Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/s9M1-h-fGWNHJcc3IyeHDFoduoI.roa
File:                     s9M1-h-fGWNHJcc3IyeHDFoduoI.roa (raw, json)
Hash identifier:          13jgCL07Tzkk/dgYHTE61Gj3MzDgkgRoRGGydS2R4r8=
Subject key identifier:   B3:D3:35:FA:1F:9F:19:63:47:25:C7:37:23:27:87:0C:5A:1D:BA:82
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       018E
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/s9M1-h-fGWNHJcc3IyeHDFoduoI.roa
Signing time:             Mon 01 May 2023 01:30:28 +0000
ROA not before:           Mon 01 May 2023 01:30:28 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        59.140.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398 (0x18e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:30:28 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=B3D335FA1F9F19634725C7372327870C5A1DBA82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:aa:f1:4b:bb:2b:9c:82:bf:de:44:38:8e:4b:
                    48:1f:a4:9c:48:b0:b6:21:05:19:5d:ae:62:4f:7d:
                    ca:78:09:00:83:8a:7f:11:cd:0b:44:c1:9e:4a:f8:
                    8d:18:3b:6a:e5:3e:d1:1c:8d:0e:a7:bd:b6:2b:c7:
                    85:c9:8b:d2:ae:ab:86:5a:7a:cd:cf:4d:a8:fa:67:
                    9b:8e:ff:e4:e3:89:9e:f3:86:7c:f5:7a:92:c5:10:
                    88:ea:43:cb:e2:eb:7e:fb:46:e3:4f:dd:e4:80:a6:
                    14:cc:a0:1a:7e:31:6c:67:c4:c4:28:ac:67:c0:43:
                    7e:20:d9:48:b0:b8:98:0c:79:2d:f4:ed:16:cd:a1:
                    d9:f8:32:77:41:ed:a2:74:56:80:b9:de:6d:0a:06:
                    1f:ec:75:0f:2e:91:bb:d1:c3:04:d4:b1:3b:de:27:
                    99:30:b7:6c:c9:1b:a3:eb:7a:8e:60:e8:57:e9:12:
                    41:6d:4d:0e:fd:3b:af:67:d5:84:9f:6d:4f:f3:d1:
                    18:7f:9c:3d:3d:71:fd:11:e7:da:fe:ca:b7:30:90:
                    09:d1:30:f2:11:78:75:97:39:56:da:44:03:0d:a6:
                    c0:35:5f:89:e6:6a:39:bf:bc:18:1c:14:a7:e1:37:
                    c7:a4:9b:13:f6:28:db:80:e9:a6:d7:c0:0f:a7:c3:
                    9c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D3:35:FA:1F:9F:19:63:47:25:C7:37:23:27:87:0C:5A:1D:BA:82
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/s9M1-h-fGWNHJcc3IyeHDFoduoI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.140.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         51:c1:76:d1:39:76:54:19:97:66:ed:ce:64:8b:76:74:93:ec:
         04:4d:a0:87:5e:5d:ae:fa:31:0d:73:6a:c2:e6:d7:6c:0f:fc:
         11:3d:34:1c:0d:f9:63:d4:8c:9f:cf:42:23:43:95:fb:0c:91:
         8d:4c:e7:ba:15:2b:67:3c:ba:3a:9b:a3:3f:6f:f5:91:86:ff:
         ee:bd:40:0b:bb:c1:70:77:7c:b2:a6:b1:78:11:47:2c:bf:11:
         27:69:1f:b6:75:ef:3e:5e:22:42:4f:a3:b6:8b:b6:e5:20:5b:
         45:72:d0:a3:f1:26:e2:4d:3e:57:3d:7d:d6:f1:6d:6b:6d:05:
         31:f6:eb:00:f4:c6:2b:2b:e5:0e:1a:ee:64:c7:be:e3:4d:ff:
         29:e3:41:ea:3f:18:47:65:2b:65:93:f8:d7:4d:d7:e8:6a:32:
         23:3c:64:eb:c2:8f:e0:3a:c3:69:90:1c:54:dd:ca:00:ad:78:
         e8:52:c0:76:9d:25:9f:fc:3f:8d:f0:df:25:fe:08:0c:47:aa:
         b7:2a:e9:ce:89:d9:7f:ee:95:63:89:27:a1:a3:31:c9:bb:aa:
         9b:82:e2:0e:eb:07:3f:c7:60:21:c8:a3:92:d2:91:32:2d:40:
         c6:7e:79:84:cc:42:30:8c:60:b3:3a:02:9a:ac:9f:fd:3b:ad:
         04:f2:d6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org