Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/ne6RoO7c4l0exATs44l13NWPano.roa
File:                     ne6RoO7c4l0exATs44l13NWPano.roa (raw, json)
Hash identifier:          S4WQtAXp6VZKPruDOSlF6NOvTDvgkai8YAohniwqd0c=
Subject key identifier:   9D:EE:91:A0:EE:DC:E2:5D:1E:C4:04:EC:E3:89:75:DC:D5:8F:6A:7A
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       01D4
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ne6RoO7c4l0exATs44l13NWPano.roa
Signing time:             Mon 01 May 2023 01:33:37 +0000
ROA not before:           Mon 01 May 2023 01:33:37 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        222.11.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 468 (0x1d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:33:37 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=9DEE91A0EEDCE25D1EC404ECE38975DCD58F6A7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:23:8c:89:9e:90:14:48:b6:26:4d:60:c4:36:
                    7a:4c:4d:1d:16:f1:d2:22:4c:5e:b0:54:d2:6a:67:
                    54:d5:ff:b6:aa:2f:a0:5e:7c:73:22:9f:fd:4f:aa:
                    c0:2e:8a:74:57:36:1a:32:eb:f3:3c:39:c4:cd:c4:
                    e5:87:0e:f3:ff:84:20:ca:65:e5:5a:be:fa:5f:26:
                    23:1f:cd:11:b7:55:d2:20:4b:f7:df:dc:cb:26:8f:
                    53:77:d7:a6:95:2f:b2:36:a8:b4:6f:16:17:15:d6:
                    ec:ce:5e:38:ef:9f:b0:3f:ac:a8:83:c1:1e:05:60:
                    f3:fb:79:f0:ba:4b:56:8c:80:6f:7a:85:5b:d6:c1:
                    02:90:31:91:7e:4f:c7:9c:48:af:fb:5e:2c:30:80:
                    73:54:e1:32:54:33:48:64:b1:63:fe:aa:48:68:6a:
                    58:50:94:e9:a2:f2:31:84:39:d6:11:63:7e:3b:3d:
                    08:ff:b6:d1:f9:ee:2e:6a:48:17:b6:e0:6c:ad:87:
                    31:3f:1b:f9:d1:0a:4f:26:ba:d4:9e:20:2f:64:f8:
                    6b:29:f3:85:ce:16:96:09:2a:e3:ed:91:83:74:42:
                    05:d4:77:1a:2a:1f:4b:52:0a:b4:4c:38:d9:48:bf:
                    af:76:e6:65:96:75:f4:67:ea:98:0c:b5:ea:7a:28:
                    3d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:EE:91:A0:EE:DC:E2:5D:1E:C4:04:EC:E3:89:75:DC:D5:8F:6A:7A
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ne6RoO7c4l0exATs44l13NWPano.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.11.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         85:c2:5f:76:95:6a:57:11:24:e5:9c:67:58:bb:79:39:c0:fd:
         81:8e:a5:d1:a4:ec:21:e8:4f:97:8a:52:e7:4e:02:94:4b:a7:
         1b:72:fb:14:ea:6f:2f:36:1a:10:0d:18:70:d6:3b:00:33:b4:
         fe:1e:80:38:f8:0d:94:6e:fd:ef:82:b5:63:6b:fb:93:8d:4d:
         e2:fe:93:24:06:98:89:4c:1b:b3:7e:b4:42:9c:7c:87:a9:2e:
         a0:1a:bb:ef:38:74:26:68:47:58:dd:71:93:6f:c3:80:99:bf:
         15:1e:d5:ed:4d:02:b5:f8:c3:1e:19:78:dc:05:53:3f:c6:ad:
         a0:b4:22:6d:61:cf:5c:68:ca:65:f4:4f:af:2e:31:d0:32:2c:
         8b:37:16:69:05:be:8e:52:0c:c2:e9:85:7d:71:e7:88:27:fa:
         1f:fa:e0:51:ea:49:f2:a3:b4:b0:bd:b9:07:d7:89:0e:3d:d7:
         a5:2d:f7:13:d3:d2:08:01:0e:51:5c:48:fa:93:ea:e2:b8:52:
         cf:79:c4:e9:af:b3:9b:a6:ce:d9:86:54:a2:28:c4:c2:9a:ca:
         1b:8e:06:56:a2:f7:a3:a7:05:1f:75:6e:30:56:6a:2b:24:7e:
         ba:01:46:4c:37:72:eb:06:a6:6a:77:d7:24:79:07:ec:94:38:
         fd:d2:fc:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org