Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/hU4DW0LCx-OWTjkUZ7yG0XXsmBw.roa
File:                     hU4DW0LCx-OWTjkUZ7yG0XXsmBw.roa (raw, json)
Hash identifier:          +drT8riSfHchR6hICdobmOlJ/SMf3b6gZWtVu78BjEs=
Subject key identifier:   85:4E:03:5B:42:C2:C7:E3:96:4E:39:14:67:BC:86:D1:75:EC:98:1C
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       DA
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/hU4DW0LCx-OWTjkUZ7yG0XXsmBw.roa
Signing time:             Tue 14 Jun 2022 09:30:10 +0000
ROA not before:           Tue 14 Jun 2022 09:30:10 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        182.250.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 218 (0xda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun 14 09:30:10 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=854E035B42C2C7E3964E391467BC86D175EC981C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fd:c7:7c:64:e0:c6:c2:e4:7e:83:3f:03:fe:
                    83:db:d2:a8:ee:1b:41:96:78:55:55:f9:ea:9f:14:
                    04:70:6e:d6:43:f5:70:56:64:1d:77:99:20:c1:37:
                    1c:19:32:fe:30:ca:f7:12:a4:54:2b:05:ec:8f:4f:
                    da:52:bd:d8:58:a4:4f:5e:41:ca:9a:c4:7b:14:15:
                    af:ed:e8:d0:1a:a7:b7:65:81:e4:b1:63:fa:1f:17:
                    19:8f:c0:96:44:d8:5e:33:b4:90:59:44:18:c0:45:
                    e5:42:66:80:fd:07:a4:1b:2a:34:c7:e9:fe:25:2a:
                    73:24:41:a1:07:52:74:d6:8e:fa:41:a5:3a:0f:ef:
                    ba:02:2e:45:2e:d0:3f:98:04:96:6d:48:65:92:c0:
                    b3:3d:ae:72:08:55:76:e3:e8:43:a5:5a:ad:ed:88:
                    02:5a:cf:4b:ef:5a:e2:30:d1:94:95:c2:1d:3d:df:
                    06:4f:10:e7:ae:6b:8c:08:18:e3:4b:e1:48:2a:a8:
                    27:16:d1:fe:e6:30:77:2a:40:9e:da:62:df:9b:aa:
                    aa:cd:4c:d4:47:d0:01:f9:b2:49:0e:4d:96:72:99:
                    01:bd:19:91:e2:6c:03:87:c2:c2:c0:e9:ac:06:64:
                    e8:a4:19:d1:73:33:5a:a6:82:a8:bd:43:fb:26:ea:
                    99:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:4E:03:5B:42:C2:C7:E3:96:4E:39:14:67:BC:86:D1:75:EC:98:1C
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/hU4DW0LCx-OWTjkUZ7yG0XXsmBw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.250.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a6:0a:4b:73:7e:f6:dd:22:1f:32:5d:d0:15:67:7a:be:bb:9c:
         a0:20:32:a2:fc:28:b1:05:f1:f1:ea:bb:1f:15:79:94:af:d3:
         72:d2:e6:3b:2b:cf:4d:aa:49:01:f6:c2:a9:8e:a1:fc:a9:c4:
         86:36:a2:68:9a:b3:5e:f2:21:c9:ae:02:b8:8c:4e:2f:07:e9:
         92:19:27:52:5b:20:91:32:e6:b7:dc:8b:c1:37:76:dd:ec:9e:
         c8:19:1b:e7:7a:66:50:e3:d0:86:d7:c4:97:e5:f5:e1:f1:80:
         c7:c9:36:ac:a4:c9:0f:fc:4a:04:7a:36:a3:c9:8c:33:4d:a3:
         6f:a6:3b:25:dc:d0:14:fb:ce:5c:f9:2c:25:cf:37:81:18:6e:
         1a:32:e9:50:82:26:c7:7e:cd:6c:5c:b9:41:62:48:8e:3c:10:
         7b:10:6a:0c:ce:4a:b4:f8:eb:f5:63:e9:a9:d2:61:03:15:de:
         a8:7b:30:b1:b5:19:8f:e1:94:1e:c6:f1:81:52:77:18:ac:26:
         38:b3:0d:40:ff:eb:33:46:53:27:b4:70:fb:c3:b0:45:eb:82:
         e7:21:8e:f8:70:09:38:5f:5e:a0:5b:34:a2:5c:fc:98:18:9b:
         1b:97:64:bc:c5:09:bc:49:b7:39:ef:c2:18:6c:40:5c:4f:26:
         fc:16:21:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org