Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/taCdsKuCPf4jWpH30pIAno--gmU.roa
File:                     taCdsKuCPf4jWpH30pIAno--gmU.roa (raw, json)
Hash identifier:          YwS7iba1MPgxFqBj8pL5PNCxZ4JZn4ULMjsAAAy+WTM=
Subject key identifier:   B5:A0:9D:B0:AB:82:3D:FE:23:5A:91:F7:D2:92:00:9E:8F:BE:82:65
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       5E
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/taCdsKuCPf4jWpH30pIAno--gmU.roa
Signing time:             Tue 07 Jun 2022 10:05:16 +0000
ROA not before:           Tue 07 Jun 2022 10:05:16 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        59.136.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:05:16 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=B5A09DB0AB823DFE235A91F7D292009E8FBE8265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:72:f8:c8:26:24:ee:66:c5:fe:7a:4a:53:73:
                    d4:8a:11:d2:d3:ad:f8:02:8a:2a:2e:51:df:c4:c3:
                    cc:b4:5a:13:a5:cf:44:e8:92:c7:07:2e:1d:14:01:
                    2a:d5:6a:dd:69:19:4b:62:c5:f9:41:9e:ab:a3:37:
                    fa:d9:21:35:4e:9e:f1:a6:85:29:f9:db:f5:f2:a3:
                    35:52:4d:dd:f3:63:b2:90:5e:0c:4b:c6:2b:54:a9:
                    a7:66:be:95:ee:b4:38:70:90:2b:c9:83:9c:bf:55:
                    df:3b:41:7c:46:52:13:e7:87:82:f5:b5:59:06:f1:
                    18:7c:e4:3b:48:62:e7:77:90:59:75:1a:1a:3a:8d:
                    0a:0f:e3:e5:52:48:32:c2:f2:d0:84:2a:01:41:29:
                    f1:df:0f:e5:80:c5:f4:6d:71:79:95:21:d3:e7:bd:
                    d5:50:92:7d:f6:40:11:9b:69:f7:29:9a:fd:7c:23:
                    ec:51:cd:06:15:ac:e8:cc:12:06:78:73:4f:d0:32:
                    97:2a:7b:fd:55:5f:89:54:1f:8f:1e:13:3c:51:1b:
                    cb:9a:e4:ba:b6:c5:fe:4e:da:91:73:d0:99:ac:43:
                    9f:98:64:e8:9d:dc:ca:ab:1b:66:b6:95:5e:a0:45:
                    bb:2e:9f:f4:7e:d0:97:af:8e:98:1f:69:22:a5:3a:
                    31:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A0:9D:B0:AB:82:3D:FE:23:5A:91:F7:D2:92:00:9E:8F:BE:82:65
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/taCdsKuCPf4jWpH30pIAno--gmU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.136.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         64:04:78:ff:f3:9a:cd:0d:53:17:71:a1:cc:39:25:d8:3b:ec:
         9e:52:97:61:f7:07:b1:ba:25:39:57:d8:a6:a2:0c:89:40:54:
         97:f1:ec:ab:8f:7d:12:18:40:40:d9:66:72:49:39:0c:82:63:
         76:45:f1:8a:c2:d4:54:13:b4:f4:cb:e7:25:f5:5b:61:a6:6a:
         96:c6:b2:82:02:d4:6f:f7:f8:ca:c4:a2:5d:5f:a6:2e:ba:12:
         1d:89:8b:b1:9a:df:f5:dc:1d:d4:54:94:1d:d6:43:0b:37:49:
         f3:e8:f9:ab:b3:c6:3a:82:14:27:14:09:42:16:f8:31:29:ff:
         56:fd:c1:e0:4b:2d:a3:76:41:8e:c6:09:84:a0:4b:18:cd:4c:
         4f:03:2d:d8:c5:7a:88:b5:57:45:1e:1d:13:b3:91:f1:1d:02:
         2b:d7:a1:38:1b:3d:0f:c2:f8:9d:07:86:57:ae:80:5d:b0:5b:
         b5:58:4c:db:4d:58:d7:3a:85:9f:c7:bd:27:e7:00:39:da:db:
         d5:f8:11:42:dc:86:da:56:6c:b8:75:3c:61:6d:3f:cf:2a:48:
         39:ea:25:3e:ff:3c:ed:8d:dd:2c:aa:7b:9c:f7:48:30:4c:ee:
         ef:6e:8a:63:e2:f5:76:c5:29:07:31:7a:69:29:af:50:ad:24:
         ba:4d:3c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org