Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/k4TS11JTsYUwW9FOEY6PErbiKcM.roa
File:                     k4TS11JTsYUwW9FOEY6PErbiKcM.roa (raw, json)
Hash identifier:          Qb/5N/MTHV7VIWx77dkqJ55y43rlUfcgnRAN3/RowSE=
Subject key identifier:   93:84:D2:D7:52:53:B1:85:30:5B:D1:4E:11:8E:8F:12:B6:E2:29:C3
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0132
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/k4TS11JTsYUwW9FOEY6PErbiKcM.roa
Signing time:             Fri 28 Oct 2022 02:31:15 +0000
ROA not before:           Fri 28 Oct 2022 02:31:15 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        218.222.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 306 (0x132)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Oct 28 02:31:15 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=9384D2D75253B185305BD14E118E8F12B6E229C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e7:41:a1:6d:8c:23:9c:68:e3:22:c9:ba:c0:
                    7f:b3:24:63:41:f8:a3:0a:d8:d1:5d:66:a0:ed:71:
                    cb:bc:37:11:31:cd:31:7b:a5:9c:c4:42:c1:92:5a:
                    ff:7a:0d:22:6d:19:70:91:05:ef:fc:82:93:49:a6:
                    b6:e3:ea:7e:9a:5f:9c:23:38:d4:eb:3e:75:04:c5:
                    b3:96:0e:29:fb:50:19:05:b6:b8:c6:ae:1d:50:fd:
                    85:b9:01:82:f9:f7:51:91:a1:6e:8d:46:f9:ac:e8:
                    8c:8a:f5:5c:36:5c:3d:bf:a6:28:df:ad:36:72:d2:
                    37:12:38:4c:82:e1:1f:99:cd:bf:04:d8:b3:2f:73:
                    73:62:ce:fc:fb:5e:48:6e:c6:3e:4b:fe:a1:5a:8a:
                    47:0e:92:12:7c:17:01:30:cc:4a:33:7c:31:71:a2:
                    43:29:db:c5:ff:46:4b:ae:75:23:34:c0:d7:12:92:
                    67:16:67:57:6e:c6:f3:f4:3b:b6:37:30:4a:b6:64:
                    01:14:5e:14:2b:2c:11:43:d0:f5:fd:f7:54:3d:ea:
                    22:ab:1b:a1:32:34:67:3e:d8:4e:17:6a:60:9d:b9:
                    6c:13:9b:7e:5a:21:31:91:25:53:a8:9d:2d:37:76:
                    3d:85:b8:83:32:4c:0b:ad:2f:ce:68:ac:e8:92:7e:
                    e0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:84:D2:D7:52:53:B1:85:30:5B:D1:4E:11:8E:8F:12:B6:E2:29:C3
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/k4TS11JTsYUwW9FOEY6PErbiKcM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.222.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         76:e0:f3:67:5d:7f:31:be:ea:cc:f3:80:2b:87:85:98:cf:d1:
         c3:9d:cc:22:bf:30:66:0a:71:2a:22:10:5c:11:ce:85:cc:48:
         39:25:50:91:41:c9:bb:7c:4d:c2:20:1d:77:65:6b:38:23:bb:
         c9:f8:be:16:01:e3:69:a2:df:7d:df:39:39:81:d5:f9:5e:e8:
         e2:cd:e0:b6:b7:ef:e2:a7:b8:d1:37:4d:15:20:09:ca:7d:96:
         a9:b6:57:c0:66:4b:d7:d8:f0:bf:2a:93:0b:ae:0d:11:88:52:
         57:b7:e3:7f:41:a2:cb:7b:eb:21:9f:ce:de:89:eb:2f:f5:99:
         a3:31:23:3b:72:8e:65:ec:3d:a6:eb:c7:4b:85:3b:78:6e:66:
         a3:b6:ff:b3:0c:23:45:4c:4f:4b:e6:c7:79:39:95:8f:00:45:
         0d:05:d3:bd:ea:3d:d8:4c:bf:2b:e6:0c:2b:06:05:e8:1b:b4:
         5e:07:dc:36:16:01:64:88:4c:25:dc:87:f4:aa:d6:9c:8c:3c:
         6a:16:25:12:a6:80:96:6e:89:f1:eb:d7:2b:8f:ea:1b:87:76:
         c1:f7:4f:58:48:cf:05:46:26:54:a9:b4:2d:90:16:86:d3:c0:
         c3:f1:27:a7:05:54:59:fb:b7:38:03:cd:43:ce:74:8f:dd:34:
         a6:c6:2b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org