Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/g_2pugSHXUxCnyM7yfFzvg69cxE.roa
File:                     g_2pugSHXUxCnyM7yfFzvg69cxE.roa (raw, json)
Hash identifier:          BuX8hO/675Sx3Ww2c9UUN+f57KQR9Ea/7hDEf+AzKLI=
Subject key identifier:   83:FD:A9:BA:04:87:5D:4C:42:9F:23:3B:C9:F1:73:BE:0E:BD:73:11
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       01C6
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/g_2pugSHXUxCnyM7yfFzvg69cxE.roa
Signing time:             Mon 01 May 2023 01:32:14 +0000
ROA not before:           Mon 01 May 2023 01:32:14 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        111.103.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 454 (0x1c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:32:14 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=83FDA9BA04875D4C429F233BC9F173BE0EBD7311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f6:bb:6c:56:b8:59:41:97:b2:00:a4:8f:d1:
                    14:e9:29:ae:9e:2e:8c:a1:5e:01:5d:a4:97:e6:7c:
                    d4:a6:e9:84:4d:8c:9b:63:73:bc:47:45:12:82:a7:
                    f4:b7:c2:78:64:7f:fe:f9:cf:4c:08:7b:cd:16:07:
                    f9:b6:30:79:42:3b:17:ea:c9:1e:1e:3a:cb:5a:07:
                    f6:4f:11:bb:b5:a2:4c:f6:a0:96:d2:1c:ed:b9:ae:
                    70:a5:ea:27:40:34:4c:7b:48:59:5a:e5:a4:79:6b:
                    77:3d:30:e5:86:1d:05:9e:cb:8f:21:7a:5e:f0:29:
                    86:4f:1a:c4:b9:3c:db:e9:8d:b4:1a:9c:75:67:db:
                    ef:88:05:9c:80:00:5c:13:97:96:bb:22:3c:b4:80:
                    12:31:9c:4c:7a:28:1d:5d:86:b0:17:f0:da:46:da:
                    17:0a:7f:a9:ba:eb:64:13:94:6f:c3:82:e3:f7:f8:
                    f0:c0:c6:3b:3d:02:f3:07:89:18:63:a3:fa:00:c4:
                    3b:be:1b:c7:e0:42:af:71:12:b5:a1:0d:4d:ef:18:
                    e9:b5:ae:34:e3:4b:06:b7:c5:d5:30:d1:2d:18:c9:
                    9c:05:d0:bb:4a:ec:ce:03:0e:47:1f:da:36:9d:5b:
                    9f:99:64:b8:c6:bb:c7:f9:d0:56:ad:be:57:bc:62:
                    63:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:FD:A9:BA:04:87:5D:4C:42:9F:23:3B:C9:F1:73:BE:0E:BD:73:11
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/g_2pugSHXUxCnyM7yfFzvg69cxE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.103.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4a:85:15:7c:c8:72:e8:7c:82:52:b4:0f:19:33:95:69:c7:e2:
         2c:5e:4f:f9:40:0d:67:3c:62:f2:4b:46:71:ba:95:6c:99:64:
         1c:5e:91:f1:e2:0b:4c:96:30:21:bf:f8:6d:54:04:41:d3:6f:
         6d:71:e4:4f:08:9c:c4:90:65:36:70:76:fc:1a:95:5f:c2:a8:
         26:47:a9:d6:91:cf:98:3e:17:36:5e:a4:7a:4f:28:97:7a:7d:
         3f:24:d1:d0:5e:5c:83:49:9e:c0:4a:e3:7d:5d:0e:3b:cd:78:
         02:9e:1d:40:9d:d0:86:60:87:f0:0d:2d:07:90:5e:dd:f8:94:
         21:04:a8:a5:eb:27:17:a0:56:03:54:a7:87:86:c0:a2:95:48:
         37:3d:49:12:e9:5a:69:4b:e7:6a:1b:11:9f:64:14:61:eb:ce:
         a3:1e:0d:af:69:cf:bb:71:30:82:29:93:d9:a6:c7:c6:d5:cb:
         02:f9:9f:bd:45:c9:4a:fd:f7:af:14:b2:fc:bd:2e:47:a4:3c:
         66:d5:7c:60:59:47:ec:cc:2b:31:8f:b7:dc:5b:6b:ca:e0:9e:
         3a:8c:63:27:ae:fe:b2:08:21:01:2e:f9:5a:0c:5e:8e:c4:9f:
         4c:5a:4f:c6:f2:06:6c:6a:71:36:0c:0e:f3:44:8b:90:a3:34:
         5f:97:2b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org