Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/fsRa4XHwowFi8cTAe2Y2V2W9S-U.roa
File:                     fsRa4XHwowFi8cTAe2Y2V2W9S-U.roa (raw, json)
Hash identifier:          PYSWB21JHgCSeDO5eii+aRWhzt8syeIEtEiFTO6a8Wk=
Subject key identifier:   7E:C4:5A:E1:71:F0:A3:01:62:F1:C4:C0:7B:66:36:57:65:BD:4B:E5
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       016B
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/fsRa4XHwowFi8cTAe2Y2V2W9S-U.roa
Signing time:             Mon 01 May 2023 01:28:42 +0000
ROA not before:           Mon 01 May 2023 01:28:42 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        113.144.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 363 (0x16b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:28:42 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=7EC45AE171F0A30162F1C4C07B66365765BD4BE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:33:85:28:f9:ca:2b:73:f0:1d:3e:d6:ba:20:
                    94:70:9a:ae:64:ff:67:2d:77:d1:8a:88:89:7e:06:
                    05:9d:f1:f7:4b:c1:65:0e:12:53:24:81:5f:1f:7f:
                    ba:dc:69:ac:1f:20:47:0d:ae:74:ae:22:be:dc:64:
                    d9:43:b0:82:89:9b:a4:57:5a:1a:b5:81:11:d0:ae:
                    06:06:b1:07:01:85:41:b6:54:2f:1e:06:fe:3b:df:
                    38:d0:55:3d:fd:13:09:5b:d7:5e:f2:61:c9:b7:af:
                    ab:2e:ea:84:61:86:7a:1e:44:57:2f:b7:05:ac:4a:
                    2a:40:66:f8:66:6b:61:b2:6c:d5:57:c0:af:f9:51:
                    c1:01:8f:86:28:ef:1c:f3:ed:d9:28:18:eb:b9:ee:
                    7d:44:c2:3c:8b:36:6d:53:63:64:70:7f:ed:e3:da:
                    63:ea:9b:1d:27:4e:49:c6:4e:a9:81:6e:45:29:89:
                    bd:2a:38:a7:65:53:b5:9e:1f:17:4c:6d:ab:23:c1:
                    f9:66:1b:e0:de:5b:e8:45:9a:e8:c8:27:77:ce:44:
                    9c:3f:83:1b:c1:9f:60:5a:3a:68:dc:e5:ec:d0:6a:
                    a2:e2:21:bc:2b:bb:76:35:f4:d4:ee:5e:92:1e:75:
                    fa:53:c9:87:54:c9:13:3e:ad:3d:cf:26:bd:29:62:
                    93:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C4:5A:E1:71:F0:A3:01:62:F1:C4:C0:7B:66:36:57:65:BD:4B:E5
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/fsRa4XHwowFi8cTAe2Y2V2W9S-U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.144.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         06:c9:8c:27:dc:11:9d:01:15:6a:fb:fa:2b:29:9f:12:f0:f1:
         47:a8:c8:40:3d:cf:48:1a:0f:44:e0:a3:2c:68:c4:93:e2:fb:
         61:50:d1:41:57:2e:e6:10:42:f6:53:11:11:f1:f0:a0:eb:8f:
         fd:57:f6:4a:6d:0e:a3:3d:9c:95:54:2b:38:84:a2:17:04:8f:
         be:ae:30:64:00:a5:47:60:ba:44:ac:f8:09:7d:e9:4c:85:ba:
         56:dd:ba:87:1f:c1:27:e4:e7:17:ae:03:be:ab:20:c4:1b:be:
         63:a6:e6:35:b8:7f:48:59:b2:db:12:7a:ac:6d:a9:9e:71:5d:
         39:cc:f2:04:a0:49:c2:57:8d:91:79:df:3d:b7:d8:2f:b6:e3:
         55:51:cf:6f:d9:c1:89:c4:8f:85:e8:d9:11:59:86:5a:65:8a:
         36:be:10:a8:80:05:d9:b7:f3:b7:18:19:dd:5f:92:2a:56:d7:
         58:50:31:4c:3c:0d:04:28:39:6f:32:da:97:93:db:4b:1b:2c:
         3f:14:0c:9b:fe:cf:f7:da:72:bc:1e:9c:34:6b:9c:b2:ce:27:
         36:ea:a6:49:60:07:f1:64:23:81:1a:48:12:13:e4:09:7a:59:
         1d:bc:90:53:15:93:66:a0:7b:00:7f:ec:4a:a7:31:b9:4f:7c:
         9a:88:c2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org