Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/nA2CReHb0w-cnCpOfTVQu8kbm38.roa
File:                     nA2CReHb0w-cnCpOfTVQu8kbm38.roa (raw, json)
Hash identifier:          GeO3v/iSKAHF/j1dCCww6i1gXmmEEmm1FTkS6OBltoY=
Subject key identifier:   9C:0D:82:45:E1:DB:D3:0F:9C:9C:2A:4E:7D:35:50:BB:C9:1B:9B:7F
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       018B
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/nA2CReHb0w-cnCpOfTVQu8kbm38.roa
Signing time:             Mon 01 May 2023 01:30:26 +0000
ROA not before:           Mon 01 May 2023 01:30:26 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        59.137.128.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 395 (0x18b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:30:26 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=9C0D8245E1DBD30F9C9C2A4E7D3550BBC91B9B7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:c0:4c:f0:3f:60:87:22:6e:95:27:ee:e9:ba:
                    1e:9f:17:60:db:08:86:a0:08:89:c0:d2:95:3a:8a:
                    40:9d:ed:5a:09:ae:bd:6e:c6:5a:9f:04:f5:3e:a8:
                    57:a9:e9:69:9d:fd:78:ea:d7:8a:24:1e:ac:3e:10:
                    db:84:93:12:18:34:a2:10:43:94:52:ad:53:1b:62:
                    8e:74:c6:38:28:80:35:8e:82:89:f7:d6:c5:4f:cf:
                    af:2d:b0:ec:23:44:07:8a:c6:47:8e:22:b1:95:68:
                    cb:e4:5f:58:89:56:60:cf:9f:36:4a:4e:b9:6d:0e:
                    16:96:fa:a8:f0:6f:99:a1:5f:f7:c0:18:44:d7:ac:
                    3f:0f:b8:3a:98:f7:f2:18:99:fd:48:2d:bf:00:6a:
                    0e:8e:a1:6b:34:11:28:d7:1d:17:e6:fe:36:20:63:
                    0a:df:90:d8:1a:3b:49:8b:f7:0b:80:3f:8d:21:7a:
                    cf:36:66:5f:c5:42:51:fe:a4:1a:e8:8f:ba:de:b3:
                    87:55:35:4b:7f:e9:51:4e:45:e9:a1:6f:07:66:cb:
                    58:da:fa:8e:1b:30:4d:ee:73:b0:c9:c5:f4:87:50:
                    1c:e0:47:32:fd:0e:d2:e6:7e:c0:dd:82:e1:f5:c2:
                    52:1c:dc:da:fb:5c:ca:d3:71:0c:e1:c9:0f:30:b1:
                    88:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:0D:82:45:E1:DB:D3:0F:9C:9C:2A:4E:7D:35:50:BB:C9:1B:9B:7F
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/nA2CReHb0w-cnCpOfTVQu8kbm38.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.137.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         30:de:25:5c:86:b3:35:91:10:b0:94:7b:ea:f5:9e:fc:89:63:
         6b:ff:1c:34:11:0a:19:45:09:e7:b9:5a:13:93:86:b5:b4:0a:
         f2:8f:ad:fb:b3:f6:b0:84:b1:37:c3:ca:c1:e0:a0:15:6f:ef:
         ae:2d:5e:35:32:5f:ad:e1:df:16:96:e1:94:d1:3e:c7:99:c1:
         0f:fb:e6:ae:49:bb:91:97:c6:78:62:af:37:d6:ef:a3:75:9d:
         c7:54:7c:a3:3c:fb:1b:8a:e1:d6:a4:5f:7a:36:a7:97:da:50:
         e8:5e:7b:a9:5c:6a:0a:c2:e4:77:b8:4f:f7:07:fe:44:0f:35:
         11:e3:6c:3e:be:d7:22:88:29:7b:35:78:5e:55:b3:4a:7f:da:
         9b:57:6e:f6:21:3c:75:8e:e4:a2:8e:50:4e:46:b5:c9:0b:e0:
         17:b1:0a:89:c3:a7:54:6a:1c:0f:ec:cd:4e:d0:ec:10:9a:ac:
         27:ae:e6:d8:30:b6:d7:91:c5:94:59:70:59:38:8e:06:29:f2:
         3e:44:8d:b4:6e:24:ad:96:e0:50:32:4c:2c:f2:50:8a:e8:62:
         a7:99:69:19:54:10:08:e1:cb:52:f9:50:b9:9e:22:43:02:6a:
         ef:d6:70:e3:e5:2f:d3:c7:b7:3c:9b:52:fe:52:55:b0:c1:c1:
         9a:55:15:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org