Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/fQDSEuKqh_iskwS9hn2J13FYIZw.roa
File:                     fQDSEuKqh_iskwS9hn2J13FYIZw.roa (raw, json)
Hash identifier:          Ibt8e5mjMdimReATIkEHZtdXtfvGtME+I1UoG1bpbD8=
Subject key identifier:   7D:00:D2:12:E2:AA:87:F8:AC:93:04:BD:86:7D:89:D7:71:58:21:9C
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       019B
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/fQDSEuKqh_iskwS9hn2J13FYIZw.roa
Signing time:             Mon 01 May 2023 01:30:34 +0000
ROA not before:           Mon 01 May 2023 01:30:34 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        121.108.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 411 (0x19b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:30:34 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=7D00D212E2AA87F8AC9304BD867D89D77158219C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6f:93:ef:67:aa:c1:c1:78:0a:20:00:b9:49:
                    72:e7:f1:8c:1b:22:bb:39:f9:ce:b1:0e:c9:97:9d:
                    8a:25:31:ff:0a:ae:39:66:7e:48:18:ee:9b:78:25:
                    3c:5e:b5:a7:30:84:f5:91:24:f1:20:15:73:ef:f7:
                    df:ba:34:67:9f:90:da:18:29:6e:1d:77:50:6e:53:
                    2b:af:83:37:b5:a4:4d:3e:3a:ac:48:9e:a6:0b:5b:
                    a9:df:a4:c5:1a:25:d1:f9:66:3b:4d:b1:20:6f:e6:
                    03:6f:82:83:12:9b:9f:78:b1:ea:4d:ea:d5:73:b2:
                    fa:13:79:3e:bb:8d:a7:6d:c2:69:cf:07:bd:b5:04:
                    1f:59:9e:04:bd:7a:51:03:01:dc:3a:3c:fc:08:cb:
                    71:df:13:bc:95:33:1b:0f:89:c7:80:7f:b2:d4:57:
                    e8:55:0c:f6:d8:16:3f:a8:c3:87:b2:5d:12:60:d4:
                    b5:8e:cd:aa:3e:70:d1:f8:03:6f:e1:25:37:ac:da:
                    5e:8f:26:31:67:8f:35:b6:cd:8b:e4:38:94:6b:53:
                    67:a2:64:4e:6a:53:b4:e9:ce:86:d2:ff:d9:3b:27:
                    f6:02:2f:1a:ee:72:db:37:71:8f:d2:b4:d3:49:c3:
                    27:c8:59:d8:51:54:0d:a9:5e:44:79:7b:a8:c8:68:
                    1e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:00:D2:12:E2:AA:87:F8:AC:93:04:BD:86:7D:89:D7:71:58:21:9C
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/fQDSEuKqh_iskwS9hn2J13FYIZw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.108.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8e:46:00:a4:1d:c8:7b:c1:28:af:7b:50:f6:58:1b:ad:5a:c9:
         c9:a0:2a:b7:58:0a:11:a5:8e:7a:4e:0b:26:7a:eb:f1:ea:46:
         bc:3f:7f:47:4d:8e:10:4e:e3:55:57:80:27:68:11:ab:fb:ce:
         74:fc:5e:f9:42:2b:5a:45:2b:d8:a5:f7:8f:aa:9b:92:a8:a7:
         bf:fd:71:61:4a:bb:7f:77:09:f4:ae:55:5d:30:6a:87:6a:60:
         7b:6a:92:75:3f:83:dd:b7:6b:04:bd:3d:7b:f2:9b:5c:c5:ed:
         73:83:05:b8:4a:6c:35:06:78:c8:32:74:8c:21:16:75:98:4a:
         31:67:21:d0:d0:9c:e8:0c:58:ac:ab:34:22:b1:c4:be:6a:1a:
         1f:1e:2f:bd:57:1b:14:5a:9c:40:4e:ec:20:fa:b2:6a:e2:1c:
         2c:85:13:98:9b:4c:bf:5e:1d:dd:f3:a9:ea:01:59:ea:58:25:
         62:f9:32:b0:98:b5:ab:8d:dc:3c:25:42:d8:79:35:25:ad:15:
         16:eb:60:7c:5b:dd:29:a6:4a:54:b8:16:ea:76:83:c8:e4:44:
         f1:38:38:f5:7b:d7:43:ae:60:6a:9c:af:d8:67:17:02:38:98:
         61:0d:7c:26:12:b1:b9:31:a3:c6:76:b8:67:c5:14:18:a1:c3:
         4e:50:3a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org