Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/md6IXQq4aOaXdaxbjZMoRapF0XQ.roa
File:                     md6IXQq4aOaXdaxbjZMoRapF0XQ.roa (raw, json)
Hash identifier:          mNMOxY7j8y4D9iz2hSocdlxQf2Bb/vSSXQSBN46aOiY=
Subject key identifier:   99:DE:88:5D:0A:B8:68:E6:97:75:AC:5B:8D:93:28:45:AA:45:D1:74
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       E0
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/md6IXQq4aOaXdaxbjZMoRapF0XQ.roa
Signing time:             Tue 14 Jun 2022 09:32:06 +0000
ROA not before:           Tue 14 Jun 2022 09:32:06 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        114.20.0.0/15 maxlen: 15

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 224 (0xe0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun 14 09:32:06 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=99DE885D0AB868E69775AC5B8D932845AA45D174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cc:ea:e6:31:26:4f:b3:5a:c8:99:8e:b3:c6:
                    de:85:30:ba:4d:5b:4a:f2:1f:b7:89:18:0d:b7:69:
                    6c:a4:22:50:ee:29:82:78:a4:f4:4f:26:54:51:6a:
                    ef:d7:ee:06:db:b8:55:0e:7f:f9:e4:3a:bf:49:a9:
                    18:3b:5a:33:17:86:a2:b0:5f:53:50:e1:a1:57:a2:
                    d2:ca:f0:89:10:8c:7c:45:e7:c8:61:91:f3:68:bb:
                    8f:30:78:19:6c:21:8a:70:bd:89:65:f8:9f:f5:9b:
                    ae:f9:25:31:da:0e:49:12:df:8e:02:8e:d8:bd:38:
                    bc:5b:2d:a1:a4:3e:b7:8d:ab:e5:99:23:76:99:3f:
                    50:a5:18:e9:f4:80:a6:36:8e:67:38:b9:74:e6:66:
                    c9:97:da:ba:48:74:6d:91:f1:ce:bb:4f:10:8f:5d:
                    05:ee:0f:3f:ed:18:73:96:5e:6e:e2:c0:d3:b0:42:
                    3f:7e:3b:f0:79:85:c0:e0:2d:e4:a3:9c:9c:b7:07:
                    bb:53:8c:7a:70:67:4d:6b:f1:f2:63:fb:d4:83:31:
                    e6:a7:60:54:01:bf:bb:37:13:52:9e:9e:8e:44:a0:
                    e8:16:42:1b:e3:47:58:39:a5:3f:3c:f4:ee:82:23:
                    81:23:0d:39:fd:ab:1e:05:c8:c9:4a:2e:81:90:c8:
                    a6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:DE:88:5D:0A:B8:68:E6:97:75:AC:5B:8D:93:28:45:AA:45:D1:74
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/md6IXQq4aOaXdaxbjZMoRapF0XQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.20.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         35:ca:07:7e:0b:45:52:6a:9f:61:ff:36:f1:c5:36:a2:9a:f5:
         5e:6d:8f:da:77:22:24:cf:78:ec:67:de:63:92:f7:a1:99:2a:
         3e:c1:9f:e6:33:81:31:8f:f8:8d:ea:22:58:b0:f9:86:d1:01:
         6a:aa:a6:37:7a:18:4d:1e:62:cb:ad:a3:6e:c8:6b:45:7a:73:
         f7:02:bc:b1:ce:cf:d6:5a:d4:a7:30:1b:38:26:36:4b:ed:ae:
         5b:55:c8:3c:fa:30:a1:90:9c:fc:a8:47:b3:27:a4:b6:0c:5f:
         8f:b6:71:86:f3:3d:0d:21:c6:54:a7:cd:40:53:ec:d3:12:86:
         1c:10:03:21:f3:a2:e0:46:e3:8f:1c:43:33:f9:f5:39:8c:06:
         b6:89:1e:9b:0e:66:8e:1f:5a:2d:13:48:9a:15:38:0c:c8:c0:
         08:a9:21:e3:c4:48:98:31:c4:34:2d:8c:d6:2c:4e:a2:9a:81:
         71:cd:20:ee:3c:46:9c:99:32:15:36:0b:7a:c4:a2:9b:d1:ef:
         b6:fc:bd:ee:5f:04:04:12:c7:99:61:75:c9:e6:03:49:51:87:
         94:8b:39:97:14:6f:92:73:dc:44:35:2e:bf:b5:93:30:52:3a:
         49:a0:ab:18:e3:34:17:00:55:d9:c9:1e:4e:ba:fa:f8:9b:a7:
         a8:dd:16:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org