Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/tUf63R_nNuDjpOJbkUPEhcP8Wrc.roa
File:                     tUf63R_nNuDjpOJbkUPEhcP8Wrc.roa (raw, json)
Hash identifier:          jkMDGzzbfEPCi5x79Bwp2jTvg/5qvu/2/76ZDOZX68Y=
Subject key identifier:   B5:47:FA:DD:1F:E7:36:E0:E3:A4:E2:5B:91:43:C4:85:C3:FC:5A:B7
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       33
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/tUf63R_nNuDjpOJbkUPEhcP8Wrc.roa
Signing time:             Thu 28 Apr 2022 09:16:40 +0000
ROA not before:           Thu 28 Apr 2022 09:16:40 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     2516
IP address blocks:        59.132.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Apr 28 09:16:40 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=B547FADD1FE736E0E3A4E25B9143C485C3FC5AB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:81:94:4b:cb:ec:35:2a:59:5b:de:b2:65:2b:
                    af:70:db:ee:f6:7f:43:30:bd:7e:f9:8e:c1:9b:61:
                    9e:a9:3c:ac:11:a4:38:9a:04:8c:66:e9:78:dd:a6:
                    e3:85:60:8d:1f:85:0a:3c:31:6f:74:28:e1:61:3c:
                    70:68:c8:e5:20:2f:86:ab:23:9f:2c:15:bf:39:17:
                    a6:0a:01:88:b7:11:8e:e3:b9:a9:a7:81:8b:1a:da:
                    04:df:52:4c:46:a4:1e:7a:9f:52:79:87:2c:9c:0e:
                    86:91:6d:69:93:3a:ac:bd:07:0b:29:4f:54:e6:03:
                    57:3c:b2:e3:60:c6:67:99:74:55:30:6d:70:fd:25:
                    ff:85:9f:a7:44:a8:29:2a:ef:d4:61:28:71:67:9d:
                    bf:fa:be:a5:9d:2f:43:85:00:85:db:93:b6:3c:b3:
                    09:ab:05:6e:d6:62:6f:d7:df:11:23:11:f1:dd:37:
                    b2:79:bf:6c:2c:db:d5:38:9a:32:7a:ca:e0:5a:61:
                    db:65:11:cb:39:ee:78:48:c8:a6:86:79:44:38:f4:
                    03:13:5c:d2:29:d2:c8:18:9d:2b:c8:98:64:a5:97:
                    51:f3:92:61:6c:f9:85:99:c1:37:08:a5:f8:bf:ba:
                    25:c7:af:d8:56:d1:3c:60:f5:68:93:9e:f3:f5:a9:
                    f2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:47:FA:DD:1F:E7:36:E0:E3:A4:E2:5B:91:43:C4:85:C3:FC:5A:B7
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/tUf63R_nNuDjpOJbkUPEhcP8Wrc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.132.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         21:98:55:86:97:54:14:95:61:9e:b7:7e:43:00:c4:80:60:3b:
         60:c9:e6:f4:54:21:15:79:3a:53:c2:4d:0e:88:a3:4d:61:64:
         cb:4b:3d:84:d7:be:64:aa:b2:2c:1c:48:5e:e1:7e:d3:23:67:
         68:5f:e6:3f:e6:45:75:c2:90:a3:0d:6e:d7:40:16:44:84:7e:
         1f:fe:e3:0b:66:c7:cb:43:4e:ad:93:6b:ef:97:23:56:8f:dc:
         60:ad:46:4d:5d:4a:ae:c7:47:76:68:40:5f:1a:bb:3b:89:97:
         5f:0d:d9:32:6b:db:ed:93:bc:42:9c:2e:e8:8e:71:21:9b:66:
         7f:1a:12:58:c7:98:d4:c7:92:5d:5a:9d:fd:8f:12:fd:08:f2:
         61:10:73:6e:46:5a:50:80:72:2f:00:b6:48:fb:7f:55:64:c4:
         bf:ce:21:65:e1:a0:7f:5b:37:a4:e6:63:ee:17:d1:aa:a0:fd:
         84:5f:08:14:60:fe:7f:c4:a4:7d:28:a1:69:c6:90:f3:5c:81:
         c1:ab:0f:05:72:3b:58:96:8e:56:a9:fe:87:32:ec:69:90:05:
         fa:26:d3:1f:07:9d:a2:3b:bf:87:e9:3d:e8:5c:a7:00:2d:7e:
         97:30:67:b1:44:c5:46:95:61:95:7f:e1:66:e2:65:51:77:1c:
         15:56:08:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:38 2024 by rpki-client on console-ams.rpki-client.org