Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/jPuiUxZJfk2AQYTM8gNuI8zx0vM.roa
File:                     jPuiUxZJfk2AQYTM8gNuI8zx0vM.roa (raw, json)
Hash identifier:          +QqCLI7vzT+TaqkI5sEQrOS3pi/V/wkieIRoJB6u/30=
Subject key identifier:   8C:FB:A2:53:16:49:7E:4D:80:41:84:CC:F2:03:6E:23:CC:F1:D2:F3
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       70
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/jPuiUxZJfk2AQYTM8gNuI8zx0vM.roa
Signing time:             Tue 07 Jun 2022 10:07:18 +0000
ROA not before:           Tue 07 Jun 2022 10:07:18 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        121.108.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:07:18 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=8CFBA25316497E4D804184CCF2036E23CCF1D2F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b0:96:c6:36:70:c4:80:f6:38:69:72:1b:e6:
                    db:9c:e5:1f:ae:f3:b9:af:d9:75:e3:ae:d4:1c:ef:
                    74:41:bc:2b:bc:36:c0:f2:8a:02:52:08:87:d9:7c:
                    00:51:aa:bb:f6:1c:cf:e2:f2:99:8f:73:43:47:06:
                    16:17:d3:4c:4c:05:91:a0:66:59:5e:c4:b8:41:c6:
                    15:2b:3a:c0:ba:1a:79:b9:57:16:ab:f5:6b:33:4c:
                    23:db:49:27:b5:e4:a4:5e:1f:e5:ad:ea:bc:78:50:
                    1e:f1:6a:61:2c:2b:d0:a9:3d:7b:39:9f:22:d5:75:
                    1f:aa:3e:24:f7:47:94:14:52:ac:3b:7e:45:b6:c5:
                    55:5c:44:27:c3:b2:12:07:91:96:1c:70:b8:da:e5:
                    08:77:cf:41:f7:d5:cd:a4:f9:49:6c:15:f9:b9:ae:
                    b9:ae:ae:0e:a9:1b:7e:ed:e5:41:8e:d5:83:41:a4:
                    c8:e0:88:b0:3f:ad:09:7a:46:82:63:4b:4b:38:31:
                    6d:8f:e2:c0:46:2e:0a:cf:da:f0:ad:c1:fb:68:c2:
                    8a:49:50:b2:2d:a1:95:c5:fd:c8:aa:7e:b1:a6:44:
                    f5:0f:46:25:e5:57:4b:ad:47:35:8c:d2:e7:6c:d5:
                    00:f3:11:15:5e:63:84:0c:2b:74:df:43:b8:49:27:
                    89:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:FB:A2:53:16:49:7E:4D:80:41:84:CC:F2:03:6E:23:CC:F1:D2:F3
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/jPuiUxZJfk2AQYTM8gNuI8zx0vM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.108.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8e:6e:6a:e4:57:a3:20:5e:53:19:40:70:57:53:a2:c3:34:2a:
         ca:2d:db:60:aa:62:f3:2b:5b:04:60:17:ba:f2:91:7e:df:48:
         74:6c:cb:5a:d7:c2:08:49:40:a5:39:fa:e0:b2:67:97:f8:23:
         3f:ec:ba:44:9f:5e:f2:d8:00:d6:b7:4a:e7:fa:64:0c:fe:89:
         58:68:ca:b8:b2:e6:d0:37:97:fa:46:4e:b9:8c:63:50:16:6c:
         0b:4e:88:f3:27:28:09:f4:56:a3:16:b8:0f:b0:43:d4:ad:89:
         10:06:fb:9b:64:fc:48:f3:7c:03:db:b1:dd:1a:06:25:70:ba:
         75:bb:b4:30:88:b6:e1:f5:b2:e1:bb:87:a6:39:e7:97:f0:90:
         6c:e6:34:7e:88:c1:4c:1c:60:cc:5e:b2:89:01:fd:f2:2f:a3:
         0a:96:c3:c9:aa:07:77:c3:1e:a0:65:f5:66:72:f2:c3:5a:4e:
         d9:4b:4f:e8:94:bd:1d:e7:08:b3:be:52:7f:2c:8b:e4:cf:60:
         84:59:df:37:ff:bb:00:05:80:46:24:7c:33:9b:78:d5:8e:3b:
         8a:31:71:7e:ca:7a:96:76:fc:c9:34:73:47:28:fa:1d:6f:de:
         02:01:5b:ea:11:0b:e7:cf:3c:18:ab:d6:65:fd:45:32:87:34:
         93:f8:83:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org