Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/gtBbq8VLKiWOo7JVwhcSqJjKtxw.roa
File:                     gtBbq8VLKiWOo7JVwhcSqJjKtxw.roa (raw, json)
Hash identifier:          5IIfdrYbwF3PLKqXFXZfU1GJ/eIGhuYC8QQ9r93a07U=
Subject key identifier:   82:D0:5B:AB:C5:4B:2A:25:8E:A3:B2:55:C2:17:12:A8:98:CA:B7:1C
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       016C
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/gtBbq8VLKiWOo7JVwhcSqJjKtxw.roa
Signing time:             Mon 01 May 2023 01:28:42 +0000
ROA not before:           Mon 01 May 2023 01:28:42 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        14.101.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 364 (0x16c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:28:42 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=82D05BABC54B2A258EA3B255C21712A898CAB71C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:53:2d:49:92:10:ee:6f:3d:1e:b1:7f:99:31:
                    32:0b:a5:aa:87:db:b9:49:dc:43:6f:8f:08:95:aa:
                    62:7e:68:3e:96:36:93:f4:1b:c8:44:fa:82:e8:63:
                    b8:63:2b:94:35:cc:21:af:e6:17:36:4b:e9:da:34:
                    a0:22:24:4a:d9:af:36:26:49:53:c3:63:db:a7:16:
                    16:31:66:83:02:c5:40:7a:46:b0:6b:d0:3f:46:b3:
                    5f:5f:30:bc:3b:8a:c9:82:2f:0b:5e:b2:33:19:e7:
                    b7:0f:2c:14:9e:a0:9d:de:36:72:a5:ef:40:d0:9c:
                    00:b3:e5:00:ac:b3:5d:80:a6:b6:1d:ef:60:3a:f7:
                    4a:ef:59:b9:d1:46:22:17:7f:fc:43:77:5d:82:69:
                    e5:d2:64:f6:68:cd:75:04:ce:b8:a9:08:ed:eb:d6:
                    96:7e:00:1e:08:e2:b1:3d:ad:fe:ab:f3:16:48:4e:
                    86:97:1a:35:08:a4:03:fe:64:40:df:7b:72:41:87:
                    f2:74:84:12:57:cf:5e:05:66:14:e2:11:07:f4:1b:
                    ad:d5:ed:93:59:d9:70:07:1d:5b:ee:65:e0:93:d0:
                    e6:d9:ef:75:a8:2b:9a:b0:0f:f6:5f:a8:14:73:fe:
                    25:5f:38:3a:4f:c8:82:ca:a3:a3:24:97:cb:db:a7:
                    b9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D0:5B:AB:C5:4B:2A:25:8E:A3:B2:55:C2:17:12:A8:98:CA:B7:1C
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/gtBbq8VLKiWOo7JVwhcSqJjKtxw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.101.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a5:a4:0d:6f:be:13:d5:9e:53:0b:c5:dd:a4:3e:eb:1c:ba:9a:
         19:d6:7d:54:c4:c2:6c:88:02:e1:89:70:c6:ca:93:ca:2f:fb:
         7b:68:9a:8d:57:0e:b3:71:83:a5:ce:8d:7d:fd:4a:1e:de:5a:
         cc:f4:b1:b9:a1:3a:c4:4e:4e:16:86:16:a6:22:5f:64:54:30:
         80:bf:c9:85:26:f3:46:32:14:c9:f5:cd:5b:62:31:8b:a6:c0:
         fe:c9:8c:10:11:94:6c:41:f9:36:bf:af:26:74:cc:4c:97:4f:
         1b:ae:aa:d3:fd:f6:1d:ee:2b:35:08:16:4f:7e:a4:0f:6a:5b:
         ff:0c:d3:d3:46:5c:7e:5f:47:e9:c8:29:38:25:02:85:21:f4:
         49:6c:cd:a7:5b:d4:d7:0f:d9:70:e4:4c:bf:fe:37:ca:3e:41:
         d3:94:27:c4:10:5e:47:9d:98:ce:a4:59:bc:59:e7:92:6e:09:
         1f:98:5c:08:01:28:19:a5:08:6d:c8:46:6b:4e:9d:8f:a0:ef:
         07:74:b1:99:53:63:b7:32:71:11:f9:06:0e:34:86:34:d0:01:
         ca:6f:48:5e:38:7c:f6:b2:61:02:9b:76:fb:3c:d9:ae:56:07:
         5a:3b:14:a7:ce:30:30:10:06:e3:df:c1:5b:44:2e:5b:06:94:
         03:dd:7f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org