Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/s7ru1NF-f9BeGOQUynFsCdXwA68.roa
File:                     s7ru1NF-f9BeGOQUynFsCdXwA68.roa (raw, json)
Hash identifier:          I0vsbiZGY/+OffzahebieKaHIIRbXU4E45O6ch4H6pM=
Subject key identifier:   B3:BA:EE:D4:D1:7E:7F:D0:5E:18:E4:14:CA:71:6C:09:D5:F0:03:AF
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       74
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/s7ru1NF-f9BeGOQUynFsCdXwA68.roa
Signing time:             Tue 07 Jun 2022 10:09:11 +0000
ROA not before:           Tue 07 Jun 2022 10:09:11 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        121.110.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:09:11 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=B3BAEED4D17E7FD05E18E414CA716C09D5F003AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7c:b4:84:07:0a:a5:14:cf:e8:0c:82:c1:85:
                    d0:51:68:56:22:cf:90:de:eb:ef:26:1d:31:a7:1e:
                    f7:4f:96:36:65:00:4c:e7:cf:d3:e2:34:a9:00:00:
                    2b:61:d1:a1:cf:3c:83:30:28:27:18:3d:62:e8:c0:
                    11:93:ec:77:66:ad:e3:d8:cd:f2:89:e0:41:8d:98:
                    91:aa:bc:5e:a8:5b:0a:4c:5f:d5:53:22:4f:29:7d:
                    1f:b0:ce:6b:8b:b5:ef:b4:d9:ac:c1:92:e0:7f:7c:
                    50:a4:50:4e:73:9b:d4:59:f7:76:84:d5:d2:89:ab:
                    01:ce:25:43:ec:ec:9c:0c:0f:fe:00:aa:47:18:e8:
                    9c:87:63:5e:c7:b6:97:db:e1:f3:4e:68:05:b2:cc:
                    c0:fc:86:f8:23:2a:04:af:88:0f:1e:3c:fe:26:22:
                    ec:b7:33:de:92:a2:95:70:73:20:0a:b0:28:f1:04:
                    4c:11:28:1b:98:86:18:8e:e5:45:8d:89:a4:16:17:
                    d7:e5:3e:5d:1a:2a:fe:38:52:3e:93:69:0c:aa:09:
                    5a:f4:b8:12:b8:7c:8e:af:79:77:01:dc:41:69:30:
                    3d:d2:4e:71:d1:23:ab:e8:ca:50:da:42:69:15:dd:
                    af:74:41:fb:77:5b:64:75:1d:6a:ac:4f:2e:23:08:
                    ac:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:BA:EE:D4:D1:7E:7F:D0:5E:18:E4:14:CA:71:6C:09:D5:F0:03:AF
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/s7ru1NF-f9BeGOQUynFsCdXwA68.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.110.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7c:9a:3a:b3:f6:78:78:07:30:1f:5a:18:a3:a4:49:bf:49:30:
         df:e6:bc:16:bd:e1:71:ff:4a:fb:f5:df:af:a7:94:6b:55:96:
         09:c5:c9:da:ef:c5:06:d0:e9:26:bf:ff:d2:1d:49:3e:2e:79:
         37:63:67:af:fb:80:52:94:eb:f3:ce:27:ea:83:d2:08:1a:fb:
         44:33:ab:f6:0c:c9:ad:cb:ae:65:fc:72:bc:b4:c8:02:43:30:
         24:3f:0b:17:11:d7:e0:cd:af:b1:02:13:4f:a4:06:17:34:f7:
         18:b8:32:ec:48:fa:19:72:9b:38:d3:b2:88:90:aa:03:a1:1a:
         85:01:19:84:e0:c1:d0:ee:5d:b3:f7:f3:4f:4e:84:7e:a2:e7:
         2d:73:ea:97:a6:e3:ab:17:31:b0:1c:ec:9f:9c:f2:3e:f6:25:
         5f:02:91:b7:d3:89:3f:ed:87:26:16:c9:c9:92:da:e4:45:4d:
         90:4c:3f:65:2d:a9:13:18:95:72:af:a3:16:05:53:e2:95:ad:
         ee:3e:37:74:79:11:fc:8d:93:12:f1:c0:21:e2:ea:f7:19:10:
         b5:b8:23:0b:08:ab:f3:b9:87:97:2a:6d:78:e9:f3:1f:0c:79:
         e8:05:9d:33:4f:c0:6e:73:7d:3b:8b:10:e9:73:36:10:e7:94:
         a0:8c:1e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:02 2023 by rpki-client on console-fra.rpki-client.org