Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/hISJq5UAvy36qAGx95uEPjvBJN0.roa
File:                     hISJq5UAvy36qAGx95uEPjvBJN0.roa (raw, json)
Hash identifier:          tJs33aZN8H2orQRCJAqnfA7kgLkK+Brg6Ki1rsKZfBc=
Subject key identifier:   84:84:89:AB:95:00:BF:2D:FA:A8:01:B1:F7:9B:84:3E:3B:C1:24:DD
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0155
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/hISJq5UAvy36qAGx95uEPjvBJN0.roa
Signing time:             Fri 28 Oct 2022 06:11:45 +0000
ROA not before:           Fri 28 Oct 2022 06:11:45 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        182.248.192.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 341 (0x155)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Oct 28 06:11:45 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=848489AB9500BF2DFAA801B1F79B843E3BC124DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bd:da:91:5d:70:7d:69:3b:e5:5a:c7:00:0f:
                    ca:06:e8:2f:4b:fa:91:10:e4:ce:a3:0c:bd:41:59:
                    ca:22:21:9d:e9:22:02:d2:15:cc:83:fc:fa:d7:06:
                    ad:ed:a8:5f:26:d8:b6:3e:2e:d4:37:8c:e0:68:3f:
                    6d:b9:44:67:3d:d2:a1:b7:25:8d:a0:d8:52:c1:04:
                    48:27:56:06:7d:e6:30:1a:73:df:7e:90:ec:e6:82:
                    59:12:29:42:57:4c:8d:56:aa:08:0a:14:77:4b:5d:
                    d9:79:ce:52:d5:fc:2c:57:19:db:3e:fa:c0:9a:ff:
                    bc:cd:8e:23:ae:06:04:8a:e4:ab:a0:8a:75:81:36:
                    21:ba:c9:b8:88:ea:87:4f:8b:54:6f:5e:10:1f:ef:
                    ca:f0:c1:c7:4d:6a:3f:bf:22:5b:60:9a:cd:14:b0:
                    f1:ac:8a:b5:e1:1a:99:f5:bd:41:ba:8f:b3:1a:c3:
                    90:33:9a:59:26:8c:33:6e:a0:48:4f:e7:b8:c6:64:
                    39:7e:49:47:eb:50:4e:43:e6:d2:99:15:a7:64:fe:
                    22:11:65:30:16:14:d0:80:29:9c:25:a6:80:87:d3:
                    b9:d2:87:22:29:c9:54:34:f2:0f:c7:0c:c6:45:3b:
                    4d:d1:07:17:48:9d:a7:a5:f2:d7:bd:c9:59:89:43:
                    a5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:84:89:AB:95:00:BF:2D:FA:A8:01:B1:F7:9B:84:3E:3B:C1:24:DD
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/hISJq5UAvy36qAGx95uEPjvBJN0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.248.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2a:2b:d5:e3:3f:50:86:f7:5a:a0:cc:4b:a1:bc:9a:a0:00:14:
         b0:eb:25:dd:7b:0e:69:b8:94:5f:9b:e4:cd:96:a2:07:70:71:
         b0:db:f6:b6:1e:73:79:65:b7:c7:52:46:d2:d0:68:dd:01:b2:
         cd:a9:07:1a:26:97:44:3d:db:bd:24:25:78:9d:86:c7:a8:5b:
         d8:35:a0:79:32:e9:a6:0d:5c:c1:50:45:9d:65:dc:db:82:0e:
         45:88:51:66:26:9f:6e:08:ec:d9:dc:09:90:2f:32:f9:00:5c:
         15:1e:33:59:68:17:e4:c3:bc:00:e4:d2:bf:92:e6:32:93:6b:
         c1:ec:2e:87:dc:cb:8e:3f:ec:93:b6:e7:b1:bb:65:ee:13:e6:
         42:cb:6e:1c:f7:d2:7c:70:cd:f0:c8:60:dc:b4:4f:33:db:e8:
         d4:26:ec:82:01:4b:52:41:2f:19:87:1a:a1:c3:39:ee:57:d6:
         f1:e7:f1:37:e3:b0:7c:8e:25:33:3a:95:03:97:7b:a7:d4:cf:
         59:e7:8d:e2:c3:3f:7d:a8:0e:f3:d3:1a:1f:fa:c2:de:9f:a7:
         0a:98:30:68:41:cf:3a:7f:e9:52:30:2c:88:46:a7:21:d9:a2:
         08:c3:c4:4f:82:52:a2:2a:a3:b9:e3:40:94:5c:01:47:c3:0f:
         ae:dc:d0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org