Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/hF7_KKdbzTo6a-dTzFndJ2GE_1Y.roa
File:                     hF7_KKdbzTo6a-dTzFndJ2GE_1Y.roa (raw, json)
Hash identifier:          Ai8h3J2SsbgfAkG21md6TqymdtYkctTDlvXzLntrcQw=
Subject key identifier:   84:5E:FF:28:A7:5B:CD:3A:3A:6B:E7:53:CC:59:DD:27:61:84:FF:56
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       019A
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/hF7_KKdbzTo6a-dTzFndJ2GE_1Y.roa
Signing time:             Mon 01 May 2023 01:30:33 +0000
ROA not before:           Mon 01 May 2023 01:30:33 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        106.160.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 410 (0x19a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:30:33 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=845EFF28A75BCD3A3A6BE753CC59DD276184FF56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2f:4a:dd:8a:a4:ce:21:9d:1c:22:04:5d:f4:
                    83:54:f1:22:5b:70:fd:cc:2d:95:5c:04:90:5a:92:
                    4b:a5:b6:89:37:99:d5:7a:1d:2a:70:7e:14:86:73:
                    d2:74:db:90:16:38:fe:74:9d:06:26:b2:db:48:62:
                    a8:01:54:e2:74:7b:75:3f:61:f7:48:f5:ea:c5:d2:
                    b5:c1:75:ea:fd:7b:04:5f:22:1a:6f:30:9b:66:6e:
                    86:ee:fe:b5:59:7d:9c:18:86:f4:69:fd:c2:a3:79:
                    a0:74:cc:1e:5c:14:70:b4:8c:86:ad:0a:ef:e9:0c:
                    d9:9d:f2:fc:c1:35:9a:2f:d0:d8:f7:2a:d5:f8:87:
                    ba:84:b7:42:d9:55:63:f1:e4:b9:d3:7a:f2:b1:cc:
                    23:9c:fc:ca:8c:c0:01:c4:70:92:bd:9f:25:49:b5:
                    66:04:76:55:bf:fb:15:64:aa:f3:2f:b0:33:9c:95:
                    c7:60:65:08:60:8a:64:ec:6d:61:15:51:5e:86:0a:
                    c6:67:e9:00:b9:07:a5:12:03:2b:50:78:a7:e7:11:
                    ca:38:ac:55:5e:93:7d:b4:9d:e6:21:6c:58:fe:a0:
                    3a:f8:53:81:5b:b8:0d:d2:c9:d4:e7:21:a8:f4:55:
                    58:69:a4:ec:68:0c:f0:c2:57:11:40:4a:fd:4b:fa:
                    6b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:5E:FF:28:A7:5B:CD:3A:3A:6B:E7:53:CC:59:DD:27:61:84:FF:56
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/hF7_KKdbzTo6a-dTzFndJ2GE_1Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.160.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         57:6c:e6:4c:f8:6b:36:fe:de:61:c3:da:a1:7c:f5:c1:9b:db:
         d9:68:9f:3b:93:d9:fe:4f:a3:a6:76:e0:c7:73:42:cf:9d:e0:
         4c:06:9f:c6:d4:27:bc:0d:91:47:b6:fc:67:e2:a3:5d:ba:0a:
         58:b9:ca:25:44:5f:85:62:9d:2e:e3:fd:2c:cf:3a:e5:66:38:
         a7:fa:9f:02:b9:85:08:fd:a7:42:bc:47:7f:f9:9c:2d:4f:84:
         1b:d7:08:b3:ef:8b:0f:d7:1d:83:2f:84:45:f1:2f:1f:fe:57:
         f5:32:9c:85:00:b0:52:16:68:29:0e:3c:e6:5c:2f:c2:a0:85:
         3a:f5:7a:e0:0e:cc:17:4e:41:c7:cd:be:1e:e7:3a:0e:cd:76:
         d9:26:28:01:c3:80:bd:8c:5f:3f:05:cf:fe:a4:5a:91:6e:13:
         e6:8e:75:a8:da:72:06:31:71:09:1d:8f:fe:91:3f:a8:35:d8:
         5f:72:d3:2e:a9:5a:62:c2:ae:bf:e5:c6:21:ee:0e:65:1b:be:
         85:57:a0:f9:99:29:13:9c:9e:d4:a5:b3:7e:26:5f:f8:a5:55:
         77:30:9a:fe:d7:0e:c3:33:06:be:c0:9d:f3:9c:eb:ad:53:7e:
         86:7e:65:21:20:a7:bd:ea:c2:30:2e:33:8a:90:42:e0:ca:db:
         96:5c:f0:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org