Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/hJ--w-6VcuB4BauXkpSBeKy7Opk.roa
File:                     hJ--w-6VcuB4BauXkpSBeKy7Opk.roa (raw, json)
Hash identifier:          G+hV4Mkes6KPAbm2C42/0ZGiS4W4K0lhv7RIPVLTMI4=
Subject key identifier:   84:9F:BE:C3:EE:95:72:E0:78:05:AB:97:92:94:81:78:AC:BB:3A:99
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       4C
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/hJ--w-6VcuB4BauXkpSBeKy7Opk.roa
Signing time:             Tue 07 Jun 2022 10:01:10 +0000
ROA not before:           Tue 07 Jun 2022 10:01:10 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        27.91.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:01:10 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=849FBEC3EE9572E07805AB9792948178ACBB3A99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f1:ed:53:77:eb:36:ae:5c:d4:e9:5a:41:a3:
                    98:da:58:bc:34:f9:e5:d2:3a:2b:e1:f0:27:bb:b4:
                    7f:6c:1e:d3:7e:0d:31:c9:b1:56:53:2d:9d:c8:f0:
                    cb:44:7c:ab:10:1a:c3:ce:e1:0b:02:3d:bd:0d:87:
                    49:21:1b:58:f6:3b:9a:6b:cb:85:80:02:37:4d:46:
                    28:f2:65:42:72:be:11:72:0f:a4:96:db:ea:96:56:
                    0e:17:05:1f:7a:cf:27:2f:72:40:ea:b9:49:f5:a7:
                    4e:e1:41:6a:8a:72:b0:da:e2:a4:2b:19:07:a7:6f:
                    21:45:80:2f:30:34:cb:24:b6:9b:8d:b6:3e:29:75:
                    8a:b7:2e:75:03:2a:e8:ca:26:9c:71:ed:c9:94:30:
                    7e:96:94:d4:86:5e:ba:dd:a4:a1:fc:83:25:45:c7:
                    9d:4e:e1:99:b2:8d:58:43:da:1a:5b:c6:6a:cc:56:
                    a4:e1:8d:e5:51:da:d0:31:03:05:b7:2c:bc:99:da:
                    e0:4b:dd:cf:db:50:d3:29:9c:cd:58:9e:f3:ac:cc:
                    94:12:09:c3:e5:7d:95:54:87:f1:b3:fe:15:06:14:
                    bb:2b:5b:b0:59:15:d0:e0:25:50:f1:57:cd:bf:6f:
                    a3:33:8c:10:00:cd:4e:0d:6e:34:18:25:11:ac:8c:
                    e9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:9F:BE:C3:EE:95:72:E0:78:05:AB:97:92:94:81:78:AC:BB:3A:99
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/hJ--w-6VcuB4BauXkpSBeKy7Opk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.91.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         61:b0:ce:37:ec:55:10:72:f9:be:d3:f1:60:e1:ea:a0:5b:74:
         5b:5f:c9:5b:60:8e:d1:9a:a6:74:fa:c6:ac:8a:35:71:4c:11:
         b0:2f:d9:3f:c6:aa:b8:9a:10:84:1c:3f:b7:62:3f:1c:c8:ee:
         65:1a:fa:57:33:d1:0f:41:9c:aa:f1:ec:a7:83:59:60:ef:ee:
         1c:d8:2f:1d:e1:a6:b6:d0:08:ab:38:c0:f9:c4:cd:15:c2:0a:
         31:ef:a7:5b:e1:25:3f:9b:5a:8f:aa:b7:6a:78:43:8d:a8:e9:
         98:8a:1f:e6:0b:15:11:ff:5b:93:2e:8c:06:6f:98:27:6a:a4:
         d4:a7:87:2e:98:69:95:68:88:b1:3c:31:4d:5c:11:4f:fc:fe:
         8b:8c:1c:d6:09:04:e5:25:fa:a6:6d:c9:87:5e:1d:92:16:38:
         f7:f5:f6:06:88:43:cf:63:be:17:a3:bd:8a:16:52:ed:c2:43:
         b7:80:88:8a:ac:12:12:29:23:1e:78:38:c5:fc:c1:74:c4:77:
         da:69:4e:39:a2:27:74:b4:cb:bb:b0:3b:82:81:cd:cb:cb:5d:
         25:cf:03:24:0a:4f:03:83:67:6d:04:51:24:32:51:43:3b:48:
         ba:db:6e:5d:ed:2d:7c:49:97:b2:1c:03:c3:ab:9a:67:cc:bd:
         bf:cf:34:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:08 2023 by rpki-client on console-ams.rpki-client.org