Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/p3K3t8DwL5uc3c3KyXVFBdTPh7o.roa
File:                     p3K3t8DwL5uc3c3KyXVFBdTPh7o.roa (raw, json)
Hash identifier:          Thi6+HxQcJmX69AsnANkjclhraKLQWp/ZJdlrF/RbkE=
Subject key identifier:   A7:72:B7:B7:C0:F0:2F:9B:9C:DD:CD:CA:C9:75:45:05:D4:CF:87:BA
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       01B7
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/p3K3t8DwL5uc3c3KyXVFBdTPh7o.roa
Signing time:             Mon 01 May 2023 01:32:07 +0000
ROA not before:           Mon 01 May 2023 01:32:07 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        124.214.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 439 (0x1b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:32:07 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=A772B7B7C0F02F9B9CDDCDCAC9754505D4CF87BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b9:72:01:aa:4b:0f:26:6c:36:6d:8f:48:de:
                    a6:84:dd:ea:ee:73:59:95:c7:6a:59:c6:0d:6d:1e:
                    53:f7:e1:1c:f6:8f:86:87:44:e6:0b:a2:e7:90:25:
                    10:1b:81:22:b4:c7:da:7a:b2:ca:a3:56:89:5b:b4:
                    08:82:08:09:26:8d:c8:94:a4:b4:19:5a:06:e9:e5:
                    2e:99:26:ce:ef:0f:bf:da:e7:09:c4:d5:7b:84:12:
                    39:19:30:46:90:40:cb:c9:31:51:3c:d0:a4:50:be:
                    49:03:be:9f:ad:27:ad:ae:a0:54:fb:94:fb:8b:c9:
                    1f:b0:d5:13:44:4c:4e:85:97:f6:f7:b2:5e:9e:06:
                    92:09:e8:94:77:99:45:0b:cb:6b:db:07:cf:e5:34:
                    99:44:d4:a0:47:a9:28:61:38:33:3f:8c:cf:0c:08:
                    29:f2:0f:81:df:20:13:0e:9c:03:ae:45:54:16:2f:
                    5b:57:0c:23:99:b3:eb:de:d8:db:11:71:e9:b9:4b:
                    bc:da:a2:e5:a6:28:3b:5b:31:24:80:cb:17:56:42:
                    fe:11:e9:f0:8d:76:c1:81:6d:e0:b3:82:9d:55:ee:
                    e0:d5:80:fc:ae:93:54:35:91:ec:ee:76:9a:36:af:
                    9a:aa:4b:7e:a2:bd:be:c9:6f:20:3a:ba:98:51:07:
                    8b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:72:B7:B7:C0:F0:2F:9B:9C:DD:CD:CA:C9:75:45:05:D4:CF:87:BA
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/p3K3t8DwL5uc3c3KyXVFBdTPh7o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.214.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6f:ba:a8:b5:28:ed:80:c9:f6:00:e0:76:f2:17:d1:4b:72:c3:
         eb:31:1a:a8:9f:d1:90:83:13:8f:1d:61:f7:41:0e:ff:72:b7:
         61:10:0c:66:0f:4a:3d:5a:4e:c7:3a:ed:22:60:2c:fe:b1:18:
         cf:21:5d:85:05:f3:36:c3:61:8b:01:62:c4:59:b9:94:96:eb:
         82:ab:1d:0f:36:b0:b6:28:a0:a8:da:f5:b2:98:14:1d:96:d2:
         02:d5:5f:68:94:8f:47:5a:61:95:b8:06:19:b9:72:80:9a:55:
         33:6b:32:8b:91:96:d0:56:fe:c7:01:fc:5b:4d:eb:9d:d4:83:
         a9:7b:d3:18:55:d9:cf:84:1f:db:8b:ba:89:44:12:be:c7:9b:
         f4:6f:33:37:5b:9e:c1:ff:bc:e7:83:a4:ce:d6:86:8d:aa:e2:
         7b:fc:55:12:21:e3:68:5c:7f:8b:1a:23:9e:db:5e:ac:dc:27:
         65:85:fa:20:71:e8:56:b4:fe:c9:70:7f:a1:e8:9e:23:0c:40:
         bf:a4:8d:1a:b4:92:7f:4a:ef:57:63:19:20:87:77:66:67:a5:
         6e:33:95:f8:e1:cb:09:d6:a7:eb:05:28:e6:6c:d6:e9:02:7c:
         77:57:f1:a3:65:d0:1d:e1:dd:a4:7f:5b:d2:16:c0:b7:a3:67:
         3b:e7:f8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org