Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/nU3M9ggqpGOvZiJOEU9IQgw54H0.roa
File:                     nU3M9ggqpGOvZiJOEU9IQgw54H0.roa (raw, json)
Hash identifier:          8rNIPs7Cuqfs8JfcpgQ0bn4j1T70fk2/Dd4znGJBAQo=
Subject key identifier:   9D:4D:CC:F6:08:2A:A4:63:AF:66:22:4E:11:4F:48:42:0C:39:E0:7D
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       EB
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/nU3M9ggqpGOvZiJOEU9IQgw54H0.roa
Signing time:             Tue 14 Jun 2022 09:32:11 +0000
ROA not before:           Tue 14 Jun 2022 09:32:11 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        118.159.192.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235 (0xeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun 14 09:32:11 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=9D4DCCF6082AA463AF66224E114F48420C39E07D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2a:69:c4:0a:c2:a4:69:77:b4:6f:59:fd:cf:
                    6c:3d:be:c3:e4:85:71:26:c8:7e:d8:be:4a:65:0a:
                    28:14:3e:80:c1:c6:20:d0:50:6a:b7:63:e0:6b:82:
                    e4:6b:2b:41:25:42:9e:6a:21:2f:7b:d1:74:ba:1d:
                    ca:5a:46:eb:00:f2:3d:df:cd:34:b0:f4:cb:ba:73:
                    22:e5:f2:94:38:1f:1e:a9:34:3e:5f:ce:e9:29:7e:
                    a0:ac:11:fe:82:f9:8f:14:97:c9:9e:c4:8a:ec:7c:
                    32:6f:68:01:dd:9e:df:7f:23:6e:2a:6c:9f:86:0d:
                    ae:f7:9d:64:0b:d9:92:38:bd:47:31:a7:8e:96:52:
                    7e:11:8a:7d:aa:eb:84:df:77:50:3f:59:d7:d4:f2:
                    f1:dc:68:dc:c2:5a:49:6f:7e:67:27:72:ca:42:57:
                    28:bb:42:85:db:d1:69:5e:89:cb:e6:1c:eb:bb:18:
                    ce:93:ed:c2:91:01:e0:cf:e1:b7:de:2e:71:ee:6e:
                    f9:1a:3a:8e:f9:99:0e:c6:f2:70:1e:b7:fc:f5:e7:
                    ff:1a:87:52:d4:db:a0:37:94:26:61:cd:83:b6:3d:
                    27:21:6e:7f:f1:0b:53:65:b0:af:4d:a7:97:70:49:
                    ae:b7:0c:fb:41:27:ad:16:d4:4c:7f:49:7a:40:ae:
                    da:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:4D:CC:F6:08:2A:A4:63:AF:66:22:4E:11:4F:48:42:0C:39:E0:7D
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/nU3M9ggqpGOvZiJOEU9IQgw54H0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.159.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         65:f8:09:05:58:f0:0f:e9:6d:7a:fe:c2:29:80:73:ec:f0:6b:
         a5:18:90:e4:3a:0c:08:5b:28:f2:46:bc:8e:14:be:b9:9a:d0:
         6d:9c:8f:e0:55:bb:a9:c9:24:dc:e2:70:6d:99:15:66:92:da:
         3b:fd:0f:3e:e4:af:cd:86:46:b9:dc:62:32:f3:4a:c1:69:23:
         0b:fd:f0:33:85:ea:bf:df:d0:ce:45:5d:97:87:3a:8f:1c:c4:
         93:93:19:db:cb:4c:a8:57:f1:23:34:f0:bd:6d:e3:f9:7a:f5:
         6f:7c:34:c6:50:a8:c7:53:36:1c:5d:82:cc:3c:f2:20:06:b7:
         d1:3d:d7:2e:1d:67:2a:ec:b0:05:fe:f4:c2:33:6c:de:f4:17:
         e6:c6:36:c7:2f:40:0b:a9:2e:1a:1d:d1:5e:f7:4f:8e:4c:19:
         64:3a:70:71:36:71:3f:a0:89:c2:4a:4c:17:d0:f2:0f:ff:7d:
         c5:d8:67:85:e5:e3:f8:79:1e:f9:23:8a:b2:e9:f4:32:38:2a:
         21:f9:4b:79:d7:a4:aa:04:f0:75:c6:d7:aa:94:48:aa:6d:7c:
         35:cf:92:36:d3:04:ec:b5:13:b3:e2:4a:1e:c9:61:85:60:6f:
         69:72:43:78:4c:9e:8c:9d:83:44:59:cc:d5:7d:94:33:26:b2:
         1c:8e:66:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org