Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/jX-anbBsCoAKqxEVwa4tzIOF2yk.roa
File:                     jX-anbBsCoAKqxEVwa4tzIOF2yk.roa (raw, json)
Hash identifier:          xhVl/aaiXGdwgfXgZJ397rzPFnJIfBSmKhlSX2WpHX4=
Subject key identifier:   8D:7F:9A:9D:B0:6C:0A:80:0A:AB:11:15:C1:AE:2D:CC:83:85:DB:29
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0129
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/jX-anbBsCoAKqxEVwa4tzIOF2yk.roa
Signing time:             Tue 25 Oct 2022 09:26:25 +0000
ROA not before:           Tue 25 Oct 2022 09:26:25 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        210.196.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 297 (0x129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Oct 25 09:26:25 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=8D7F9A9DB06C0A800AAB1115C1AE2DCC8385DB29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ab:81:65:2a:41:62:b8:d6:9d:78:8e:6f:e3:
                    25:f1:e6:64:9c:e6:a6:3d:14:69:b7:8c:ad:a9:cf:
                    3b:94:d7:7e:0b:39:97:31:ed:7c:80:4b:00:4a:ea:
                    e2:3b:7d:75:89:91:a2:15:a5:20:4b:55:c8:26:85:
                    36:89:3d:b3:e2:30:4e:f3:39:55:bb:1f:fb:f8:44:
                    15:4f:19:f1:2a:1d:1e:fb:b5:6b:83:af:f7:81:c2:
                    3d:90:4d:9a:02:61:5d:82:1e:f5:35:5d:96:4a:a2:
                    f1:46:3a:7d:c0:45:da:5a:7a:80:9e:c2:6c:e0:11:
                    2e:75:2d:7a:fe:4c:d3:fe:9e:06:86:3b:8e:13:6f:
                    9e:cc:1d:cc:3c:c7:b7:04:c7:8b:3e:29:ca:e4:44:
                    90:d0:12:8e:de:40:f4:1d:a5:b7:64:fd:5f:b1:87:
                    8a:12:75:19:38:4e:b4:4d:5c:5b:27:ee:f3:89:1c:
                    0b:55:15:01:a8:e3:55:67:80:bd:c3:3e:4d:58:af:
                    ed:cf:94:94:1c:fd:37:3e:ed:c7:46:e0:f9:cd:4a:
                    35:82:33:14:f2:59:73:ab:a0:8b:99:d8:d7:29:34:
                    03:82:06:6b:15:e4:63:55:de:29:59:b3:74:5d:a9:
                    ce:8a:86:54:2f:6f:b1:89:31:12:05:b4:7e:27:01:
                    92:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:7F:9A:9D:B0:6C:0A:80:0A:AB:11:15:C1:AE:2D:CC:83:85:DB:29
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/jX-anbBsCoAKqxEVwa4tzIOF2yk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.196.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a6:b9:29:1c:3b:a3:6a:c3:97:c6:32:0f:0f:ce:cd:c8:03:9f:
         da:6f:b1:0d:00:cc:9e:9a:81:ad:5b:24:a2:21:ed:70:c8:d7:
         e1:cf:ef:98:3c:de:8c:bc:32:58:f0:2e:39:64:a6:c3:80:95:
         b3:91:86:cb:26:e1:3c:8e:30:50:b1:63:ee:f7:76:b6:6a:e7:
         87:2d:3b:92:89:05:39:b4:45:68:a3:1d:3a:94:5a:5c:29:79:
         8c:8e:b8:3d:a0:83:d0:5c:92:52:7d:c1:bf:85:3d:56:3c:67:
         54:ab:52:56:1e:38:b1:7f:42:bd:d4:b0:b6:26:84:2f:08:cc:
         08:70:ba:b9:47:eb:3f:28:5e:de:fd:24:c1:6b:cb:b2:04:3d:
         21:c1:82:7e:10:0b:2a:6e:12:d2:b6:7e:be:9e:d6:5e:6c:a1:
         8a:88:aa:98:c5:32:f8:c4:f4:1e:5c:ba:e0:82:10:e9:1b:65:
         a2:b3:0c:12:5f:84:18:49:92:36:3b:45:90:9f:13:69:3f:25:
         20:de:81:5d:0f:7b:7c:03:ca:ee:21:94:fd:06:f9:5d:b1:bf:
         27:37:ac:27:d0:c2:f8:b8:2f:32:49:75:f5:79:d4:56:ef:72:
         09:fe:1e:35:96:c9:6c:9f:f3:2c:6f:25:44:70:87:7e:54:41:
         3d:70:4c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org