Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/lHPbS4r3aDrXyLJyhGoBEGO8HJE.roa
File:                     lHPbS4r3aDrXyLJyhGoBEGO8HJE.roa (raw, json)
Hash identifier:          TooU1bCXR17mpPAfkkNP5iYYDUCuCRN6cz3hSEqSru8=
Subject key identifier:   94:73:DB:4B:8A:F7:68:3A:D7:C8:B2:72:84:6A:01:10:63:BC:1C:91
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0239
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/lHPbS4r3aDrXyLJyhGoBEGO8HJE.roa
Signing time:             Mon 01 May 2023 01:39:38 +0000
ROA not before:           Mon 01 May 2023 01:39:38 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        106.184.192.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 569 (0x239)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:39:38 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=9473DB4B8AF7683AD7C8B272846A011063BC1C91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:12:b5:1e:c0:8e:ef:90:50:92:1d:0f:ca:9f:
                    91:4c:04:2b:5f:26:3f:98:f7:35:fa:0e:11:c5:d1:
                    f4:e8:cc:33:26:3a:74:ab:82:cd:2b:68:12:2d:7e:
                    1d:ee:0c:f3:c0:b8:c2:32:46:36:46:d4:94:a3:a9:
                    b6:ab:41:d9:3e:d5:38:ba:e0:53:69:35:5c:50:a9:
                    f1:6b:a1:2e:a2:5a:b1:85:8b:65:20:8e:ee:7e:37:
                    76:c6:f1:cf:f7:58:44:ad:d8:24:9e:c4:49:26:49:
                    a3:df:d4:45:a3:3a:32:21:c2:a0:ff:33:72:5a:2e:
                    53:ec:d0:88:cf:41:0e:48:13:ff:03:fb:c2:2d:22:
                    88:0f:83:c9:91:c6:fc:8d:3b:c9:f6:1a:0d:92:ff:
                    10:a4:92:55:0d:37:30:9a:3b:52:ed:ee:29:2a:30:
                    e2:0d:4c:6d:06:5a:cf:1c:1d:67:21:a9:53:60:dd:
                    6d:ee:e0:e7:ef:d0:0c:07:f2:31:83:60:da:93:72:
                    ad:59:7c:39:b2:7d:35:ef:15:a3:9c:17:18:20:69:
                    6a:78:8b:a5:80:54:92:4c:38:45:a9:07:f0:82:87:
                    54:bb:28:ad:b8:9e:62:31:ae:bd:2b:05:89:8a:7b:
                    a4:07:15:d8:a7:f9:ff:08:79:47:00:cd:c4:8e:7f:
                    e0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:73:DB:4B:8A:F7:68:3A:D7:C8:B2:72:84:6A:01:10:63:BC:1C:91
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/lHPbS4r3aDrXyLJyhGoBEGO8HJE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.184.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b0:1f:9f:57:17:18:23:27:59:ad:17:06:cc:90:52:f1:f3:d4:
         58:ec:0b:9d:4c:f3:9a:93:03:50:05:8e:69:5c:17:0c:8c:7e:
         fe:af:fd:e9:b9:52:ab:29:d2:62:03:9e:a7:d3:41:c9:24:c9:
         39:b8:49:6c:ba:07:64:53:d3:62:f4:35:28:0a:6c:a7:76:de:
         00:ee:d4:06:d9:e6:99:89:51:24:b0:67:c6:3f:4f:2f:ac:52:
         a4:20:f6:1d:a0:76:f1:3d:39:fc:0e:64:aa:ff:e5:36:f8:e6:
         cd:6b:45:50:c3:cb:8f:73:60:62:fd:37:42:c9:5a:d6:bb:06:
         c6:ce:f3:8c:cd:48:6b:a2:55:61:44:88:cf:74:b2:41:14:72:
         34:f7:b1:20:1b:12:cc:71:8e:e4:7d:52:a8:a7:eb:f9:d0:ee:
         e5:0b:2e:d2:f0:1b:55:65:b3:b8:6c:fe:fd:c7:aa:f5:5e:8b:
         e9:0f:9a:03:d5:1b:12:d4:79:fb:16:87:1c:7f:4a:54:86:df:
         42:6b:b7:c0:f7:66:af:70:f6:88:53:5a:d5:00:7a:44:da:99:
         bd:00:38:71:c1:7c:c1:c1:5e:5d:3f:0c:64:03:83:74:d6:ac:
         19:0c:e1:07:91:6c:7a:2b:8f:99:06:8a:f5:1f:cf:2e:c4:61:
         9b:97:46:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org