Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/u2J_GqsfkkDJWxm2sPTH5Ca1QAI.roa
File:                     u2J_GqsfkkDJWxm2sPTH5Ca1QAI.roa (raw, json)
Hash identifier:          mZ25JcObT8s7rW3Q2RMjlVzFhshE4VNtid15hlaHCOc=
Subject key identifier:   BB:62:7F:1A:AB:1F:92:40:C9:5B:19:B6:B0:F4:C7:E4:26:B5:40:02
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       01B9
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/u2J_GqsfkkDJWxm2sPTH5Ca1QAI.roa
Signing time:             Mon 01 May 2023 01:32:08 +0000
ROA not before:           Mon 01 May 2023 01:32:08 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        106.183.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 441 (0x1b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:32:08 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=BB627F1AAB1F9240C95B19B6B0F4C7E426B54002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9b:7e:34:75:3a:d3:a0:bd:e3:af:07:ee:74:
                    36:39:09:84:5b:6b:43:fb:f2:e5:a8:be:80:d8:85:
                    3d:9f:43:83:8f:47:b8:43:8e:37:51:f4:a4:4c:75:
                    60:47:31:c6:0c:86:86:6c:b6:18:1e:46:23:6b:61:
                    ee:9a:21:6d:2a:e8:f9:23:97:9f:c4:3e:74:da:96:
                    60:e1:c5:f0:b3:cd:77:0c:6c:af:72:b4:85:25:21:
                    d6:f2:07:eb:db:8e:15:d5:43:c4:da:d0:19:27:b0:
                    0e:57:48:0d:6a:21:49:55:f0:64:1a:19:32:6c:bf:
                    ef:1d:b1:3c:33:d1:18:79:6d:0c:97:6d:e0:8b:36:
                    de:b7:5a:73:6f:2a:e8:91:b4:6b:da:cb:83:fa:87:
                    54:00:c1:dc:a1:f7:b5:6d:9f:35:12:8a:97:af:3a:
                    7b:b3:78:71:46:ba:6f:fd:09:51:5a:a6:25:06:16:
                    b7:97:97:ff:b3:19:b4:1f:b8:37:10:be:b1:39:b9:
                    a1:f1:52:1e:5d:e9:c4:fb:8e:da:b8:4a:72:a7:d3:
                    31:cf:6c:e7:b5:ea:8a:af:07:b0:96:ee:05:c1:4c:
                    a9:bf:af:d8:73:b4:fa:59:86:2b:dd:8d:ef:a5:28:
                    72:b0:9a:c8:63:1a:0b:19:df:49:e2:9c:aa:5b:f3:
                    6a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:62:7F:1A:AB:1F:92:40:C9:5B:19:B6:B0:F4:C7:E4:26:B5:40:02
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/u2J_GqsfkkDJWxm2sPTH5Ca1QAI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.183.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         33:81:0c:05:c3:4a:3d:b4:11:27:47:fa:9f:dc:a9:03:30:2f:
         fb:fb:4a:f3:7b:f2:4f:f1:80:1c:54:91:b8:d6:6e:61:6d:25:
         59:54:46:47:48:45:2b:f5:f5:b8:4e:4e:9e:0d:23:73:5f:25:
         23:85:ea:7d:92:d8:6b:ee:fd:1e:f9:93:31:8e:50:53:35:3d:
         2f:9c:c6:96:bb:dc:17:78:99:7b:54:0e:91:db:18:be:88:4b:
         5b:de:f4:a0:2b:49:47:3e:18:e0:91:04:df:7d:b3:fd:49:19:
         c3:61:58:12:11:63:c2:9b:ef:d5:c9:7d:40:19:db:b0:0d:83:
         8a:87:e7:1f:84:73:97:ef:09:4a:81:a1:1e:5e:1d:06:61:9c:
         87:d1:5a:3d:10:db:a2:8f:1d:21:03:9b:f6:ae:5a:f0:06:45:
         c0:43:60:c1:50:c9:16:2c:56:fc:c3:ea:99:ed:f8:19:bc:f8:
         12:fb:47:2b:12:5c:d1:6d:52:57:93:17:f2:30:6b:44:f7:07:
         9c:bb:bb:7f:d6:f5:15:a3:ec:39:3a:15:85:29:33:b4:6e:5d:
         6c:43:67:94:b0:5a:60:d6:6a:d6:1c:e4:c4:b9:1e:55:86:f7:
         23:ca:06:9a:12:c1:45:da:5a:d5:d1:c0:04:53:01:54:1b:a0:
         8c:ea:dc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org