Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/g75ghoUw2EXa4QQoV3wLfMKAOHQ.roa
File:                     g75ghoUw2EXa4QQoV3wLfMKAOHQ.roa (raw, json)
Hash identifier:          PCR/mGoDzBdW8uQ4TNPp7X3abcnNyw3vFaTjQuD6bX4=
Subject key identifier:   83:BE:60:86:85:30:D8:45:DA:E1:04:28:57:7C:0B:7C:C2:80:38:74
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       01A9
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/g75ghoUw2EXa4QQoV3wLfMKAOHQ.roa
Signing time:             Mon 01 May 2023 01:32:02 +0000
ROA not before:           Mon 01 May 2023 01:32:02 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        106.173.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 425 (0x1a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:32:02 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=83BE60868530D845DAE10428577C0B7CC2803874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:30:ab:cc:50:33:97:90:16:23:62:a9:c8:2c:
                    20:27:13:67:39:8c:19:7f:86:38:22:41:91:aa:c2:
                    5e:e0:46:78:88:b3:ac:51:b1:95:a7:70:9a:a1:71:
                    b3:55:61:f4:7b:22:da:e1:fd:16:a5:20:42:d6:ef:
                    8d:ef:e7:0f:69:11:a2:46:00:36:65:be:be:72:63:
                    c1:b2:de:cd:7a:77:bf:fd:73:39:15:6f:63:d0:ff:
                    e0:b0:cb:20:38:9a:1f:ac:28:c6:68:af:d1:40:f9:
                    e9:b7:88:30:52:6e:12:b2:f5:ae:a0:b5:51:dc:ce:
                    6e:87:b0:eb:3b:31:1a:2d:52:47:9e:9b:82:f1:d9:
                    53:74:cb:6b:11:44:cf:f7:69:fb:ef:d7:6d:b2:d4:
                    c7:ba:01:9c:99:f4:8b:cf:e3:f3:1a:62:6c:fe:c1:
                    50:75:94:e4:02:ec:0c:de:09:56:1e:b1:94:06:d5:
                    2f:83:b9:7f:c3:79:e3:aa:30:45:f2:1d:3e:61:56:
                    fc:cc:e5:cf:f2:f0:c6:e1:f7:1f:a5:bc:db:b4:7c:
                    a4:24:88:eb:e9:08:25:66:29:a8:ac:80:ca:f2:df:
                    98:72:42:98:82:05:41:0d:ee:f5:ab:8b:f0:67:27:
                    b0:60:08:21:55:53:a3:43:69:00:e8:24:62:8c:6e:
                    76:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:BE:60:86:85:30:D8:45:DA:E1:04:28:57:7C:0B:7C:C2:80:38:74
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/g75ghoUw2EXa4QQoV3wLfMKAOHQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.173.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5b:2b:ff:80:f6:c8:58:ca:0b:9f:48:30:33:73:eb:52:29:31:
         6b:6c:79:49:e7:c9:7d:25:39:7c:21:1b:c9:69:d1:d8:a6:fd:
         6d:47:5d:90:da:38:f7:8e:64:14:a2:e4:6a:c1:41:bb:db:ad:
         ab:ea:06:e7:ea:50:01:07:60:10:34:8f:16:cc:ce:6c:fb:67:
         2c:f2:ee:9d:87:72:19:8d:86:2a:0d:e3:68:06:84:c4:82:ae:
         11:5a:c9:b8:e0:b4:13:c1:f8:f5:a3:36:c1:63:76:24:4e:f6:
         c1:c4:0c:ef:05:65:d2:58:8f:9b:0d:16:9c:84:aa:1c:e5:d3:
         70:fd:6b:69:90:01:2a:45:23:61:bc:3a:6f:b1:66:9b:4e:9a:
         52:8e:5c:df:8a:21:07:6e:c3:30:ca:57:32:7b:c9:b7:8e:80:
         7f:d7:f4:5a:a8:92:92:86:75:34:37:b5:a9:a7:b4:84:0b:b7:
         6c:39:7e:c7:40:85:5c:51:e5:52:0c:23:c4:60:0b:bb:80:fb:
         33:cc:f4:5f:51:46:b4:14:a8:60:23:36:ea:a4:5f:25:18:2c:
         9d:ff:b5:62:db:e1:36:b0:be:da:7a:b9:03:e6:b2:af:3b:03:
         ab:04:c2:5f:5b:25:0f:a2:b0:e1:2c:d3:cc:33:e3:a6:e9:3f:
         09:f6:2c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org