Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/lIqQUvz_vjTqQgQbFQt1Q5CR0AU.roa
File:                     lIqQUvz_vjTqQgQbFQt1Q5CR0AU.roa (raw, json)
Hash identifier:          oPi801offaNcmRtrCMguNB8f1BoLx0VuTz+EtLYBWXo=
Subject key identifier:   94:8A:90:52:FC:FF:BE:34:EA:42:04:1B:15:0B:75:43:90:91:D0:05
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       A0
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/lIqQUvz_vjTqQgQbFQt1Q5CR0AU.roa
Signing time:             Tue 07 Jun 2022 10:21:16 +0000
ROA not before:           Tue 07 Jun 2022 10:21:16 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        222.2.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:21:16 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=948A9052FCFFBE34EA42041B150B75439091D005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:17:6b:09:7d:80:80:ab:04:7c:a8:a8:c2:7f:
                    5d:9e:3b:32:de:d6:53:9f:1c:c4:b6:ab:2e:7e:aa:
                    c2:3d:09:00:5d:e5:a8:69:d8:95:07:85:a3:23:7a:
                    c3:70:61:22:ef:f0:08:d2:04:89:fd:36:ed:2e:0d:
                    58:2c:d3:29:90:22:1c:d2:f2:69:87:05:c8:56:6c:
                    f9:1c:2f:6c:4b:40:7c:06:cc:68:f2:38:c8:0d:12:
                    c5:ef:6e:43:d9:5d:ad:c0:54:f4:35:a1:45:2e:e9:
                    b9:c5:23:8e:e7:4a:67:2d:10:15:68:bf:83:11:72:
                    34:c9:7a:ea:04:14:94:5b:34:40:f4:90:53:a5:35:
                    01:84:ca:72:40:9f:0b:2f:44:0f:9e:c2:e2:25:c3:
                    cb:e6:fc:dc:93:cc:9f:72:5f:ba:9d:39:17:33:cf:
                    aa:52:c3:77:8a:07:75:a5:24:2f:01:4c:07:75:a1:
                    56:96:8d:7c:2c:f9:6e:d9:4e:90:55:7e:ca:ff:9d:
                    46:5d:b1:80:c0:6e:55:bc:6d:99:65:3c:ce:83:f4:
                    e5:5b:a2:b4:a8:4a:88:47:38:80:b0:4c:1c:85:23:
                    bf:8f:de:f7:d6:3f:b3:c7:69:37:71:cc:6b:b2:3d:
                    a7:46:01:f0:e2:3b:29:d2:ca:0c:4b:06:1a:96:d4:
                    d5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:8A:90:52:FC:FF:BE:34:EA:42:04:1B:15:0B:75:43:90:91:D0:05
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/lIqQUvz_vjTqQgQbFQt1Q5CR0AU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.2.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         02:87:5f:0d:25:dd:f4:e9:0b:5f:a8:cd:5e:83:7c:5f:93:f9:
         58:57:1c:ed:55:98:36:05:18:c6:45:86:65:02:ca:90:59:a4:
         60:6d:5a:2b:35:22:e0:b7:68:57:93:d8:28:70:12:bc:26:4a:
         e9:87:35:71:76:69:43:48:44:df:7c:1f:1b:8b:03:40:92:65:
         5f:fb:63:6f:af:d9:9c:25:38:02:54:f1:2e:81:fc:fa:0a:0f:
         89:49:ee:20:60:e6:a9:b9:04:9c:4f:4c:c7:8f:84:bc:3d:4e:
         86:00:a1:bc:65:63:aa:2c:ad:f9:79:9f:71:ce:21:91:b8:50:
         99:db:8a:8b:dd:62:e3:ba:c3:10:65:a7:de:08:e5:ab:ea:50:
         18:df:c0:9f:c7:ab:89:8e:b7:74:53:92:b7:80:3b:6d:49:8c:
         17:cb:0c:49:d8:68:75:f6:ec:0f:82:fe:c6:a7:6a:93:87:c7:
         78:1d:8d:e0:f7:27:9b:aa:00:4f:52:0a:27:2f:67:3f:be:73:
         13:d9:b6:71:a0:82:00:f2:f9:fe:ce:40:b7:fc:51:fe:45:39:
         87:7b:ab:1d:db:f1:ff:a6:4f:eb:1d:45:45:78:a4:53:14:65:
         64:cd:09:7e:30:2a:1a:d5:09:c2:5b:61:68:7f:b6:68:cb:16:
         de:01:38:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org