Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/pp7tdO9BbEby6klFaoqLjSo_59U.roa
File:                     pp7tdO9BbEby6klFaoqLjSo_59U.roa (raw, json)
Hash identifier:          atM8i1WVkXDswfwPnXkcaeoD66/JamYKB4OeoNhJ1xM=
Subject key identifier:   A6:9E:ED:74:EF:41:6C:46:F2:EA:49:45:6A:8A:8B:8D:2A:3F:E7:D5
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       01C3
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/pp7tdO9BbEby6klFaoqLjSo_59U.roa
Signing time:             Mon 01 May 2023 01:32:12 +0000
ROA not before:           Mon 01 May 2023 01:32:12 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        220.214.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 451 (0x1c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:32:12 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=A69EED74EF416C46F2EA49456A8A8B8D2A3FE7D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:29:82:8e:bc:18:58:dd:7c:37:45:91:ee:41:
                    78:dd:16:a3:86:1a:49:f0:3a:20:ec:20:05:a0:ac:
                    4a:ea:33:0e:f0:eb:a3:c2:57:fd:d6:48:dd:42:10:
                    4e:ad:4f:27:a4:74:89:1a:14:72:12:4b:c0:4d:1a:
                    2c:b4:93:43:29:74:7a:dd:0b:08:4c:ea:dc:f8:ac:
                    a3:3d:ff:fe:0a:7b:12:0b:c1:76:da:18:a9:a5:8d:
                    4a:5a:d1:0b:0f:3a:f9:05:7e:25:39:4d:d9:82:4e:
                    f2:8b:8d:db:78:55:ab:b2:0c:97:59:d5:28:91:4f:
                    1d:d9:2c:9c:f3:9e:43:d3:16:78:3d:05:a4:8e:4d:
                    a2:de:33:e1:ad:30:6c:5d:dc:c7:22:80:c3:5c:e9:
                    26:61:04:27:98:65:95:b0:a5:72:bd:65:85:b5:e6:
                    e7:c9:68:c5:09:93:be:df:77:fa:d4:1c:3c:bb:12:
                    e6:cd:a4:e6:19:b4:58:64:8f:0e:20:9f:b4:87:8f:
                    59:48:74:92:cf:57:dd:12:42:8c:e1:ca:4e:32:78:
                    4a:08:b3:97:89:92:e1:2d:a7:ff:96:f6:68:09:e1:
                    01:59:73:51:81:1e:b0:d0:56:24:eb:28:55:a4:81:
                    f4:db:64:f5:5e:23:96:59:dc:e5:cd:12:14:55:7d:
                    8f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:9E:ED:74:EF:41:6C:46:F2:EA:49:45:6A:8A:8B:8D:2A:3F:E7:D5
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/pp7tdO9BbEby6klFaoqLjSo_59U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.214.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2a:aa:6f:fb:63:83:44:16:8d:3e:80:9f:1a:38:1b:06:6b:69:
         62:8b:5b:35:6f:11:77:1c:2b:a4:02:c4:e0:31:54:c5:7f:65:
         53:4f:ea:3e:77:4b:ff:17:4a:36:fe:c9:35:5c:b9:67:7c:4e:
         70:2d:46:96:10:44:e0:2b:92:b2:ff:7a:b1:89:f4:85:21:d7:
         4c:2f:dd:e9:b9:54:12:4c:d2:24:bb:19:06:41:c7:40:64:8c:
         86:c8:b6:9e:f7:17:d1:b6:1f:0f:a9:3f:90:d6:5c:6e:a8:23:
         64:09:0b:a7:be:a8:e9:d1:3a:9d:e7:9e:c3:e2:67:4c:ee:13:
         12:2d:d9:f0:98:f1:89:57:f3:10:84:99:1d:2b:58:d4:06:97:
         09:93:a8:da:fc:5b:1b:b3:4f:94:61:68:95:87:f8:a9:18:45:
         9b:16:8c:f7:e9:2e:11:b2:e0:a8:8b:d0:0c:30:cc:7d:01:d9:
         04:db:c8:12:6f:50:0f:19:e5:20:18:f3:2a:6b:44:cf:e3:ab:
         af:a0:21:17:26:cc:a1:9c:65:a2:79:a4:3d:4c:50:80:d4:4f:
         1a:c5:9b:bd:ab:9f:bf:45:a9:3d:c0:8f:54:34:d9:6b:08:1e:
         f0:6f:8b:34:0e:91:68:56:d2:28:f2:f9:a1:2b:69:55:ef:c1:
         e0:b2:34:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org