Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/q9MHJlF4B5EFGJ1Ka_jYn-UrlY4.roa
File:                     q9MHJlF4B5EFGJ1Ka_jYn-UrlY4.roa (raw, json)
Hash identifier:          OLMirh3MWGT2njunXyNU92qaMLVljMjeNbIx7n84w+Y=
Subject key identifier:   AB:D3:07:26:51:78:07:91:05:18:9D:4A:6B:F8:D8:9F:E5:2B:95:8E
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0174
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/q9MHJlF4B5EFGJ1Ka_jYn-UrlY4.roa
Signing time:             Mon 01 May 2023 01:28:46 +0000
ROA not before:           Mon 01 May 2023 01:28:46 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        113.151.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 372 (0x174)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:28:46 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=ABD307265178079105189D4A6BF8D89FE52B958E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8e:bb:bc:e5:af:b1:a0:91:e5:53:62:38:a7:
                    42:05:5e:09:7e:5a:4e:42:e3:64:c0:b4:75:80:a2:
                    7a:7b:82:75:49:02:ee:a4:7a:8e:42:76:c7:96:88:
                    1b:d4:97:23:a8:3c:ef:9c:e7:76:d3:69:e3:09:b9:
                    23:d4:2b:4c:eb:25:d7:e6:d8:c9:76:e0:73:73:1d:
                    31:00:49:f9:45:4d:53:22:f5:88:a0:16:dc:f8:bd:
                    4b:b5:1f:9d:a5:38:0b:56:d6:05:36:b4:84:3e:ca:
                    c2:1e:80:a5:b9:75:64:86:81:bb:df:8c:f3:4a:7b:
                    92:79:54:d9:dc:ba:53:9b:46:1a:1d:5c:70:ff:59:
                    27:57:ca:e9:cd:5c:e6:03:16:93:d8:a5:7e:32:b4:
                    d8:c3:86:f8:be:ba:09:61:e4:7b:f9:aa:f4:c8:53:
                    84:ad:b8:98:2b:4f:3e:46:6d:d4:6d:69:7e:b7:96:
                    00:75:58:18:16:16:09:09:54:46:82:a9:74:3a:cd:
                    05:26:c2:79:6f:ee:bf:f4:e7:16:b9:fa:29:13:f1:
                    d1:9b:d8:3f:bd:9d:f2:e2:f5:7a:d3:92:a0:79:2e:
                    a0:20:39:13:fc:36:a5:cf:bc:7e:b0:3d:97:ec:41:
                    5b:3b:82:4b:65:28:11:dc:af:b2:42:73:2f:ef:d4:
                    67:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:D3:07:26:51:78:07:91:05:18:9D:4A:6B:F8:D8:9F:E5:2B:95:8E
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/q9MHJlF4B5EFGJ1Ka_jYn-UrlY4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.151.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         34:f1:df:6b:bb:55:0e:5a:50:9d:75:88:2f:58:be:c2:00:dc:
         13:ad:b0:d7:cd:8b:58:55:3d:ae:e3:b0:d0:46:d2:51:70:dd:
         67:2c:0d:03:ec:b0:e2:1e:72:7c:53:93:50:4a:6c:1a:17:7d:
         9f:77:49:13:5e:f3:49:fb:b8:a0:48:9e:04:60:fa:6b:3e:35:
         db:91:ad:e8:dc:9b:02:1f:73:04:58:66:e0:23:a1:71:d7:2d:
         83:0a:65:6d:c8:e5:f5:e2:b1:5e:96:f4:70:e3:02:80:78:2e:
         a4:83:21:ea:d7:6f:6a:1e:52:d0:d4:ea:76:57:17:56:5b:c9:
         29:34:1f:81:44:51:4b:b9:40:61:1f:f1:38:1a:58:d9:91:78:
         83:c6:3f:d2:a7:bc:1e:75:c7:85:39:d7:6f:f0:7f:36:f8:0c:
         a6:b4:04:26:5b:df:f5:fd:b8:2c:9d:ba:41:13:3e:fe:45:97:
         72:5d:ab:b1:85:a1:31:90:bd:d8:ca:33:58:19:3c:42:1b:56:
         2e:42:fd:7b:22:ac:26:43:30:51:d3:80:2d:63:a9:7d:98:2b:
         b2:45:8d:34:f5:51:4e:ea:9a:a6:bb:e1:4c:48:9c:1e:8d:eb:
         b1:9b:9c:4a:c7:13:7c:47:8f:b3:4e:fa:f7:a8:07:da:f4:5e:
         eb:43:59:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org