Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/m-4sprvuA-eKB8PuwJPuImzVgyQ.roa
File:                     m-4sprvuA-eKB8PuwJPuImzVgyQ.roa (raw, json)
Hash identifier:          ZtiyGfCyVTw36A6YjSD+rI48dQf5s9iM1jd0piqrOzU=
Subject key identifier:   9B:EE:2C:A6:BB:EE:03:E7:8A:07:C3:EE:C0:93:EE:22:6C:D5:83:24
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       EE
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/m-4sprvuA-eKB8PuwJPuImzVgyQ.roa
Signing time:             Tue 14 Jun 2022 09:34:01 +0000
ROA not before:           Tue 14 Jun 2022 09:34:01 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        119.104.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 238 (0xee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun 14 09:34:01 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=9BEE2CA6BBEE03E78A07C3EEC093EE226CD58324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a9:15:c6:45:eb:28:57:06:86:fa:e0:49:7c:
                    e4:f5:f3:d3:51:0a:e6:21:6c:f5:25:d9:da:1b:fa:
                    c5:e0:83:33:e1:a6:32:4d:f7:48:6d:4c:3b:d6:fd:
                    36:7d:e7:06:f9:5f:26:59:d8:9c:8a:ec:56:7f:27:
                    50:5f:af:94:68:f9:ac:15:d0:16:63:3a:c8:b5:dd:
                    fe:a7:60:07:ff:a4:51:3d:8f:5d:c7:8d:cd:22:b8:
                    85:55:2f:f7:39:94:e3:03:92:63:03:5b:d9:23:ae:
                    fd:a4:59:94:bf:97:1b:2d:78:40:37:0b:c2:70:84:
                    b7:1a:9d:6c:c7:60:b8:c3:1a:a0:37:b5:dc:92:73:
                    fa:5d:45:4e:ef:2f:27:4b:29:0d:4d:52:ae:bc:c3:
                    70:41:a8:e6:fb:4c:d7:39:af:4a:ea:96:e5:90:99:
                    be:f2:5e:dc:0c:69:2a:3a:fd:99:17:10:eb:43:1a:
                    54:d0:1a:0b:7f:cf:87:55:fa:c9:f6:ad:e5:8b:b8:
                    07:d7:d6:66:84:f0:ee:40:47:e4:d8:c9:26:dd:a2:
                    ab:ce:60:7a:29:a2:d6:29:f2:90:5c:36:fb:a1:46:
                    a3:20:bc:c9:f4:77:39:f4:44:25:f3:d6:10:3d:14:
                    55:69:52:0d:df:5c:5d:58:69:50:02:0e:ac:f7:b1:
                    c3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:EE:2C:A6:BB:EE:03:E7:8A:07:C3:EE:C0:93:EE:22:6C:D5:83:24
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/m-4sprvuA-eKB8PuwJPuImzVgyQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.104.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9b:5c:14:d4:a8:85:02:45:da:49:ec:8d:5a:59:db:35:b5:34:
         ef:20:f3:ee:a1:aa:ec:e1:7c:7f:f6:91:a1:36:2f:24:5c:de:
         2b:fd:52:51:90:0f:30:82:56:47:c9:8d:79:d8:de:3b:45:80:
         ff:e3:ed:a1:7d:85:75:dc:b7:06:a3:17:d6:d9:23:03:c5:37:
         50:a9:2d:de:4d:f6:be:82:0d:7a:de:4f:58:59:b3:a2:84:cf:
         d8:7e:0f:e8:d2:f4:80:7b:49:c2:38:ca:4c:1e:d5:ce:e9:db:
         ea:1a:93:aa:3c:43:ce:61:08:45:f7:84:fe:54:ca:6f:fc:9a:
         c5:38:6a:58:71:61:fe:22:ba:65:5c:3c:f0:0d:f2:3d:e3:9d:
         6f:fb:ab:71:06:33:91:8e:79:bf:24:8d:f3:85:c6:92:a3:35:
         7b:ee:c1:dd:5a:80:0b:09:47:a7:06:d5:12:74:d9:82:a0:e9:
         fc:e9:74:48:70:7e:5c:7f:9a:ad:37:a6:2c:4d:e3:0b:77:a2:
         9e:9f:e4:3c:03:8d:51:df:e2:9f:3e:70:cd:2d:74:30:62:eb:
         7f:ce:4d:7f:f1:3b:9a:3c:b8:6d:e3:5c:e4:92:60:3c:61:4c:
         3e:ad:fb:f8:ad:4f:31:3a:85:1b:05:8e:77:3e:4c:77:8f:1f:
         6b:30:b1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org