Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/su7VoRslBtYkuq6gV4hVH1XLHn4.roa
File:                     su7VoRslBtYkuq6gV4hVH1XLHn4.roa (raw, json)
Hash identifier:          OvRRoRu7klO+WB+fRKOAGt7gR/dNMy+WFfzkZem1sAQ=
Subject key identifier:   B2:EE:D5:A1:1B:25:06:D6:24:BA:AE:A0:57:88:55:1F:55:CB:1E:7E
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       01EC
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/su7VoRslBtYkuq6gV4hVH1XLHn4.roa
Signing time:             Mon 01 May 2023 01:33:48 +0000
ROA not before:           Mon 01 May 2023 01:33:48 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        222.15.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 492 (0x1ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:33:48 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=B2EED5A11B2506D624BAAEA05788551F55CB1E7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:56:f1:80:9a:96:03:64:fd:c3:dd:98:cf:8e:
                    cd:98:ea:d1:55:c6:c0:62:56:7d:fd:e9:7e:cc:e0:
                    40:4c:80:1e:b7:97:b9:5f:c5:e2:91:a3:b1:be:9d:
                    2d:2d:f9:25:20:b0:8f:bd:78:e6:d1:a2:37:a7:3b:
                    3d:2c:51:cd:da:85:79:81:a9:3d:c6:9e:b6:cd:53:
                    0b:eb:b1:56:fd:05:e3:92:3f:82:90:6f:f1:a3:94:
                    78:79:8f:80:d2:7b:13:ef:52:3c:e1:83:64:81:b2:
                    d8:84:c7:cd:c3:fb:a8:85:73:eb:6a:9d:e9:68:f1:
                    db:95:bc:bf:49:47:da:96:67:a4:c8:42:af:51:eb:
                    27:05:99:2a:0e:a0:a6:86:c6:23:2b:29:bb:2d:e1:
                    a1:fb:b4:90:c2:14:92:ee:82:e9:58:39:71:06:7b:
                    09:77:ae:71:d3:b6:de:a1:5a:74:4e:95:12:36:7c:
                    2f:0c:4d:5c:c4:f9:58:9b:30:82:b9:a5:78:09:bf:
                    52:e9:df:ca:1c:f2:0a:80:86:7a:a2:07:c5:12:32:
                    65:b9:bf:ac:6e:78:57:5d:9d:bf:61:23:ee:f9:6f:
                    4b:4b:9d:ac:1a:b1:08:f7:c2:ce:cc:91:70:65:53:
                    dc:02:92:4d:47:24:fc:aa:ec:23:f1:66:0c:ad:ee:
                    21:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:EE:D5:A1:1B:25:06:D6:24:BA:AE:A0:57:88:55:1F:55:CB:1E:7E
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/su7VoRslBtYkuq6gV4hVH1XLHn4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.15.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         21:47:c8:63:1d:64:ac:d2:32:b7:8f:56:70:01:31:cb:61:ca:
         a1:31:7d:4c:f6:d1:ed:47:4a:9e:9a:9a:bc:0c:77:56:9b:10:
         ca:76:42:87:78:46:24:2c:98:2d:1f:f9:99:e3:04:aa:f4:43:
         51:16:fd:af:bd:28:99:6f:27:0c:b9:50:16:a0:b5:03:ce:70:
         3f:4b:7c:76:5d:95:6e:61:47:b5:4e:00:dd:e8:44:d4:13:7e:
         41:e0:a4:3a:12:f3:f9:21:7b:88:1b:af:0f:03:bc:db:65:db:
         c3:68:d7:62:8f:66:63:7f:c3:aa:9f:e6:3a:c7:6a:e8:54:3a:
         bf:a6:1d:95:2a:82:59:63:9a:bf:41:f1:9c:bd:d6:c3:9c:3f:
         8f:ea:c2:2c:03:cf:60:aa:ca:a8:15:32:f2:12:67:ac:02:5b:
         ea:fa:e2:be:4e:43:aa:c3:92:ef:4d:bb:44:34:4a:27:54:b5:
         2a:6c:6a:dc:e3:9f:11:1d:16:25:de:be:e7:5f:fc:36:2d:ae:
         0e:92:69:bd:9e:ed:f9:a6:76:42:95:8e:86:9f:79:83:f8:43:
         26:f9:fb:2f:77:ad:57:23:11:c2:a7:75:02:b8:07:5a:ea:ff:
         b8:56:e2:e9:6a:08:ab:b6:9e:fb:ad:d0:fd:ea:02:27:f9:c6:
         ae:25:9e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org