Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/q2TQtTPABS67d1OSkJGVeEdkdBQ.roa
File:                     q2TQtTPABS67d1OSkJGVeEdkdBQ.roa (raw, json)
Hash identifier:          EnTua19goAnw+LOXzkPCOjWhA6HCVDNCMR5wBDV7Llo=
Subject key identifier:   AB:64:D0:B5:33:C0:05:2E:BB:77:53:92:90:91:95:78:47:64:74:14
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       01F0
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/q2TQtTPABS67d1OSkJGVeEdkdBQ.roa
Signing time:             Mon 01 May 2023 01:35:36 +0000
ROA not before:           Mon 01 May 2023 01:35:36 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        124.211.32.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 496 (0x1f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:35:36 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=AB64D0B533C0052EBB7753929091957847647414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:eb:2e:c2:51:72:a4:ad:39:18:4c:82:23:a9:
                    bd:67:cf:c9:0e:e5:47:b4:61:cc:78:85:52:f8:5d:
                    f5:62:17:8a:ec:11:ff:fc:76:57:97:83:35:f3:3f:
                    f2:8b:50:0d:f7:bc:7e:64:c9:86:f9:7d:4b:a8:1b:
                    66:be:1d:4c:a8:ac:66:ef:b9:b9:34:be:da:83:3e:
                    2f:05:d8:39:4b:56:e9:e8:aa:35:6c:92:98:da:e7:
                    89:b8:70:24:81:da:62:c0:f1:34:78:3b:f8:cd:05:
                    ee:8c:d9:bf:32:c2:21:8c:6a:6b:f2:9b:cb:41:9c:
                    ca:91:01:da:24:3a:29:52:dd:7d:32:18:47:de:ed:
                    9f:e5:c2:9f:86:07:2a:4d:85:4a:83:72:49:ca:cc:
                    c6:b7:ce:a2:5e:74:40:2b:22:0b:e9:5a:d9:c8:69:
                    ab:e1:b4:a8:ce:5e:7b:e6:e3:11:2f:09:76:8b:67:
                    b9:5c:2c:fe:0a:cd:8a:1b:07:77:f3:1c:fc:4b:4b:
                    39:09:40:5b:1c:46:68:d2:aa:db:2b:4d:42:8b:32:
                    56:5f:93:bb:f9:f2:4e:69:cb:43:8b:77:82:62:9c:
                    6e:16:29:f5:ac:92:51:81:60:5e:a9:20:4d:e2:5d:
                    9e:97:57:98:68:f9:51:7a:09:43:2a:bd:73:e3:ff:
                    42:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:64:D0:B5:33:C0:05:2E:BB:77:53:92:90:91:95:78:47:64:74:14
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/q2TQtTPABS67d1OSkJGVeEdkdBQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.211.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9d:74:1d:0c:b4:a3:ce:90:74:28:b3:dc:ad:6a:dd:92:06:48:
         6d:3e:f9:54:79:8f:af:dc:cb:5e:c7:af:8a:c4:eb:19:27:69:
         6d:a3:d1:8d:c3:70:f1:cf:91:51:6d:c7:90:31:0a:d2:b8:65:
         c1:96:b1:3e:ca:53:18:5a:4c:93:5f:a3:31:49:d6:dd:ed:fd:
         7c:63:e1:ba:dd:20:84:c4:eb:38:ea:d9:56:fb:e6:0f:9f:31:
         a9:18:ae:a1:b1:41:84:2a:f8:61:37:01:1e:75:c9:1e:07:c1:
         02:55:58:35:97:3d:1b:8b:26:af:a3:20:9c:56:53:2a:39:63:
         01:d5:9e:a7:d2:fc:e7:a3:91:68:70:90:34:3e:c4:bd:91:de:
         2d:43:f6:b3:c3:0f:4c:b1:4f:ca:89:e5:26:59:a6:39:03:c2:
         6f:05:4d:35:39:1b:9a:d1:3f:c4:0e:34:35:5f:17:87:fa:f2:
         06:af:8c:73:60:36:01:14:f8:e6:ac:49:34:fb:e7:d7:cc:c4:
         88:1d:71:34:60:f6:c0:41:d5:0b:ad:60:fe:b8:a0:da:59:94:
         8b:f8:2a:b6:ef:2d:a7:51:07:25:d3:ce:26:8f:dd:87:59:c3:
         b7:aa:13:df:27:e5:39:34:11:68:4a:c1:5d:ae:18:f8:8a:3f:
         d2:15:5f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org