Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/lQZ9aUc0W7M92uSLUVERmv7m7yA.roa
File:                     lQZ9aUc0W7M92uSLUVERmv7m7yA.roa (raw, json)
Hash identifier:          x4X/KNIDwuAqrMvE4feXSQerJnFqnOsBAx5LZFVBgWU=
Subject key identifier:   95:06:7D:69:47:34:5B:B3:3D:DA:E4:8B:51:51:11:9A:FE:E6:EF:20
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0227
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/lQZ9aUc0W7M92uSLUVERmv7m7yA.roa
Signing time:             Mon 01 May 2023 01:37:57 +0000
ROA not before:           Mon 01 May 2023 01:37:57 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        210.239.96.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 551 (0x227)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:37:57 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=95067D6947345BB33DDAE48B5151119AFEE6EF20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ce:c5:4b:d3:8c:e4:b6:c0:42:71:8f:dd:f6:
                    5c:38:21:9a:1f:70:b6:0b:2c:6a:e5:b3:9e:08:1c:
                    dc:79:64:19:ab:5c:2b:2b:b4:ae:64:08:f6:1e:07:
                    a9:61:ed:2f:f2:46:57:13:21:1c:d2:c9:97:05:93:
                    db:b0:92:b1:07:51:89:4d:9a:ab:9d:45:6c:0c:7f:
                    3b:dd:17:73:6f:3e:15:6a:9f:e8:9c:c0:e7:10:58:
                    6b:15:48:0b:fc:d3:d5:d5:c2:c1:43:43:4c:3d:49:
                    2b:85:1a:55:1d:99:52:b2:73:9a:28:1d:af:5d:03:
                    e1:84:91:25:36:23:81:91:a9:f4:13:3a:d7:1f:73:
                    fc:09:cc:01:88:74:ac:19:9f:0b:ba:50:39:c2:9a:
                    a5:ea:7f:6e:db:11:9b:69:10:bc:2e:db:8b:cf:9e:
                    e8:de:30:30:58:93:f8:a0:3d:fe:f8:a9:7a:96:20:
                    c5:a9:3e:18:14:b0:d6:ed:c7:c6:1a:ac:61:ce:42:
                    e6:4c:64:a5:b5:f1:26:07:3e:33:24:72:06:80:c3:
                    e5:2f:1d:d6:75:76:f7:40:82:df:6a:72:04:82:45:
                    22:0b:b6:13:52:25:d4:1c:3b:64:fb:98:f3:13:43:
                    35:57:c1:28:e0:63:1f:ff:0c:d5:e6:f2:56:6f:3c:
                    76:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:06:7D:69:47:34:5B:B3:3D:DA:E4:8B:51:51:11:9A:FE:E6:EF:20
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/lQZ9aUc0W7M92uSLUVERmv7m7yA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.239.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9a:81:3b:98:af:46:78:6d:9c:b6:38:30:41:74:67:e3:a0:96:
         8d:00:93:a3:cf:d2:d7:74:ab:a1:82:0d:2d:8c:64:9d:86:b9:
         7a:f0:c1:2f:34:43:bf:78:9f:08:9f:c4:72:9b:96:e6:08:e9:
         0d:c0:63:c0:5c:eb:d4:56:16:e5:d2:a1:aa:67:5d:08:cb:ad:
         ba:fe:13:f6:9e:a1:18:04:d5:ec:eb:9f:39:50:54:ca:37:0f:
         00:99:0a:9d:4c:b1:fc:ef:ed:e5:10:fa:8f:06:1d:26:31:77:
         13:c8:09:56:c9:7f:c3:dc:27:58:a0:e3:4b:0d:ef:20:02:b0:
         1a:d4:fc:5d:47:62:05:b7:b7:97:c2:73:88:d5:47:80:d9:24:
         41:45:a1:92:ac:5c:ca:63:bf:a2:74:4a:e9:6a:16:25:ba:5b:
         fe:19:d4:7c:5b:58:95:b4:29:db:9a:b5:f9:c2:ce:77:06:27:
         12:ab:b3:67:78:13:c7:c2:86:d9:dd:19:48:ba:d2:9b:be:84:
         40:0e:d6:9e:54:6e:eb:05:fa:21:af:b2:03:29:13:40:38:ef:
         da:2d:33:20:f9:8d:c2:55:d0:0f:b7:8c:70:ed:d0:ba:37:99:
         dd:a9:48:06:92:ea:68:82:4e:44:0d:68:d4:2a:23:a0:77:76:
         41:6a:21:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org