Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/sFMEJqOevVHADqrPk-LmogDScwA.roa
File:                     sFMEJqOevVHADqrPk-LmogDScwA.roa (raw, json)
Hash identifier:          O8L7nzYm2v3fDkHENrHhUDw4MzpbIvgBSV2jGZwPDYE=
Subject key identifier:   B0:53:04:26:A3:9E:BD:51:C0:0E:AA:CF:93:E2:E6:A2:00:D2:73:00
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       61
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/sFMEJqOevVHADqrPk-LmogDScwA.roa
Signing time:             Tue 07 Jun 2022 10:05:17 +0000
ROA not before:           Tue 07 Jun 2022 10:05:17 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        59.138.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:05:17 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=B0530426A39EBD51C00EAACF93E2E6A200D27300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a5:01:90:15:a6:70:b5:6c:1f:29:c9:78:d8:
                    90:3f:6b:f4:89:3e:38:d0:bb:7d:31:34:47:ad:16:
                    21:58:c7:0a:7e:13:98:42:72:cd:fe:f7:63:5d:61:
                    04:47:2f:b5:84:bd:d9:31:ce:37:5f:60:20:12:15:
                    0f:9f:b3:16:c6:30:3f:1b:4d:0d:2e:97:46:f5:e2:
                    c6:ff:6b:8e:78:d3:27:fa:d3:57:7e:d0:e0:8f:3e:
                    fe:82:8a:7d:7a:bd:0c:74:7d:fa:34:c8:76:e0:ed:
                    a6:dc:c0:a4:98:ee:1c:3d:06:1e:40:ad:c7:43:b4:
                    9c:0c:0b:4b:86:76:06:dd:a0:2a:4b:d0:94:c2:30:
                    5c:4d:68:37:4c:9a:09:24:90:c8:20:81:18:2a:88:
                    9e:49:35:26:ab:f1:b7:82:37:05:76:49:12:88:42:
                    f5:83:30:18:48:97:c8:0c:d2:e4:53:bc:3e:22:19:
                    e9:95:92:1e:9a:e9:0c:99:f7:c3:9b:5f:8a:5a:48:
                    36:bf:0d:0a:cd:06:7d:62:f0:b0:27:95:b7:7c:0e:
                    fa:0d:a1:d1:be:42:e3:58:6e:38:c5:b1:78:e7:99:
                    f8:93:d0:01:33:dc:8a:9d:83:f8:fa:1f:2d:4d:a1:
                    bc:24:b6:2b:10:80:b7:75:1f:0a:a9:57:2e:31:95:
                    0b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:53:04:26:A3:9E:BD:51:C0:0E:AA:CF:93:E2:E6:A2:00:D2:73:00
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/sFMEJqOevVHADqrPk-LmogDScwA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.138.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b3:7a:13:f8:16:a6:95:c5:66:fa:11:59:6c:c6:59:24:69:fe:
         d2:f1:a9:47:a1:29:01:1a:58:3f:2d:2e:e5:6a:28:c1:62:1f:
         9a:3f:79:b4:1a:b6:f5:14:d5:fa:d4:2b:44:4e:67:27:aa:97:
         8c:d0:b3:bc:7d:48:b9:13:bc:44:fd:2a:b4:75:c4:fd:52:48:
         46:23:6d:b1:3f:44:49:ae:c7:a8:43:ec:b8:f1:ac:13:f9:79:
         eb:54:54:4e:53:96:15:89:5a:2e:8e:94:7a:ac:4e:c8:db:a6:
         cd:3b:cd:ca:4b:08:1a:37:1f:92:e5:31:ac:e9:f3:17:e3:a9:
         6c:3a:de:07:e5:86:17:03:f6:cf:bf:8a:91:4b:59:7a:01:57:
         8e:f0:59:6a:33:30:75:e0:2b:4f:55:f1:87:41:80:8c:b5:05:
         fd:a5:89:98:0a:72:3c:88:4b:d3:7c:55:69:c2:f7:7b:ad:17:
         a3:ae:43:22:6f:52:be:9d:4c:40:6c:78:68:71:3f:f9:76:2b:
         c6:c9:41:99:4f:a4:ed:65:e5:82:3c:63:56:d2:14:e1:5a:97:
         ed:2a:99:cb:bb:43:eb:8d:25:dd:15:b8:85:b3:c7:5a:3d:7a:
         8b:a4:b4:65:d1:04:fc:ba:8c:d1:a8:04:27:aa:a9:fe:ca:10:
         0f:98:c5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org