Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/jjwTBKZNFj0DEdkm8IVafYRWb4Y.roa
File:                     jjwTBKZNFj0DEdkm8IVafYRWb4Y.roa (raw, json)
Hash identifier:          9v7MYVI/UybSt6gV3vHP5waccFVuLx6vSStV8xa8YMA=
Subject key identifier:   8E:3C:13:04:A6:4D:16:3D:03:11:D9:26:F0:85:5A:7D:84:56:6F:86
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       020C
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/jjwTBKZNFj0DEdkm8IVafYRWb4Y.roa
Signing time:             Mon 01 May 2023 01:35:49 +0000
ROA not before:           Mon 01 May 2023 01:35:49 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        59.128.64.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 524 (0x20c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:35:49 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=8E3C1304A64D163D0311D926F0855A7D84566F86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9f:ef:f3:7b:52:23:40:28:31:75:d5:34:a4:
                    27:8e:d7:8f:c3:9c:15:b3:b0:de:f9:df:03:8a:a6:
                    20:cf:9c:52:1b:e8:21:60:c4:c1:8a:de:bb:ef:3b:
                    50:1e:b2:c7:39:76:42:83:58:f5:f4:e7:8f:b4:17:
                    46:3d:13:39:86:d6:70:49:a8:41:8b:a6:08:ea:56:
                    4d:36:e1:26:c3:02:8e:85:db:a2:a7:f0:ef:4a:a5:
                    17:ec:e9:72:5f:69:73:88:7d:e4:00:40:6e:4e:99:
                    a9:ba:33:0b:c8:61:df:ca:d2:f7:c9:65:56:47:66:
                    66:b3:e1:9d:0d:9e:e4:72:7c:85:21:e6:2e:24:88:
                    5b:5f:c9:c2:e5:00:de:3a:33:20:85:f9:f0:ba:ae:
                    44:8e:5e:94:a4:d5:39:27:b7:0a:dc:30:70:d7:02:
                    c0:8c:87:96:be:4b:a1:96:27:ac:23:a3:b7:97:c6:
                    a2:83:36:af:ed:e7:0f:19:bc:d9:4e:e0:b7:d3:9c:
                    9c:b2:e1:e5:c1:fa:87:ae:85:c0:e3:f3:48:bc:23:
                    c1:e9:09:0b:83:25:91:80:5e:87:e4:52:99:ba:e8:
                    03:3f:bc:98:04:50:22:e7:b9:3f:4f:a6:27:7e:5a:
                    9c:8c:b3:b5:67:4b:79:ab:da:a4:06:68:08:e0:a5:
                    3a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:3C:13:04:A6:4D:16:3D:03:11:D9:26:F0:85:5A:7D:84:56:6F:86
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/jjwTBKZNFj0DEdkm8IVafYRWb4Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.128.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         85:74:a6:99:b5:64:38:bb:7b:59:05:02:b7:eb:af:8b:01:76:
         1a:e3:ea:1d:b5:b4:e1:91:9b:4a:b9:47:14:d9:69:d1:e3:52:
         b7:93:16:da:de:0b:6a:65:67:38:8c:56:5f:dc:a1:62:ad:41:
         5d:8e:58:ca:a1:43:14:80:8c:c1:8d:68:d3:5a:28:46:a1:35:
         2a:d5:94:03:27:ba:f0:9c:1b:0d:85:2f:bf:8c:fc:db:d5:80:
         bf:52:b6:21:46:4e:14:55:9b:79:f8:d1:40:c7:9f:c5:cd:a4:
         e0:83:1f:65:de:ab:ca:27:5c:59:39:93:8e:96:83:fc:f6:6c:
         12:45:12:4c:9f:d4:fa:4b:bd:01:ad:42:6e:03:59:ae:76:ef:
         48:d3:54:58:70:e4:2b:94:d3:96:75:5f:44:1d:ff:0b:f9:33:
         5d:ed:b6:50:60:54:a5:0a:98:1b:12:b1:31:8b:ea:41:73:c9:
         75:2a:40:e2:90:bb:84:a3:7f:7c:68:a8:cc:fa:05:bd:c5:29:
         7d:72:71:96:a3:09:a4:bc:7f:60:07:38:e1:a1:33:7f:63:f3:
         7e:58:11:cd:74:ae:c3:b7:4c:8f:11:e7:18:a7:82:5a:3f:82:
         16:09:63:99:c9:bd:9e:e5:65:7a:6f:4f:ad:28:21:ce:ae:a0:
         d4:c8:d4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org