Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/uM8ipm1W5MUxS1NZirCgDGjd2Oc.roa
File:                     uM8ipm1W5MUxS1NZirCgDGjd2Oc.roa (raw, json)
Hash identifier:          DLUh9ErTX50iH/VJUmlfzbW+GA82vQXoPxqIOkZ2zOc=
Subject key identifier:   B8:CF:22:A6:6D:56:E4:C5:31:4B:53:59:8A:B0:A0:0C:68:DD:D8:E7
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       01DA
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/uM8ipm1W5MUxS1NZirCgDGjd2Oc.roa
Signing time:             Mon 01 May 2023 01:33:40 +0000
ROA not before:           Mon 01 May 2023 01:33:40 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        106.188.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 474 (0x1da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:33:40 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=B8CF22A66D56E4C5314B53598AB0A00C68DDD8E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:01:32:57:1c:ec:c2:60:4b:68:d3:d3:44:c4:
                    91:e5:2e:ed:ae:7a:aa:8f:21:13:c3:cc:25:d8:7c:
                    a7:29:ee:68:d3:4e:4e:cf:3c:87:6c:1c:89:a9:3e:
                    23:b8:6b:28:92:f1:c3:73:1f:46:c1:db:16:2c:11:
                    53:0d:17:b7:53:e5:68:ad:33:a5:f9:e8:6d:f1:2b:
                    7d:a2:6c:59:08:b7:26:6a:85:5b:80:d5:20:3b:86:
                    af:4e:35:b8:f2:e0:48:b8:9a:2b:2c:82:5b:1e:57:
                    1d:be:c4:0e:a0:6f:4a:10:28:69:8e:3a:d7:fe:03:
                    71:1f:a2:69:ef:7f:77:4c:f2:e9:c8:26:2f:75:fd:
                    5d:d9:2a:a4:5b:2b:44:16:87:61:ed:b1:76:0b:cb:
                    87:ee:81:48:d2:96:15:8b:3c:0b:a1:f7:64:05:08:
                    97:5a:32:3c:c1:35:46:63:c3:e1:be:99:66:4b:87:
                    e5:69:f6:a1:5e:53:4d:b5:0b:91:fd:bf:a9:13:4d:
                    5c:ae:37:84:a8:0d:74:f0:a2:ea:3e:87:06:ba:8c:
                    e9:cb:b9:fc:37:b4:fe:6e:91:0e:64:fc:59:93:90:
                    6f:31:bb:8a:9e:90:4c:56:c8:4b:df:0d:5f:39:34:
                    ce:2f:e5:0e:39:85:9a:b6:8d:c5:0e:27:c3:ee:9f:
                    d4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:CF:22:A6:6D:56:E4:C5:31:4B:53:59:8A:B0:A0:0C:68:DD:D8:E7
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/uM8ipm1W5MUxS1NZirCgDGjd2Oc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.188.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         75:e6:d7:c7:72:d3:94:82:2f:f0:96:5e:32:7a:f5:a9:1e:75:
         95:1b:ef:54:ce:45:70:5f:c4:ea:11:4a:9d:99:54:f1:18:29:
         a4:26:5e:7e:39:47:b3:f8:0a:c3:cd:f1:87:31:4e:3d:0c:d0:
         c1:da:94:52:d1:fe:a3:42:0b:a8:76:30:31:9b:50:89:d1:46:
         a8:40:04:f7:3f:f1:d8:4d:65:87:6f:a9:5c:ed:01:94:28:83:
         5b:4d:67:a1:cf:5c:3f:5e:ae:0c:58:22:be:e1:0b:d2:64:ba:
         08:3c:58:22:4d:06:80:7d:78:ec:3e:4c:41:f8:da:31:34:6b:
         0f:74:c9:89:06:26:09:68:9a:1d:12:4f:62:27:d9:50:ff:db:
         a4:c2:96:83:f0:04:c8:d7:fb:84:d1:22:7d:64:1f:4f:2f:5a:
         dc:b8:7b:fe:23:0f:b3:b5:4f:fc:d5:5e:3e:55:e7:26:31:b6:
         69:f9:78:8c:91:5a:e1:b3:30:b5:b2:f2:2f:ba:3b:1b:9f:7b:
         d3:f1:b4:f3:c8:18:14:b7:39:72:96:13:8f:cf:09:52:e5:fc:
         85:bc:42:e2:17:04:6e:92:5e:f9:0a:94:ab:01:80:cc:78:a5:
         b4:f0:30:f7:e8:96:8d:3f:7f:b7:95:26:55:4b:c5:fc:e5:42:
         b6:8e:48:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org