Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/tiWbWvjpZlA2l3zie1L91ruABj0.roa
File:                     tiWbWvjpZlA2l3zie1L91ruABj0.roa (raw, json)
Hash identifier:          wUe2yX2/5nsWyJWufrQ+glwhDB8WP+uCW9Z5mIu6ixA=
Subject key identifier:   B6:25:9B:5A:F8:E9:66:50:36:97:7C:E2:7B:52:FD:D6:BB:80:06:3D
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0178
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/tiWbWvjpZlA2l3zie1L91ruABj0.roa
Signing time:             Mon 01 May 2023 01:28:47 +0000
ROA not before:           Mon 01 May 2023 01:28:47 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        113.154.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 376 (0x178)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:28:47 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=B6259B5AF8E9665036977CE27B52FDD6BB80063D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e4:f2:12:f2:05:6c:89:ed:b8:6e:aa:8f:5f:
                    25:01:92:c3:16:ed:8c:b8:43:45:75:b7:a9:d4:0c:
                    ed:33:a1:d2:ce:c5:d5:63:6e:79:46:b9:a3:e0:80:
                    37:72:2d:77:7d:2d:14:6b:f8:38:a5:33:36:60:74:
                    59:0d:d6:12:bc:2f:bd:93:89:4e:4b:67:58:d0:9e:
                    62:1b:ad:5a:1c:03:59:d3:c4:58:b1:4e:2b:47:f8:
                    8b:e8:a7:87:9c:8a:a9:90:3d:10:26:3c:7a:65:36:
                    a9:e1:c9:30:10:68:98:4f:70:26:e5:7e:d3:f6:40:
                    aa:94:bd:59:28:57:18:6c:72:ab:17:9d:aa:a6:d9:
                    3b:b2:94:0d:40:69:53:82:af:33:2f:42:2d:e0:b9:
                    b3:6a:49:aa:ea:9c:67:56:b3:c9:31:86:d2:03:25:
                    c7:30:e8:e4:ac:8b:73:85:49:29:7e:ab:13:40:15:
                    c8:62:b4:5d:7e:ba:a9:7d:a0:9c:c1:b8:da:2c:c2:
                    07:01:96:c2:f5:e0:e8:c0:ec:a2:bd:32:0e:18:f4:
                    b8:c9:08:8c:74:ca:16:77:5b:dc:8e:8d:b1:43:ed:
                    10:42:58:b3:c7:45:e0:ce:bd:c3:d7:63:77:e3:c8:
                    2c:50:b6:2d:1d:f2:e6:31:3d:63:e3:0c:76:77:d5:
                    6a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:25:9B:5A:F8:E9:66:50:36:97:7C:E2:7B:52:FD:D6:BB:80:06:3D
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/tiWbWvjpZlA2l3zie1L91ruABj0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.154.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         77:8e:ff:01:c7:24:5f:5c:5c:c2:c7:71:29:83:67:b5:bd:28:
         ec:29:11:a6:16:6b:b3:ff:86:25:76:2a:c6:0e:ad:34:ec:71:
         83:76:7f:c0:34:48:f5:86:c8:f8:00:58:09:e3:d8:0d:92:08:
         50:51:57:04:6a:dc:2f:13:6c:ca:7d:c6:45:80:10:a5:f6:0c:
         e5:8b:75:d7:3a:85:44:5d:82:c9:4a:b6:4f:94:c0:f4:0b:af:
         50:e4:6e:bd:d3:4b:79:d5:d7:31:93:fb:04:ec:1f:c9:f1:a4:
         31:35:67:ce:23:e2:cd:2d:f0:3b:7d:88:f4:6c:d9:b3:b6:a5:
         7d:39:8b:0a:7f:9d:43:4a:6a:66:39:1d:54:a5:18:9f:2b:d5:
         28:b8:56:c2:a7:d4:4d:5f:0d:1e:03:44:8d:ee:57:10:39:c9:
         1c:85:23:1d:0f:de:7c:b1:7d:37:2c:40:71:c7:b0:dc:93:ce:
         84:20:74:fd:11:ad:f1:9e:e5:2a:06:35:4c:ea:ca:c7:72:68:
         3d:a7:84:a5:c2:03:78:86:8f:01:dd:34:0d:a7:90:4a:cc:11:
         cc:7f:fe:4e:b5:fe:e3:b2:04:3e:de:93:ac:9b:2a:00:30:97:
         09:51:65:99:e7:05:78:24:13:1f:37:7b:9a:59:39:9d:7e:52:
         25:aa:07:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org