Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/m8jnHYR7f2994qkpn35I4jcc8dA.roa
File:                     m8jnHYR7f2994qkpn35I4jcc8dA.roa (raw, json)
Hash identifier:          xsWFy1A0QD1U99xXJROZVTRMeVFUdAd9CfZxwrh+QWE=
Subject key identifier:   9B:C8:E7:1D:84:7B:7F:6F:7D:E2:A9:29:9F:7E:48:E2:37:1C:F1:D0
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0218
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/m8jnHYR7f2994qkpn35I4jcc8dA.roa
Signing time:             Mon 01 May 2023 01:37:50 +0000
ROA not before:           Mon 01 May 2023 01:37:50 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        106.164.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 536 (0x218)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:37:50 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=9BC8E71D847B7F6F7DE2A9299F7E48E2371CF1D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ce:7a:a4:bf:71:d5:6b:ff:13:4b:69:82:62:
                    ec:40:43:ad:fd:b7:4e:1b:37:ec:41:67:93:df:c3:
                    9f:1f:84:34:61:93:c2:20:1f:02:75:c1:ba:d8:a1:
                    eb:65:44:b0:93:c1:df:1f:56:ce:e9:f5:25:82:4b:
                    91:dc:26:82:af:6e:6a:c4:99:5d:3e:86:57:a5:bf:
                    7b:e9:66:9c:83:29:9b:05:21:49:26:2e:6f:14:65:
                    7a:3e:48:56:e9:7c:51:2f:17:3a:87:59:bb:99:e1:
                    bf:9f:82:ed:96:ed:dd:03:5a:a5:67:09:fa:b1:bb:
                    0f:6e:90:0b:df:7f:0f:56:9d:08:65:8d:70:7a:b3:
                    9c:0c:6e:06:8a:0a:c8:c3:e0:1a:88:ad:d7:97:47:
                    f1:fe:46:64:0e:0a:02:b3:8f:e1:5b:59:65:f8:f0:
                    4e:37:06:d6:f1:dd:9b:a1:ab:01:4d:34:d8:17:9d:
                    80:ad:11:48:71:0a:d5:57:b2:fb:20:d5:2a:3a:7b:
                    10:58:a3:d6:a2:56:aa:cb:92:8f:f0:f6:62:cf:61:
                    67:d2:1e:c8:1b:98:08:24:53:d0:bb:d5:fb:fb:06:
                    64:64:34:de:ac:eb:57:bc:6a:16:70:f0:d7:60:78:
                    c0:95:75:e8:db:b4:a0:1c:d0:c0:b8:5d:ed:18:f8:
                    e4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C8:E7:1D:84:7B:7F:6F:7D:E2:A9:29:9F:7E:48:E2:37:1C:F1:D0
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/m8jnHYR7f2994qkpn35I4jcc8dA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.164.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         36:0f:1a:34:cb:41:1d:96:e9:f0:a3:c6:b9:54:a3:e7:05:9d:
         09:3f:a9:2d:bc:34:4a:76:62:6c:37:46:3a:82:24:e4:ee:5f:
         9f:3f:3b:96:57:2a:56:3d:44:2e:a0:35:d4:11:1f:de:e0:84:
         51:63:96:08:ea:12:57:89:c4:63:86:7d:38:99:59:cb:2a:eb:
         47:a9:ec:13:e7:04:18:d0:dc:01:a1:d8:e6:d7:bb:70:cf:35:
         d6:40:67:bb:3a:66:6e:e6:16:89:e5:f0:70:03:03:48:82:3c:
         12:7f:38:79:1b:38:34:fd:c6:a3:65:4d:15:6b:d1:50:f5:e1:
         1a:69:97:1f:b9:29:e1:1a:2a:05:a4:e6:b7:19:81:d6:e5:0c:
         1c:72:04:9e:08:87:12:53:f5:65:03:d8:b6:fa:81:bc:4b:1a:
         0a:53:e7:bd:67:6f:82:e5:bd:25:c4:d4:0d:2d:36:bf:65:30:
         fe:44:5d:a1:ef:e0:69:ed:b1:71:5f:0b:cb:cb:17:08:71:75:
         e9:08:52:fb:f9:7f:a7:83:e1:78:6d:aa:b6:8f:3d:bf:c1:8d:
         4c:48:c6:ed:2f:45:de:c0:71:89:00:16:db:27:c8:f5:04:36:
         03:fe:f7:ed:de:a3:b1:60:fb:60:66:83:15:ec:45:e9:f0:50:
         d4:a1:13:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org