Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/ol2nli65X9gHLQkQpgIHeA_JYRI.roa
File:                     ol2nli65X9gHLQkQpgIHeA_JYRI.roa (raw, json)
Hash identifier:          w8FB4wC9SlZmS1LJhK8G1Xx1XZ38pWiU2vYQshMqgco=
Subject key identifier:   A2:5D:A7:96:2E:B9:5F:D8:07:2D:09:10:A6:02:07:78:0F:C9:61:12
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       9A
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ol2nli65X9gHLQkQpgIHeA_JYRI.roa
Signing time:             Tue 07 Jun 2022 10:21:14 +0000
ROA not before:           Tue 07 Jun 2022 10:21:14 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        220.217.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154 (0x9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:21:14 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=A25DA7962EB95FD8072D0910A60207780FC96112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:30:b3:a9:6d:f4:49:8d:2e:db:97:95:24:9e:
                    0f:b4:c8:c5:02:7a:ed:b3:53:23:8d:df:1b:73:1e:
                    f0:52:46:82:6a:bd:34:25:cd:4a:34:61:8f:0e:b1:
                    19:24:08:17:f2:ad:76:ec:13:47:85:80:42:cc:0c:
                    90:aa:5e:e2:bf:45:d0:e2:08:5a:50:34:b7:2a:c4:
                    a8:74:53:3f:77:fc:09:97:0d:e6:c9:3c:cb:c7:c4:
                    c3:24:af:23:30:b2:c1:f7:eb:77:00:37:f0:dd:d1:
                    f6:49:1f:b9:1f:7f:94:cc:8d:e6:d9:a4:6a:01:21:
                    10:c7:ec:e0:7c:0a:2a:ee:29:c3:6d:b8:a5:11:af:
                    6c:a3:45:0d:b6:e3:bb:b4:67:59:ed:88:80:38:dc:
                    2d:ed:c7:de:d6:51:cb:37:a4:81:0f:92:8b:3f:6b:
                    00:98:30:4d:17:70:9f:f7:e4:43:8c:3c:fe:5e:04:
                    36:e3:d9:3a:ae:25:e9:47:ba:14:57:62:95:a7:a9:
                    1d:48:db:78:a1:54:ad:95:fb:d1:99:52:03:bd:47:
                    9f:3d:2c:b5:3f:54:29:e7:35:92:39:35:ce:39:bd:
                    b9:a8:be:e8:bb:a9:24:bc:43:4d:83:aa:7b:47:16:
                    63:36:02:d7:ee:a0:08:bf:f4:d7:6c:47:84:3f:c3:
                    fc:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:5D:A7:96:2E:B9:5F:D8:07:2D:09:10:A6:02:07:78:0F:C9:61:12
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ol2nli65X9gHLQkQpgIHeA_JYRI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.217.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9b:06:1a:fa:80:3d:3d:5e:a3:91:52:f5:90:e9:a1:10:b2:16:
         0a:54:d8:8b:ad:03:6a:ee:1a:f4:ea:7b:03:d5:8a:49:fc:5b:
         93:49:8c:c7:e7:10:3b:b6:7c:78:e0:1b:32:46:76:00:66:42:
         8c:9b:cd:3c:4f:06:ca:17:fc:c5:3d:30:8d:60:22:61:95:6e:
         79:06:08:44:b6:47:5e:77:cd:ae:e9:66:6f:39:96:39:ef:27:
         c6:c4:84:5a:74:09:e4:cb:7c:2c:e2:47:9d:db:95:41:31:7d:
         9a:26:91:7d:71:f4:db:5b:d1:f8:34:8c:37:90:f9:2d:18:fc:
         58:7a:da:03:5e:4d:0e:9f:16:f3:4c:52:72:31:6d:a9:18:cb:
         57:89:8e:bd:fb:1a:79:0b:c7:ae:99:89:25:67:a1:ca:de:59:
         19:2c:e8:1b:5f:1c:cb:9c:f2:4b:76:d8:bf:9c:d2:00:69:cd:
         6a:ea:4e:54:f8:b9:b8:6a:74:ad:78:ec:e2:c2:eb:0b:9d:3f:
         ff:36:09:cb:4a:d6:a5:99:22:aa:d9:45:35:0f:90:4b:95:b2:
         73:1c:7b:ee:c1:e6:34:7c:d4:8b:4d:eb:72:9c:bf:db:83:0c:
         e4:4c:95:57:93:c8:b0:54:0d:0a:f3:24:da:35:0f:8d:7d:91:
         4f:5c:a6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org