Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/kLzNXmEJelrQuzSzugAVxZZ13iw.roa
File:                     kLzNXmEJelrQuzSzugAVxZZ13iw.roa (raw, json)
Hash identifier:          x5PIyjj9yrU53vFdhssw6H+JyOjWQ3u7/OqHe9BDmPc=
Subject key identifier:   90:BC:CD:5E:61:09:7A:5A:D0:BB:34:B3:BA:00:15:C5:96:75:DE:2C
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       7E
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/kLzNXmEJelrQuzSzugAVxZZ13iw.roa
Signing time:             Tue 07 Jun 2022 10:11:18 +0000
ROA not before:           Tue 07 Jun 2022 10:11:18 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        106.173.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:11:18 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=90BCCD5E61097A5AD0BB34B3BA0015C59675DE2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a0:23:e1:6b:0a:86:32:83:75:9f:d8:da:53:
                    d3:91:45:19:83:1e:f1:f6:92:24:bb:75:7d:77:c6:
                    af:91:39:e0:ff:15:dc:53:ab:6e:bd:f1:2c:ad:8c:
                    66:e3:7f:0a:ca:c1:e9:0e:af:98:8b:51:1b:02:5e:
                    82:89:03:50:2b:66:f3:05:fe:f3:6b:ba:6a:fd:47:
                    85:59:ed:04:99:80:6d:06:c3:cd:76:ac:94:43:f1:
                    ab:13:83:6b:0d:61:1f:26:3f:b3:cf:59:f5:df:55:
                    2f:be:30:35:4f:1b:b6:ef:e5:aa:30:30:25:da:8d:
                    58:dd:c7:59:56:43:1b:00:82:50:05:cd:dd:56:f2:
                    cd:2a:38:d3:51:3f:cf:85:b4:fd:70:c9:0d:2d:df:
                    0f:79:f4:11:51:71:8d:45:c2:1a:a7:f9:50:3f:57:
                    0a:18:93:d1:61:72:48:70:a8:38:57:99:98:00:8a:
                    4f:20:a4:00:af:c5:64:f0:57:ea:4c:5a:11:d9:8b:
                    4b:00:8e:7d:dd:db:54:55:b0:89:43:c3:7e:bd:d6:
                    22:1f:7c:ca:42:1b:36:62:8b:64:96:1f:3a:99:22:
                    fc:d5:5c:bc:2a:89:97:e1:6a:89:12:2e:c8:33:0b:
                    7e:09:ec:31:43:80:eb:72:a7:41:61:ac:52:a0:68:
                    a1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:BC:CD:5E:61:09:7A:5A:D0:BB:34:B3:BA:00:15:C5:96:75:DE:2C
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/kLzNXmEJelrQuzSzugAVxZZ13iw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.173.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         61:85:79:08:63:98:52:e1:3c:0f:b2:a4:e1:33:a3:28:cc:6e:
         a0:3d:c9:8a:77:20:4e:28:df:be:46:f1:cc:12:64:89:bb:01:
         42:9d:ef:68:e3:56:db:d3:20:02:93:ef:45:32:76:be:a7:16:
         e1:71:b2:ae:28:08:4d:a7:b7:b6:4c:50:44:90:b4:bd:51:3f:
         a4:23:b9:3c:9c:ae:ad:6a:2b:5a:8f:b1:f9:60:7f:42:7c:81:
         a4:71:06:73:9c:24:36:f5:37:b6:4b:8b:be:e8:6f:36:d4:ee:
         89:eb:a1:ba:14:7a:bd:75:2e:28:8f:67:89:a6:05:46:b7:8e:
         50:a5:e8:ed:da:26:26:1e:6c:f7:7c:31:04:42:85:2d:7d:cb:
         23:c2:25:6a:55:af:a9:dd:5d:84:b1:11:69:91:00:92:4c:20:
         90:79:ce:21:39:d5:11:de:b6:0e:3f:2c:ea:b2:2d:c7:45:45:
         3d:5d:b9:24:9e:3b:89:8c:32:a5:14:68:cd:be:c2:33:08:48:
         f0:38:21:34:c6:8c:cc:3f:69:a7:1d:0d:99:bb:3d:32:72:c7:
         fc:df:ef:55:66:88:a9:23:3d:9a:98:1a:75:fc:0f:31:a7:97:
         fb:f3:67:06:69:0f:86:6b:38:7f:e7:f7:3f:f9:40:c7:43:dc:
         dd:68:df:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org