Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/nVOt6XADDKP6SaLvqn-dqpHolfI.roa
File:                     nVOt6XADDKP6SaLvqn-dqpHolfI.roa (raw, json)
Hash identifier:          QIF6b0NEgMh0eWSxZd+6h6dKtBYBlTrWcQBMUNOVBEA=
Subject key identifier:   9D:53:AD:E9:70:03:0C:A3:FA:49:A2:EF:AA:7F:9D:AA:91:E8:95:F2
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       A7
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/nVOt6XADDKP6SaLvqn-dqpHolfI.roa
Signing time:             Tue 07 Jun 2022 10:33:22 +0000
ROA not before:           Tue 07 Jun 2022 10:33:22 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        222.8.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167 (0xa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:33:22 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=9D53ADE970030CA3FA49A2EFAA7F9DAA91E895F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:93:8d:79:b5:78:63:cf:1c:b8:61:f0:08:ba:
                    d7:c8:cd:12:f0:43:33:6b:c1:d4:21:6b:0a:8e:ff:
                    65:b4:9f:31:52:4e:af:19:82:7b:fb:2c:86:ab:ec:
                    bc:5b:e8:43:20:b3:04:a6:11:7c:84:a3:40:68:10:
                    df:4b:61:e5:5a:03:b0:0b:ff:68:9c:22:52:86:86:
                    dd:56:92:9c:41:c3:c9:f2:2e:0a:74:6d:74:52:dd:
                    b5:c8:a6:5c:49:b4:89:4f:2b:be:18:8f:ea:d8:43:
                    de:66:36:de:d9:e1:75:ff:5b:b9:68:73:8b:e6:44:
                    e8:8c:59:27:3d:18:0d:d7:62:ca:e7:a0:7e:6d:fa:
                    78:7e:d8:d3:d7:fe:e3:df:b3:9a:f6:23:69:72:aa:
                    e6:81:9e:11:81:eb:c4:74:ff:cf:ed:03:91:5c:0e:
                    da:63:ff:01:6f:1a:66:51:22:59:a6:b5:eb:07:33:
                    da:67:b3:ff:cf:16:e2:d8:08:61:87:82:4c:73:7f:
                    f6:6d:3b:75:32:7b:59:6a:36:da:b6:aa:d0:cc:78:
                    c2:b1:f7:59:f1:3b:55:30:0b:88:ff:06:03:46:a1:
                    83:ce:54:08:fe:56:27:18:ed:33:f0:cb:c0:a2:af:
                    e5:59:45:b1:57:b9:05:16:14:0f:11:68:4c:59:ff:
                    8e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:53:AD:E9:70:03:0C:A3:FA:49:A2:EF:AA:7F:9D:AA:91:E8:95:F2
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/nVOt6XADDKP6SaLvqn-dqpHolfI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.8.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5a:e8:1c:99:99:b7:50:3b:0d:07:c2:44:eb:18:8a:3e:d8:97:
         83:fc:7d:f0:aa:13:06:99:8b:5d:03:c7:98:2f:ef:c7:a2:7b:
         37:95:5b:aa:81:bd:d6:ad:64:75:ae:d9:ad:38:2d:b6:d9:14:
         83:33:3c:cd:c9:91:d8:ce:12:5d:be:47:fd:c2:ba:d3:4f:3b:
         21:eb:a4:6d:83:6c:06:47:88:9c:a8:8c:b3:a9:0a:ad:5f:b1:
         92:20:01:9c:79:8b:3c:54:e5:40:8c:96:7f:74:ac:60:b0:b9:
         79:5f:1c:65:2d:ae:33:8d:7a:2b:b8:75:e9:18:2f:7c:a3:55:
         f9:88:f8:b2:8f:c6:4f:0d:ae:35:7b:a3:6f:14:3c:da:6f:86:
         2a:49:65:3b:65:ae:d6:e1:8b:84:19:15:a7:cf:30:4e:76:ee:
         6b:22:5f:6f:67:7e:4f:6d:67:d7:5d:6a:b8:4b:a4:ca:56:82:
         a2:3c:df:1b:cd:ea:2c:34:27:00:d8:62:e7:35:08:23:26:50:
         2e:a6:91:33:71:c9:1b:98:9c:a2:52:65:86:2d:7e:ab:a8:2f:
         37:11:5f:ae:af:31:01:84:b9:88:a1:c8:dd:1b:20:f9:e7:a9:
         2f:c8:03:bc:39:dd:0d:4b:49:3b:49:e3:42:87:c8:67:f6:c8:
         38:80:ef:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:09 2023 by rpki-client on console-ams.rpki-client.org