Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/jIIxT13Jh4j4G44WpeeWP0yllIY.roa
File:                     jIIxT13Jh4j4G44WpeeWP0yllIY.roa (raw, json)
Hash identifier:          auTGjIiRenQh1BzmmGkj2+mrpINfTrUVSyHFZ2YCMik=
Subject key identifier:   8C:82:31:4F:5D:C9:87:88:F8:1B:8E:16:A5:E7:96:3F:4C:A5:94:86
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       020D
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/jIIxT13Jh4j4G44WpeeWP0yllIY.roa
Signing time:             Mon 01 May 2023 01:35:50 +0000
ROA not before:           Mon 01 May 2023 01:35:50 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        114.22.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 525 (0x20d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:35:50 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=8C82314F5DC98788F81B8E16A5E7963F4CA59486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:77:fc:df:89:e0:90:ee:8a:77:1b:29:bd:2e:
                    ad:54:2a:67:e1:a8:a9:b0:47:37:7b:0a:f2:8c:3c:
                    06:1b:6b:3b:6e:7c:0b:57:50:32:56:02:1e:26:79:
                    85:2f:27:4c:5a:4c:5a:77:ee:cf:23:94:0b:0c:73:
                    28:1c:6e:21:3c:c8:8f:59:ab:8e:ce:61:e6:af:0c:
                    d9:3a:ae:8a:44:50:02:b1:06:4e:34:e7:03:68:49:
                    4c:03:5c:1a:75:9a:d2:cb:51:de:26:b5:28:1c:3b:
                    c2:eb:aa:cd:f1:f8:29:95:f2:ea:a2:c0:73:ef:db:
                    e0:94:16:ef:7b:43:69:a2:08:79:50:d0:91:63:fe:
                    6a:d7:b3:ad:f9:f6:b6:36:2c:f2:72:5b:a7:a6:13:
                    00:dd:ee:a2:21:e3:78:b2:d9:f8:5e:bc:35:86:35:
                    bc:45:af:8b:24:91:02:f1:69:e6:74:72:ac:10:d1:
                    42:30:99:cf:22:6d:3d:8a:64:e5:17:ba:36:e1:21:
                    fd:fc:32:ce:94:11:ef:a7:ec:20:fb:1c:c0:f2:01:
                    81:9b:13:99:dd:b4:f2:f8:03:30:ec:7f:32:d7:4d:
                    c0:ae:a2:ef:06:3b:aa:2d:13:3f:df:62:0a:fe:3f:
                    fa:45:97:14:cb:99:3d:f8:94:19:be:a6:1d:70:e0:
                    4a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:82:31:4F:5D:C9:87:88:F8:1B:8E:16:A5:E7:96:3F:4C:A5:94:86
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/jIIxT13Jh4j4G44WpeeWP0yllIY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.22.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ad:73:02:b6:99:5b:74:9a:27:14:fd:96:5a:b2:70:0f:fb:61:
         f6:64:24:e1:97:1a:89:34:44:f0:9e:9f:3d:92:f3:43:30:31:
         25:b4:b0:79:92:6e:e4:6f:c5:37:31:91:4b:bc:62:43:de:4d:
         88:f1:2c:6d:a3:4b:05:84:f8:b3:2a:02:09:0a:9d:ee:06:9b:
         72:0f:d3:a9:fb:a6:db:ac:f4:8e:e2:8b:41:ff:38:04:84:e4:
         5f:a2:96:8c:9e:5e:08:39:b6:be:a5:c7:da:3c:f7:e0:fa:b6:
         f0:9e:86:8e:dc:0f:06:f0:8b:84:63:4f:16:fc:03:5b:ca:29:
         19:a6:1f:08:3e:cd:9b:a3:bc:b7:c0:c6:31:6e:95:cd:dd:03:
         c6:f7:ac:a4:c4:47:5e:5a:97:cf:03:f8:38:a8:ee:e3:a0:51:
         6a:6e:3b:2d:d2:71:15:a4:a1:0c:1c:1a:af:96:90:0a:89:72:
         ff:35:68:1d:18:d1:1f:10:c7:81:81:8c:19:9b:b5:da:16:c9:
         f2:7f:94:bd:38:b3:f3:48:97:03:36:2a:db:81:d3:bd:0f:86:
         a0:52:0b:c5:af:8e:98:88:14:d8:27:ec:a4:3b:46:8b:78:13:
         08:47:ea:d3:95:9d:4f:92:fa:4d:42:6c:8b:c2:ce:f5:e7:85:
         40:f9:53:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org