Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/t8sF0gPqknmc5Ph25olaiFj6Pn0.roa
File:                     t8sF0gPqknmc5Ph25olaiFj6Pn0.roa (raw, json)
Hash identifier:          hZTK+W0fy/XsKFMRImn7KQUbirl01KTDHjwzXJ2fzaM=
Subject key identifier:   B7:CB:05:D2:03:EA:92:79:9C:E4:F8:76:E6:89:5A:88:58:FA:3E:7D
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       A6
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/t8sF0gPqknmc5Ph25olaiFj6Pn0.roa
Signing time:             Tue 07 Jun 2022 10:33:22 +0000
ROA not before:           Tue 07 Jun 2022 10:33:22 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        222.7.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166 (0xa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:33:22 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=B7CB05D203EA92799CE4F876E6895A8858FA3E7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4a:4d:7a:cf:4a:3f:f2:d3:21:0e:d2:5a:ad:
                    e4:69:8f:7e:c7:05:55:dc:f9:5e:e6:61:52:ad:d6:
                    dc:66:fc:0a:87:fe:d5:10:63:40:3f:15:95:ec:d9:
                    e0:38:9b:5e:46:9b:1f:72:aa:23:c3:02:e1:d8:1a:
                    34:27:09:49:b7:50:32:ad:5d:52:1a:87:21:7e:ae:
                    c2:00:cf:85:04:fc:b3:c0:56:8c:a9:4e:79:f2:d0:
                    d8:6c:9d:de:66:33:b4:60:84:82:1c:97:e6:8f:f9:
                    cc:57:6b:8c:10:9d:57:0e:6c:25:c1:2e:82:c9:1e:
                    e2:04:52:c2:7f:47:2c:be:6a:38:5e:58:fd:a7:8e:
                    91:83:17:0f:5e:a4:c6:ee:4e:fa:5b:8d:a6:4d:60:
                    a4:ee:24:ee:46:22:00:2b:dd:7f:f0:3b:73:55:51:
                    fb:91:92:7e:9e:37:ab:f7:57:8f:31:5d:d6:b8:1f:
                    38:b8:47:e7:13:ab:7b:de:f7:64:b3:c0:df:c6:f9:
                    76:c7:eb:1a:15:94:29:b5:91:5e:77:2f:1d:8c:8c:
                    2a:22:99:5c:51:84:af:f0:c2:e7:6a:c6:f3:85:1c:
                    9c:d0:60:22:b0:52:bc:f1:21:ca:1b:8b:3d:51:d6:
                    fb:70:d8:49:f7:24:a5:37:ee:f4:86:82:9a:be:93:
                    6e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:CB:05:D2:03:EA:92:79:9C:E4:F8:76:E6:89:5A:88:58:FA:3E:7D
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/t8sF0gPqknmc5Ph25olaiFj6Pn0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.7.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         25:3b:f6:d5:f8:8b:33:fd:68:e4:25:93:56:bf:d5:06:3d:43:
         42:18:93:ad:e7:93:2d:12:75:8c:77:92:8d:23:32:4a:da:75:
         d3:ae:a8:8d:78:e0:c3:5d:21:c1:5a:2d:a4:7d:c1:f9:3f:bf:
         6b:fe:bc:32:a8:25:ae:ac:85:a0:50:91:01:d1:08:34:a4:28:
         89:3d:f6:bb:ad:3e:4a:32:87:48:67:9a:60:c2:9c:1f:85:8a:
         89:1e:c1:85:ef:0e:bb:76:9c:3c:19:0a:1f:1a:00:81:54:f4:
         7d:41:58:08:5f:31:f0:29:07:33:b1:00:3d:3f:95:4d:8a:51:
         47:b8:3b:78:1a:be:e4:27:64:a9:4d:34:a6:2d:6f:29:c7:78:
         cb:d8:39:58:c5:50:6e:81:d6:a0:b4:9b:71:b1:41:28:59:7f:
         4e:fa:6b:e9:af:0c:a0:36:f4:95:cb:8e:5c:01:a8:42:bf:db:
         ef:25:05:90:97:a5:06:13:16:de:b4:56:1e:9d:e1:bc:87:54:
         1e:2d:c4:0c:0a:7e:d0:72:f3:2b:0b:42:71:ad:90:55:03:67:
         1d:71:ad:db:60:30:79:4a:6b:07:5c:68:ac:68:f1:21:91:00:
         2d:48:de:71:f3:1f:36:fe:c3:54:5c:97:fd:71:8d:39:43:c3:
         9d:cb:5c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org