Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/sYnqZhSmee8_a2088SbcbecYWx0.roa
File:                     sYnqZhSmee8_a2088SbcbecYWx0.roa (raw, json)
Hash identifier:          dLQvRLOrgCZiHjus/azZSMdhWE6YJEXtb42y+JdEKaU=
Subject key identifier:   B1:89:EA:66:14:A6:79:EF:3F:6B:6D:3C:F1:26:DC:6D:E7:18:5B:1D
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       5B
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/sYnqZhSmee8_a2088SbcbecYWx0.roa
Signing time:             Tue 07 Jun 2022 10:03:11 +0000
ROA not before:           Tue 07 Jun 2022 10:03:11 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        59.135.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:03:11 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=B189EA6614A679EF3F6B6D3CF126DC6DE7185B1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9e:cd:b0:9f:e3:a9:bd:fc:d9:d8:e5:0b:88:
                    3a:6c:5b:ba:49:ff:c9:9e:29:28:ae:94:6c:9a:f6:
                    f7:ae:16:a8:e5:41:08:9b:8c:02:60:8a:1e:93:72:
                    96:79:e4:b4:f8:9d:b3:f9:cd:02:ca:f9:e0:96:53:
                    8d:00:84:c1:39:33:0f:ff:c3:52:bc:a0:dd:10:ba:
                    8d:af:c3:a8:4e:d3:a0:f1:7e:75:b4:5c:6e:57:f3:
                    b1:81:b0:d4:78:ab:ac:27:bf:b2:23:4b:1f:f7:d9:
                    2e:ed:15:69:49:0b:2a:7a:e2:71:12:b0:a6:94:0f:
                    54:ea:b8:81:97:8e:30:65:74:3f:31:ad:31:e3:27:
                    d7:c5:bd:af:1d:06:22:f8:46:25:ee:3f:42:76:97:
                    ee:fa:62:0c:4a:38:ec:01:5c:9e:a7:07:3f:41:70:
                    ac:3b:8d:32:91:9f:93:33:93:7a:c5:eb:4d:0e:36:
                    a5:d4:cc:dc:d9:3c:af:9c:ab:02:61:04:1c:91:36:
                    d8:f0:06:91:fd:f8:fe:1e:fb:52:b7:e3:53:88:86:
                    10:75:74:69:4c:36:f5:20:0c:30:9d:e1:fc:94:c7:
                    22:8d:bd:ba:15:c4:13:40:19:f6:3c:13:ce:b7:71:
                    88:64:f4:a3:35:8a:af:b2:87:32:5d:23:d6:83:df:
                    d6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:89:EA:66:14:A6:79:EF:3F:6B:6D:3C:F1:26:DC:6D:E7:18:5B:1D
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/sYnqZhSmee8_a2088SbcbecYWx0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.135.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         22:2c:4a:e2:fc:2a:ca:41:2d:19:73:f9:bc:80:18:8a:80:a9:
         4f:a0:79:f3:79:2c:85:2c:0b:04:9c:81:d0:2e:3e:bb:19:79:
         25:29:94:80:20:46:f3:6b:1a:44:89:d5:d6:ae:b0:6a:42:8f:
         7d:eb:90:75:70:09:7a:80:dd:e9:1b:ac:12:d5:c2:a1:a8:de:
         09:8d:af:02:ef:f6:32:dc:b9:2c:3e:3b:3b:a6:78:ed:39:d8:
         1d:cf:45:1f:12:56:9b:0c:64:2e:a0:5a:e9:c7:5c:e2:f9:84:
         cf:36:90:49:f1:eb:08:f4:dd:b3:e6:b0:90:fd:cb:38:d7:99:
         f7:c2:ac:56:7c:2b:77:fb:4c:b0:8d:1c:c0:7b:94:47:39:78:
         ac:4f:a4:42:ca:5d:c9:de:40:11:e2:75:b4:d2:19:51:90:45:
         46:9f:22:68:cd:44:8f:e5:db:75:05:23:61:8d:c1:c2:6d:9f:
         98:62:df:9f:59:a6:19:5c:c7:f4:2a:68:2a:bc:e2:d4:c9:11:
         86:21:5f:05:44:4b:18:da:e2:2f:39:f1:ac:4b:85:ed:72:c1:
         37:99:9b:b9:6a:d8:c7:89:5a:4d:96:c2:37:c6:2a:b5:72:8a:
         de:aa:a0:41:f5:43:a1:1b:ef:78:c3:89:dd:3a:c9:15:b1:85:
         97:fb:dc:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org