Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/i5CUTfPY1cBFKbW_hsdSlmH7Aw8.roa
File:                     i5CUTfPY1cBFKbW_hsdSlmH7Aw8.roa (raw, json)
Hash identifier:          Wp7RLkf81Rp37aUtUzvpNgmZgQDowuaLcaOXaaRYGVU=
Subject key identifier:   8B:90:94:4D:F3:D8:D5:C0:45:29:B5:BF:86:C7:52:96:61:FB:03:0F
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       4A
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/i5CUTfPY1cBFKbW_hsdSlmH7Aw8.roa
Signing time:             Tue 07 Jun 2022 10:01:09 +0000
ROA not before:           Tue 07 Jun 2022 10:01:09 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        27.87.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:01:09 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=8B90944DF3D8D5C04529B5BF86C7529661FB030F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:e9:04:ef:30:48:b7:cd:4b:a6:03:81:0d:3a:
                    f9:3b:b6:dd:25:36:a2:dd:42:32:5b:94:c7:c2:f5:
                    b2:f2:ba:92:28:d4:f4:91:20:ad:88:0e:aa:93:08:
                    b1:ab:cc:4f:a7:a0:9f:08:a5:f7:c8:05:9b:57:79:
                    41:bb:2c:e9:e7:01:32:3b:1c:e0:ae:6b:0f:7d:c0:
                    ab:ee:84:a6:17:6b:6c:5b:46:de:7a:7d:4c:d0:15:
                    41:b3:87:ef:32:8c:8a:e3:3c:09:a1:5c:03:d1:0a:
                    15:8e:f5:2d:95:e7:13:f5:4d:70:d5:05:fa:40:a1:
                    2a:dd:4e:1b:5a:45:9d:a5:ec:0e:71:81:00:9b:ef:
                    41:99:6a:4b:74:17:93:ec:ad:1f:29:42:8d:ad:b2:
                    0b:02:80:9d:ab:82:d8:c5:50:f5:7a:7f:31:06:0b:
                    07:f8:4e:27:b7:5d:41:d3:77:56:ba:f2:cf:40:27:
                    a5:3a:31:97:44:52:87:73:2d:cb:b6:fe:e1:2a:f3:
                    0d:d4:8c:1c:76:26:5b:6d:dc:ec:0f:be:52:73:ad:
                    17:59:10:4a:34:68:60:8f:59:6b:60:a1:ae:84:1a:
                    1a:35:69:22:bd:d5:be:07:02:68:2f:87:30:87:38:
                    e7:f9:a0:1d:53:06:56:8c:21:39:0d:4d:ac:04:64:
                    86:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:90:94:4D:F3:D8:D5:C0:45:29:B5:BF:86:C7:52:96:61:FB:03:0F
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/i5CUTfPY1cBFKbW_hsdSlmH7Aw8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.87.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7a:bf:d7:ea:a6:58:a2:fb:df:e1:c0:91:62:ee:a8:f3:ce:db:
         4e:3e:63:cb:85:32:89:86:c2:d3:30:42:70:a8:0b:69:3d:9a:
         87:6e:e5:13:ee:66:7f:41:47:9a:97:ec:e7:ee:2a:2c:17:82:
         a2:cd:62:18:e1:3f:2e:00:14:0c:02:e1:df:62:85:78:5a:f5:
         81:de:3d:a1:83:18:ca:80:b6:35:b2:14:99:b9:69:95:ca:39:
         18:b6:4f:89:45:0b:6a:4b:28:3a:5d:6f:99:a3:c6:7f:35:f4:
         b7:56:c1:c5:15:20:43:86:0e:06:16:b3:61:9d:92:1c:6e:64:
         ea:b2:8a:cc:05:06:fa:40:07:b7:c8:0d:d5:7e:1f:91:ae:01:
         b0:4d:be:83:de:ae:e5:2a:d8:47:94:b0:26:87:8a:77:c0:08:
         03:29:7f:14:6b:9e:eb:df:0a:42:68:bd:b9:6d:fd:a9:82:e1:
         93:c8:89:d5:47:bf:0b:c3:8b:99:c7:8c:07:d1:50:36:b1:a7:
         d5:e1:78:20:8e:21:cc:d2:77:dd:b7:0d:4e:52:3d:ee:71:d6:
         00:25:b1:10:98:56:4d:d8:35:ae:56:bb:4c:94:33:5d:c3:c9:
         1b:32:d8:8d:54:66:33:19:e8:c1:4b:aa:5e:61:a6:d7:50:57:
         7f:ad:3d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org