Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/fUJ4jtE6UT3ZKj4aLd4mZcnndwo.roa
File:                     fUJ4jtE6UT3ZKj4aLd4mZcnndwo.roa (raw, json)
Hash identifier:          v8t0wfjvgB1glCZ6dVsl84tR7zn4x+s4ebMvP/Hm2sw=
Subject key identifier:   7D:42:78:8E:D1:3A:51:3D:D9:2A:3E:1A:2D:DE:26:65:C9:E7:77:0A
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       015E
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/fUJ4jtE6UT3ZKj4aLd4mZcnndwo.roa
Signing time:             Thu 13 Apr 2023 09:50:42 +0000
ROA not before:           Thu 13 Apr 2023 09:50:42 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        59.131.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 350 (0x15e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Apr 13 09:50:42 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=7D42788ED13A513DD92A3E1A2DDE2665C9E7770A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9c:b6:81:14:c7:67:a0:e2:bb:63:32:db:70:
                    30:d7:29:31:20:e4:56:59:fd:43:7b:db:09:0f:62:
                    e1:75:12:19:ed:cd:c0:f5:6e:f7:80:fa:13:c8:69:
                    e7:84:0f:37:63:9d:30:76:60:d7:93:1c:04:bf:5b:
                    77:bd:77:a5:69:78:0c:ff:19:fe:ca:ae:00:f2:c9:
                    dd:35:85:d8:96:9f:f5:76:ce:d0:45:dd:45:c9:d2:
                    e7:40:2d:58:35:c3:cf:55:c2:d1:85:be:4b:1b:7f:
                    dc:69:78:8c:af:3b:f9:f2:5b:6f:98:1a:8c:e0:4a:
                    3e:c0:81:9c:fb:8a:34:96:16:af:f9:5a:2d:08:1c:
                    cd:17:c0:fe:e4:80:cc:6e:77:9e:23:2b:d2:18:63:
                    f0:04:b6:21:33:92:2d:04:f9:96:46:1d:fd:0e:25:
                    b6:f7:4c:ec:76:f7:32:61:7b:01:ad:fc:eb:36:80:
                    20:0c:5a:bd:8f:8a:69:32:b0:bb:65:71:86:cf:ad:
                    35:f4:7d:d4:d2:0e:0d:dd:d0:8b:bc:1b:30:b8:5e:
                    50:df:f5:30:1c:7c:4d:81:e8:ac:52:29:fd:af:e5:
                    19:0b:bf:79:78:a6:51:35:2d:68:5c:35:21:38:c9:
                    bb:6e:40:ac:0d:f9:24:3a:cb:65:bb:9c:a1:67:39:
                    c3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:42:78:8E:D1:3A:51:3D:D9:2A:3E:1A:2D:DE:26:65:C9:E7:77:0A
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/fUJ4jtE6UT3ZKj4aLd4mZcnndwo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.131.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a4:96:66:e4:bc:a5:ce:ea:6f:15:c3:b7:f5:a8:b4:77:b7:c7:
         45:97:ef:49:02:b7:9b:9d:00:ba:62:aa:3b:72:3f:33:51:83:
         ec:1d:d1:5e:6a:cb:e9:d7:c1:1a:db:24:0f:60:02:bc:32:ae:
         39:21:50:34:56:c2:8a:0a:d8:58:96:75:a3:00:a8:50:3f:78:
         26:c6:f5:08:b1:9e:a7:52:b2:a3:3d:76:33:0f:4c:da:4c:f8:
         22:4f:03:6b:6f:a9:b4:21:f3:b3:1b:43:90:aa:9b:96:78:12:
         8c:ef:ae:7b:b1:17:4d:b8:aa:68:41:ff:a5:7a:41:56:48:3b:
         11:5e:cc:b3:d0:92:c0:38:d2:8b:29:3d:9b:c2:a6:80:fd:02:
         d4:34:a4:6c:0c:a4:8b:ac:7f:69:73:9a:8d:f6:bd:f8:c3:84:
         fd:3f:2f:e3:a3:63:0d:6e:ae:65:3c:71:c0:1d:49:34:6e:e9:
         ed:b6:66:50:e5:fd:7b:6c:bb:09:14:18:01:6c:fb:d4:7b:2d:
         1b:13:9c:b2:e1:20:b4:66:38:29:8a:04:04:3a:cb:e4:b5:b1:
         eb:7b:b8:98:dc:2d:ad:c3:5b:66:70:2e:af:09:2a:a2:12:cf:
         0b:80:72:e2:85:ad:af:86:d4:4e:14:b1:e5:1f:14:c5:e8:a2:
         97:1b:44:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org