Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/ncqT4ldi5GtgG5m7bgRWTRtSH7M.roa
File:                     ncqT4ldi5GtgG5m7bgRWTRtSH7M.roa (raw, json)
Hash identifier:          jgRt2ZMB5hG8BcE3mbLny6+Xu1P8p1+AMZ53o4CcAv8=
Subject key identifier:   9D:CA:93:E2:57:62:E4:6B:60:1B:99:BB:6E:04:56:4D:1B:52:1F:B3
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       014B
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ncqT4ldi5GtgG5m7bgRWTRtSH7M.roa
Signing time:             Fri 28 Oct 2022 05:49:37 +0000
ROA not before:           Fri 28 Oct 2022 05:49:37 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        119.107.128.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 331 (0x14b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Oct 28 05:49:37 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=9DCA93E25762E46B601B99BB6E04564D1B521FB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:af:d2:03:b7:b3:40:e7:82:b5:f2:41:5e:d7:
                    4b:93:14:af:12:26:2d:7b:08:a1:25:46:94:03:5d:
                    3d:e7:21:42:63:bc:07:bd:2f:a6:f1:aa:9a:1a:de:
                    29:94:7b:fd:ab:ab:15:ca:81:42:8d:8f:45:cf:fe:
                    fb:a8:07:ba:44:e2:6a:b2:d7:2c:fd:ba:0b:68:df:
                    3e:34:d4:df:0f:23:47:b7:64:8e:04:3d:22:a7:2e:
                    1d:33:6f:15:4f:00:57:bc:a1:53:2a:02:d1:a7:9b:
                    7b:72:64:90:6b:f9:83:47:92:83:95:97:c3:e8:7f:
                    b3:90:c5:99:6b:2a:e9:37:71:ae:65:c6:b9:51:dc:
                    99:1c:8f:8c:5b:26:e9:20:ed:d9:9c:33:7b:fd:f9:
                    34:94:83:0b:61:ff:09:05:ed:e8:ca:53:07:1b:db:
                    d3:1d:2d:b7:13:b8:7c:eb:c9:76:b8:8b:67:9c:6f:
                    9b:62:ed:cc:98:9a:44:fe:c6:12:32:2e:93:bc:d7:
                    34:1f:9f:3e:53:05:b0:1b:a5:d1:19:13:0c:7d:be:
                    1b:8e:3a:08:5d:b0:6f:81:f6:b4:95:84:87:e9:d0:
                    19:81:85:d9:6b:04:d5:4b:71:ab:31:87:b0:70:7a:
                    42:ba:37:dc:37:6c:e5:6a:2c:cd:11:cc:2f:c4:0d:
                    9f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:CA:93:E2:57:62:E4:6B:60:1B:99:BB:6E:04:56:4D:1B:52:1F:B3
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ncqT4ldi5GtgG5m7bgRWTRtSH7M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.107.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9d:3e:d1:f9:99:87:77:fd:62:fa:d1:5e:5b:bc:a9:63:a0:de:
         24:d6:20:3e:56:30:a4:77:50:e4:ba:1b:09:b1:e8:bf:99:06:
         4e:1e:e4:50:52:1c:7a:ae:23:b2:99:5c:e5:24:69:12:74:9b:
         77:40:a3:af:a8:d5:c1:a5:40:96:cf:88:5d:da:8f:72:91:49:
         50:be:57:d7:07:0b:e6:9f:16:12:a3:1f:02:78:32:76:1c:d5:
         df:d3:15:22:5a:aa:21:b7:08:df:a3:80:8a:8b:f1:0c:ed:73:
         78:b2:fb:fd:cc:a6:92:b1:36:fa:df:fb:96:24:07:9f:04:c2:
         c9:83:43:a4:ad:d4:a3:6a:e1:3d:66:1b:24:c7:91:fe:57:ad:
         55:29:54:85:1d:d0:1d:63:d1:6e:4f:a3:41:8d:20:73:be:fe:
         50:29:0e:a7:51:65:4a:e7:b0:8b:a7:2e:4a:b1:eb:48:07:87:
         b8:c1:94:a5:fd:03:ac:50:ed:c3:1e:41:de:81:54:64:51:e7:
         1d:2e:49:d6:5b:bb:08:e2:2e:bf:df:2a:4b:43:0c:01:52:cb:
         42:90:88:14:01:0a:10:b4:82:cf:88:5f:11:b5:00:22:6d:06:
         ee:dd:f3:7d:73:95:c1:ba:fc:93:86:f5:73:5e:01:ea:e7:ae:
         02:2e:82:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org