Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/v0_9O4cBVZIOmabaowktpI2NIpg.roa
File:                     v0_9O4cBVZIOmabaowktpI2NIpg.roa (raw, json)
Hash identifier:          AzMyPCxk1VGww6cUgu2BywVWZVXsmGMy7RwwGxYQ1U4=
Subject key identifier:   BF:4F:FD:3B:87:01:55:92:0E:99:A6:DA:A3:09:2D:A4:8D:8D:22:98
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       F8
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/v0_9O4cBVZIOmabaowktpI2NIpg.roa
Signing time:             Tue 14 Jun 2022 09:38:19 +0000
ROA not before:           Tue 14 Jun 2022 09:38:19 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        210.155.0.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 248 (0xf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun 14 09:38:19 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=BF4FFD3B870155920E99A6DAA3092DA48D8D2298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f6:6d:38:9b:0a:91:62:e1:c3:67:41:e4:a2:
                    8e:d6:fc:d5:da:7e:07:e0:bc:5c:be:69:b3:50:5a:
                    4e:c5:78:7e:70:84:d4:7e:6f:c4:4b:4c:2d:cf:27:
                    38:ef:53:c1:f1:92:ff:9c:79:d6:5e:97:b4:44:50:
                    1e:33:3d:d0:9b:71:0b:1d:47:44:c0:68:34:0f:a0:
                    41:4d:4c:44:ad:a5:56:23:04:41:29:01:e3:a7:6e:
                    1d:5f:25:c6:56:92:84:09:8f:f2:a1:1f:ed:1d:01:
                    03:79:f2:6f:b2:79:af:ef:03:36:be:a0:01:aa:1c:
                    81:e9:d0:a6:ea:91:9a:7a:0a:76:dc:3c:b5:95:5f:
                    10:e9:63:02:fb:8a:4c:49:bb:9d:23:c3:25:8b:9d:
                    5d:0b:cd:67:6d:78:6d:57:44:9b:6f:6c:35:fa:21:
                    d8:5b:05:40:23:d3:60:49:67:75:84:79:96:07:e9:
                    5c:e5:86:5c:84:20:99:95:fa:1c:8b:93:6d:a4:6e:
                    0e:55:4d:d3:ee:d9:fd:31:d6:7c:35:fa:8f:6c:de:
                    f7:14:d3:20:5c:43:ac:45:27:70:bd:8f:78:5d:3e:
                    f7:41:bc:45:17:52:a5:b6:e5:0d:44:97:d1:b4:9b:
                    a4:b6:02:7e:b6:58:29:b1:3a:cb:80:81:a1:24:95:
                    50:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:4F:FD:3B:87:01:55:92:0E:99:A6:DA:A3:09:2D:A4:8D:8D:22:98
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/v0_9O4cBVZIOmabaowktpI2NIpg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.155.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         25:47:dd:2a:9b:97:b5:62:3d:fb:22:f6:73:84:51:62:e2:c2:
         5b:a1:86:1a:e0:58:53:c2:24:19:ca:db:25:08:ef:05:76:0f:
         5c:79:31:fe:93:6e:f1:48:82:54:19:86:75:7e:8f:4f:d1:18:
         12:2d:a5:5a:a6:d6:84:5c:8d:20:c9:e5:78:4c:ab:4a:50:06:
         d5:c1:f3:95:f1:56:2a:ad:af:05:8a:06:ed:f5:9a:0e:8a:56:
         fc:72:38:dd:8e:0a:ba:c2:a6:ab:14:51:fc:7b:67:83:96:dc:
         2c:20:8a:2a:0f:25:c6:24:99:4c:f8:0c:c9:2c:69:cc:e9:99:
         07:68:4b:06:ba:0a:b1:93:74:65:b4:7e:56:12:b4:dd:41:c6:
         4a:04:86:b0:8c:25:44:27:d9:91:2a:74:6b:f1:c4:be:06:4f:
         63:83:ee:c5:cb:1b:cf:57:62:7d:79:5c:c9:ed:54:dd:4c:e6:
         f2:1c:f1:05:0a:97:03:7c:a2:cc:97:35:bc:f2:97:0d:93:c7:
         d5:dc:44:72:34:14:7e:20:f8:70:0b:4f:1c:4f:1a:a0:08:3e:
         b6:aa:f6:2a:c0:ff:4c:4b:d2:da:da:b7:bb:2e:6f:24:70:46:
         87:72:4a:e0:a7:03:d3:fe:34:b9:b6:da:35:2e:72:e8:5e:5c:
         6c:2a:9f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org