8c:be:20:e6:be:
                    b7:de:bb:10:ef:c8:2e:8a:ba:4a:c3:aa:1d:0a:49:
                    ef:b3:1c:8b:ef:71:02:54:ad:05:93:33:06:1f:2a:
                    42:b0:1f:5e:07:06:9e:83:6f:64:80:c7:4f:19:29:
                    6b:69:b6:8e:6c:e0:46:3f:3b:49:2e:cc:e1:93:bd:
                    4b:2f:0f:93:76:3d:24:74:de:1d:52:bd:68:7c:f1:
                    93:20:cd:84:35:1f:92:4f:b5:d9:13:6c:64:96:64:
                    77:8c:e2:33:44:ad:95:cd:7a:11:4a:a4:be:46:13:
                    ef:33:94:31:9f:39:46:06:0d:83:cb:e4:03:5c:25:
                    6a:2b:fb:aa:47:8b:7b:e6:c0:bf:f9:bd:db:d8:8f:
                    0e:91:af:c1:c9:ed:d8:21:83:0f:bc:6c:c5:20:a9:
                    f2:39:2f:0f:e0:5e:5d:3c:89:f3:e1:2b:93:9e:ac:
                    6f:15:7d:3d:4c:6b:31:0a:15:83:03:bd:75:3d:63:
                    9d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:98:FE:DF:6B:8B:1A:3D:8D:D1:AB:FD:E9:55:23:50:0D:41:9B:E3
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/fJj-32uLGj2N0av96VUjUA1Bm-M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.210.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         33:ce:94:bf:72:e7:fa:c2:5b:51:d2:3f:ae:ac:c3:64:03:8c:
         0e:81:9b:47:2e:8c:e3:3a:37:a2:59:fe:8a:d5:0c:cb:32:65:
         c7:16:84:f0:f4:56:95:de:84:c4:65:2b:7a:1a:ac:08:9a:f2:
         4a:d9:25:dc:fe:e8:e3:6c:2a:17:54:ae:e8:e6:e8:cc:a3:23:
         61:46:cf:fc:9b:d6:c6:b3:38:d7:17:60:98:68:0e:d9:8b:d2:
         4c:ed:f2:f4:09:f7:b1:c0:d4:62:97:8d:6f:b2:6d:e1:0f:14:
         20:4e:6a:42:11:e4:d6:82:72:f6:a4:03:84:9e:02:0a:da:5e:
         cd:66:84:08:fa:73:1a:c0:0c:0f:2d:08:87:9f:cf:57:f7:84:
         13:05:8c:89:1f:18:b2:6d:85:3d:33:95:8c:f1:32:85:1f:1e:
         60:2b:4b:e3:f7:6a:fa:51:95:1d:28:95:47:23:ae:04:c8:6f:
         5c:30:b4:10:b1:53:39:f5:35:8e:1a:10:d5:1b:a2:f0:0a:4f:
         1b:ca:e9:2f:9c:59:50:f8:2d:ae:4f:97:95:90:13:ae:c9:27:
         b1:f9:f1:cd:e5:c1:5d:3f:23:32:55:9a:55:02:3f:92:81:11:
         81:36:67:f2:af:f9:91:a7:e8:3f:91:05:c5:c8:ba:5a:f0:26:
         9e:c7:15:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org