Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/tgt-kDyjBOUru7D1COXx-JcR-mQ.roa
File:                     tgt-kDyjBOUru7D1COXx-JcR-mQ.roa (raw, json)
Hash identifier:          k14ra0l+5G8fxP9AQfF3W2RGTUBd0O105nvyCKOhEZ0=
Subject key identifier:   B6:0B:7E:90:3C:A3:04:E5:2B:BB:B0:F5:08:E5:F1:F8:97:11:FA:64
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0141
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/tgt-kDyjBOUru7D1COXx-JcR-mQ.roa
Signing time:             Fri 28 Oct 2022 05:27:35 +0000
ROA not before:           Fri 28 Oct 2022 05:27:35 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        61.202.0.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 321 (0x141)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Oct 28 05:27:35 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=B60B7E903CA304E52BBBB0F508E5F1F89711FA64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:18:c2:1a:46:cf:23:f8:3f:99:16:a9:6e:b1:
                    e7:05:52:1b:78:7d:11:66:20:22:26:00:37:75:3c:
                    c0:a8:a6:fe:e3:dc:3e:79:1a:df:98:aa:98:39:e8:
                    39:b3:2a:47:d9:11:2e:51:cf:67:17:12:ed:75:2a:
                    42:3f:95:c6:90:68:4c:21:c6:b7:9a:86:f1:f3:db:
                    9f:d0:9c:72:06:95:7c:f7:83:e5:2f:d1:99:57:9e:
                    09:36:0b:e2:80:db:26:4b:a3:22:7f:e6:e8:cc:67:
                    ef:8d:21:ec:c5:58:81:60:c9:87:de:6b:28:a7:c1:
                    b5:63:6a:2a:6f:1c:25:1a:76:8a:a3:fb:91:83:46:
                    2c:98:20:f2:c9:21:d7:65:85:3b:33:6b:ed:25:cd:
                    ac:b7:36:ab:02:d6:37:d4:1d:c0:6c:df:f7:6e:b6:
                    90:d0:3d:13:4f:af:af:1a:f9:6c:44:f3:7a:5f:6d:
                    0d:b9:63:ad:5d:cd:94:b8:12:ae:c1:c7:07:f0:37:
                    89:2c:8e:36:6d:c3:52:33:c7:be:68:26:24:b4:5a:
                    ca:43:bf:ac:7a:c5:e3:d7:7a:4a:3c:f4:f9:cf:c8:
                    a3:f9:dd:ba:ed:88:46:32:84:a7:8b:b7:d9:72:00:
                    94:52:d3:93:85:b1:b4:6a:c8:f6:3c:73:ee:b8:e3:
                    ed:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:0B:7E:90:3C:A3:04:E5:2B:BB:B0:F5:08:E5:F1:F8:97:11:FA:64
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/tgt-kDyjBOUru7D1COXx-JcR-mQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.202.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         9c:c6:ec:21:a9:56:df:7e:07:af:82:79:a3:00:2b:df:a8:b3:
         bb:ca:1e:db:3b:f9:6f:6d:14:1a:53:16:34:22:a3:7e:39:ea:
         8f:9d:88:34:24:13:32:36:ff:31:f9:f6:c1:0c:ed:a7:71:55:
         a7:6c:bd:31:28:62:c0:42:1d:44:85:71:c0:57:99:c1:95:d6:
         90:6f:3f:c0:2c:66:fa:1c:09:ff:b3:2f:26:f5:e8:96:1f:42:
         e4:1f:45:99:5f:fe:47:e5:fd:08:56:bc:25:ed:1b:bc:84:d8:
         ff:fb:f3:de:65:6f:91:ff:1a:5a:0c:78:4a:a7:5f:b9:ce:a1:
         dc:5c:fe:79:ca:75:71:f2:62:e2:b5:e8:c4:b8:2f:8a:0d:d8:
         58:d4:ac:64:03:03:e3:85:f9:8f:19:c9:7c:83:ff:6c:a8:1b:
         07:6e:22:6d:d9:75:f9:bf:e4:4e:8d:20:db:d2:b5:d8:a7:8d:
         7e:55:d4:d5:1d:c8:ff:6f:cc:62:a4:d8:29:e2:2d:7f:d9:c5:
         3e:c0:e0:01:69:af:39:4d:cc:9e:f5:33:ad:98:f9:89:08:17:
         4f:5c:ab:72:4f:24:f0:50:bb:d6:2a:a4:9b:3f:43:0d:30:05:
         d9:55:11:38:d9:85:91:0c:bd:c3:06:dd:cb:ac:28:23:ad:84:
         b0:2d:9d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org