Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/rY91GmtXglQKLv9pWsRh1bIMnsU.roa
File:                     rY91GmtXglQKLv9pWsRh1bIMnsU.roa (raw, json)
Hash identifier:          ogSvUFk/Dl2eCCvCbz/Wqc3mVFR+tXvZ1KwaDg60Hyg=
Subject key identifier:   AD:8F:75:1A:6B:57:82:54:0A:2E:FF:69:5A:C4:61:D5:B2:0C:9E:C5
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       01B0
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/rY91GmtXglQKLv9pWsRh1bIMnsU.roa
Signing time:             Mon 01 May 2023 01:32:05 +0000
ROA not before:           Mon 01 May 2023 01:32:05 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        124.211.128.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 432 (0x1b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:32:05 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=AD8F751A6B5782540A2EFF695AC461D5B20C9EC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:44:52:2b:92:fc:8d:33:00:a9:5f:11:e9:2a:
                    ea:2a:33:85:42:4d:9f:ed:26:29:55:bb:fa:94:88:
                    af:1b:07:9a:b4:9f:bb:05:8a:1e:71:46:31:38:3c:
                    89:c3:7f:ec:f0:a0:09:1b:61:fc:5f:58:74:93:c7:
                    23:13:a7:63:4f:31:a8:c6:4b:ab:4f:54:36:51:23:
                    94:50:1c:1a:7a:44:df:f6:7b:d5:0b:61:46:fc:0c:
                    40:44:6a:82:13:04:1e:c9:0f:4d:ad:53:82:e2:c2:
                    ba:43:c0:69:02:fa:6d:48:8d:a2:17:2b:bc:42:38:
                    37:e4:a7:06:b2:d5:9f:59:9c:c0:f8:6b:1f:34:ee:
                    79:41:d1:f4:e8:d5:2e:7a:3d:05:19:5a:d0:fd:e5:
                    8e:2f:11:58:05:37:7e:0d:57:41:16:3e:85:81:c2:
                    fc:66:7e:a7:48:7f:24:cf:28:33:bf:45:eb:f4:d2:
                    6c:f0:d6:90:be:ad:9b:b1:51:d9:84:5c:17:c9:dd:
                    f0:2c:4b:0e:2c:c2:cf:7c:7d:2c:ab:77:56:08:75:
                    16:48:82:12:3f:02:30:c7:37:4c:89:4d:df:a8:30:
                    47:ba:f5:68:1b:4c:49:67:c7:40:34:59:26:26:06:
                    3f:98:26:e0:79:8b:05:4d:08:d2:d2:73:dc:16:fc:
                    7e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:8F:75:1A:6B:57:82:54:0A:2E:FF:69:5A:C4:61:D5:B2:0C:9E:C5
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/rY91GmtXglQKLv9pWsRh1bIMnsU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.211.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         43:0b:93:62:18:1d:15:14:a5:5e:0d:86:dc:d9:8d:fa:4f:cd:
         29:9e:da:6e:f7:16:37:3f:6f:5b:a5:a7:b8:7e:a9:5f:34:e1:
         0a:b0:50:52:4a:ce:0e:79:5e:79:7a:93:bc:af:79:5a:c9:08:
         87:a5:aa:2f:9d:a0:24:55:c4:9a:31:0d:13:7f:74:b9:02:35:
         58:5e:2b:27:a8:67:96:25:15:cc:6b:8c:eb:17:9b:53:ad:ba:
         32:e2:7b:41:36:45:d0:31:cd:f7:0e:b8:eb:87:7c:5f:df:ca:
         5a:9d:2e:65:bd:71:d0:32:fa:1b:74:e7:a1:0d:43:72:66:6d:
         52:d5:83:b4:71:5d:5d:d7:98:6e:4e:57:95:ac:2f:66:b2:19:
         cb:63:ab:2c:62:7b:30:a0:15:db:d0:b0:8d:7d:16:db:25:38:
         da:c9:06:e4:a0:b2:a9:56:43:f4:56:d1:89:38:ef:f6:93:ae:
         43:7f:32:11:21:1d:6b:7d:5e:a3:75:5f:23:66:66:d7:0d:46:
         3a:53:85:dd:1f:98:49:5c:42:2a:74:74:48:09:5e:43:b6:2b:
         ae:91:bf:ce:68:9c:4d:3b:ef:c7:84:b9:81:bf:b2:33:d5:d4:
         09:8c:12:a0:94:af:6d:d0:98:b5:4b:7e:6a:30:3e:75:c2:1c:
         f3:9b:e3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org