Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/gjmBPGyLGfIGQhi2vXlHNk5mB2Y.roa
File:                     gjmBPGyLGfIGQhi2vXlHNk5mB2Y.roa (raw, json)
Hash identifier:          WePQbP06lUH5FpTLTnqvEvdAyS5EC+8jCGhdMNLbUcA=
Subject key identifier:   82:39:81:3C:6C:8B:19:F2:06:42:18:B6:BD:79:47:36:4E:66:07:66
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0146
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/gjmBPGyLGfIGQhi2vXlHNk5mB2Y.roa
Signing time:             Fri 28 Oct 2022 05:37:40 +0000
ROA not before:           Fri 28 Oct 2022 05:37:40 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        111.86.128.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 326 (0x146)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Oct 28 05:37:40 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=8239813C6C8B19F2064218B6BD7947364E660766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7a:d3:1d:e3:31:c9:bd:94:9e:79:bc:72:f9:
                    9d:72:2c:e2:9b:be:ac:5c:6c:79:14:63:e6:c7:15:
                    7d:8c:3c:91:2a:55:5e:cf:30:59:33:df:8d:db:fd:
                    9d:b8:34:13:09:31:66:e0:62:6b:5c:a3:9b:27:95:
                    f0:64:45:dd:28:f1:6b:ae:aa:bc:fb:1f:c9:65:a6:
                    b2:8d:7e:fa:19:6f:a4:15:ea:a3:8d:f4:5f:29:98:
                    41:94:ff:b3:8d:9b:92:50:d5:b8:57:73:ad:0d:ec:
                    16:27:df:ac:2c:85:8c:e9:df:ed:41:96:cb:61:7d:
                    d6:23:ec:bd:09:ac:f3:d5:2c:4e:0a:ea:55:3e:77:
                    72:9a:38:5d:3c:5b:76:9b:55:1d:a9:6a:d3:80:db:
                    1f:8d:65:75:b6:95:70:74:eb:e3:89:a3:b0:74:67:
                    ca:fa:f3:76:f1:21:fe:41:1a:89:27:31:60:32:7f:
                    46:46:86:02:9f:cd:0a:62:03:cf:5e:7c:96:1a:e5:
                    8b:f8:90:35:17:90:f9:14:d3:46:fd:9b:38:ae:43:
                    15:6d:4d:d8:9b:a5:21:85:a1:87:a9:9b:f4:22:50:
                    11:e0:44:5c:e6:a7:81:1b:83:a9:30:61:36:69:a1:
                    0f:48:68:c0:cf:08:64:b4:da:a9:ca:dc:99:5f:0c:
                    b3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:39:81:3C:6C:8B:19:F2:06:42:18:B6:BD:79:47:36:4E:66:07:66
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/gjmBPGyLGfIGQhi2vXlHNk5mB2Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.86.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         74:90:1c:e4:7a:dc:7d:13:03:47:b5:c9:69:30:57:89:43:6d:
         0e:6f:1c:fc:10:ed:3f:a9:d2:6f:72:29:60:48:6c:02:e6:62:
         9f:aa:1b:c8:fb:d8:35:3b:46:6f:14:22:2e:f3:cd:85:15:fe:
         61:21:5e:5f:94:f3:36:8a:4b:b2:cd:90:84:8a:9e:cd:92:dc:
         89:c5:c9:b0:8c:58:53:27:9b:5e:17:fe:6a:db:26:32:02:c5:
         ad:fe:04:6c:f8:60:2a:c5:e8:63:10:22:24:ae:ec:2e:70:72:
         b2:a8:b3:89:9d:42:9a:a6:11:24:f3:0a:64:73:26:c4:ae:77:
         87:a6:eb:7a:5b:c1:7a:b8:e0:81:74:10:bb:ff:e0:7a:02:b0:
         98:6f:6c:76:b6:51:af:e6:9a:ef:84:bd:88:09:a6:82:b0:a8:
         b4:49:0e:f5:a7:a9:b1:73:82:05:88:af:d0:60:88:79:7f:20:
         3b:7e:3a:c0:34:b3:18:ce:0b:82:ab:bd:54:18:3e:24:96:57:
         1f:9c:ba:e5:59:6c:9a:96:2a:0a:83:aa:de:a8:ec:5d:a2:81:
         e4:6d:23:d2:61:33:63:66:0e:43:78:1c:41:e9:a7:40:36:8c:
         cd:83:f8:a5:36:b9:71:60:45:b5:56:d2:e4:4d:38:c6:20:a4:
         d6:23:d4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org