Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/pHfjj68g997D9fD3uwR6TTB8xZ4.roa
File:                     pHfjj68g997D9fD3uwR6TTB8xZ4.roa (raw, json)
Hash identifier:          5omdeterqkGWHzIyAP9Rn9MdgbIDXztduqw/aaH+dZ8=
Subject key identifier:   A4:77:E3:8F:AF:20:F7:DE:C3:F5:F0:F7:BB:04:7A:4D:30:7C:C5:9E
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       76
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/pHfjj68g997D9fD3uwR6TTB8xZ4.roa
Signing time:             Tue 07 Jun 2022 10:09:11 +0000
ROA not before:           Tue 07 Jun 2022 10:09:11 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        106.166.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:09:11 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=A477E38FAF20F7DEC3F5F0F7BB047A4D307CC59E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:6f:59:38:15:6f:dc:91:fd:38:d4:5f:2e:33:
                    e0:79:a6:e3:a2:9f:0f:de:c7:f0:b8:4e:07:a8:6a:
                    8c:73:fe:04:ec:b9:3a:54:c5:43:46:20:fb:1a:32:
                    fc:68:02:36:68:af:6c:f5:98:e6:93:a2:be:5b:62:
                    84:62:a6:f8:d9:a8:94:29:5a:9f:a2:dc:d6:1f:ca:
                    9d:ba:37:99:f1:33:c8:f6:1d:8c:cc:ac:cf:27:b1:
                    d5:99:1e:c3:ac:4e:9e:90:72:37:a7:94:00:ef:6f:
                    3b:21:eb:61:76:bd:6a:29:ae:22:8e:64:73:40:52:
                    aa:eb:c3:12:c7:60:15:be:c9:41:1d:37:79:61:0c:
                    4d:27:40:8f:c1:eb:c2:6e:18:7c:f1:0f:ab:d3:1b:
                    72:6a:6b:68:61:c8:09:fa:a0:0c:b4:2b:e4:3f:73:
                    a3:da:4e:59:e5:d0:da:1e:89:a2:76:e6:62:65:a0:
                    21:35:a4:2d:92:14:5d:37:eb:0a:f2:25:aa:7a:31:
                    6b:3b:8b:27:0f:cb:a3:af:78:b3:51:94:de:d1:ff:
                    fb:9c:ba:b7:49:ec:88:fe:06:57:54:53:a1:8b:ae:
                    61:10:c4:fc:40:87:b7:4d:c4:8a:f4:f2:29:e4:dd:
                    67:f0:e0:4c:0b:c3:44:13:ac:bc:14:1e:17:98:52:
                    06:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:77:E3:8F:AF:20:F7:DE:C3:F5:F0:F7:BB:04:7A:4D:30:7C:C5:9E
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/pHfjj68g997D9fD3uwR6TTB8xZ4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.166.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9a:b2:42:3b:88:67:55:05:13:28:49:41:d9:b0:d0:ff:c7:2f:
         c5:fd:5b:7c:b9:3f:38:bb:0e:10:2d:7f:45:62:47:c7:5b:d2:
         a8:b3:21:80:07:43:9d:b7:a5:0e:94:1e:65:91:d8:d2:10:73:
         ca:b6:1f:c7:67:e0:57:b4:64:83:af:72:fb:de:5e:9a:b5:4b:
         9c:37:3f:d1:46:f0:39:40:ea:4b:94:43:70:b4:ef:d1:b6:f5:
         64:5d:7b:26:48:89:ca:85:6b:cd:7e:b7:18:a9:3e:48:ff:fa:
         57:ee:1a:0a:a2:37:eb:99:44:e9:5c:44:7a:7f:7e:d1:4e:f2:
         1a:33:6f:61:c8:00:17:15:3f:15:9d:66:65:1a:24:9c:63:63:
         13:0f:2b:43:e9:74:95:25:e9:85:81:24:79:c3:9f:39:d4:9d:
         db:8b:bd:2a:1f:3d:0c:ef:0a:72:e4:d4:70:7f:59:94:4a:bd:
         12:4b:52:25:67:13:af:48:a3:ea:5b:09:51:7b:c2:05:cc:b7:
         7c:b3:fb:97:4d:01:ba:26:92:f0:11:4e:ad:01:fa:74:ce:99:
         c2:00:73:03:58:df:90:76:3e:9b:70:b6:68:4a:90:f5:2a:da:
         55:44:b7:b9:9f:5f:8e:14:b5:af:e5:20:22:0c:0a:0b:14:70:
         d2:1f:39:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org