Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/vS-_CqntaSCykZZTpDtemRp-Wwk.roa
File:                     vS-_CqntaSCykZZTpDtemRp-Wwk.roa (raw, json)
Hash identifier:          F2e3Wv4MMH+ubk4bn27fiEQv/N08dfpDAMC1soTOo7A=
Subject key identifier:   BD:2F:BF:0A:A9:ED:69:20:B2:91:96:53:A4:3B:5E:99:1A:7E:5B:09
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0194
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/vS-_CqntaSCykZZTpDtemRp-Wwk.roa
Signing time:             Mon 01 May 2023 01:30:31 +0000
ROA not before:           Mon 01 May 2023 01:30:31 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        119.106.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 404 (0x194)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:30:31 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=BD2FBF0AA9ED6920B2919653A43B5E991A7E5B09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:82:d0:90:e4:8c:b0:33:21:1c:87:4c:be:c1:
                    00:de:8f:43:27:7f:a6:8e:95:32:23:cc:02:2a:f3:
                    31:b8:b7:9c:7f:0b:52:44:ed:96:49:a7:d8:bb:bc:
                    c3:32:57:78:3b:95:bc:81:8d:d9:df:5f:ad:8d:8c:
                    1d:ff:2c:81:7a:80:d9:a1:e7:ce:42:57:b8:d4:98:
                    78:3d:6e:af:da:d1:cc:ef:b4:50:d6:f9:57:e8:04:
                    77:42:cd:72:a7:5d:79:1a:86:74:85:5d:20:7c:bc:
                    d4:05:a1:e0:9e:df:0d:3b:11:b1:a4:07:97:3e:10:
                    83:4b:90:11:94:36:f8:e4:bf:7d:44:cb:2b:b2:12:
                    ce:b2:1d:09:0a:26:47:69:b0:d3:cc:a9:11:ef:b9:
                    fc:37:87:96:de:d0:61:48:76:2c:b4:15:1b:aa:a5:
                    2a:3b:dc:cd:7d:43:e5:1b:68:0e:e7:7a:eb:57:d5:
                    db:02:57:24:fc:da:a6:4b:b2:b8:29:71:84:ce:37:
                    44:59:22:84:ea:8e:11:ab:27:0b:50:74:1d:c5:5e:
                    7c:6c:75:b2:e8:3e:19:d0:24:d4:46:c8:7a:7e:90:
                    98:6e:16:23:cb:12:99:b1:5a:ec:1d:f0:6f:fe:ec:
                    46:c6:4a:31:e0:cd:b5:85:b4:fc:e1:8d:f3:f1:a3:
                    b4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:2F:BF:0A:A9:ED:69:20:B2:91:96:53:A4:3B:5E:99:1A:7E:5B:09
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/vS-_CqntaSCykZZTpDtemRp-Wwk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.106.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         14:fa:06:3d:db:06:70:65:5e:5d:62:1b:8e:8d:7c:ca:1c:69:
         25:78:4d:04:8b:a5:01:8e:f8:a0:c7:18:ae:35:b3:84:78:1e:
         52:96:2d:60:12:5b:ec:ac:9d:88:c1:05:3c:9d:66:71:eb:ad:
         a2:06:4f:b9:a6:08:98:e9:c4:9f:7e:39:07:05:8c:6a:16:17:
         e1:b9:09:d5:26:e8:b4:c8:18:1a:33:9b:89:78:6b:1d:39:eb:
         76:c2:95:98:4c:93:64:28:18:2a:96:9a:3c:77:32:9c:84:68:
         95:39:00:7f:63:fa:20:d7:91:e5:6e:9e:21:73:9e:06:4a:1a:
         25:29:55:ff:ee:25:52:e5:11:73:ba:54:50:d0:db:78:bb:96:
         66:e1:35:26:0e:09:76:83:78:ed:bc:87:69:2b:7c:1e:8e:ca:
         a9:03:1f:36:91:cc:ad:cb:47:67:4d:fa:6d:be:82:9e:94:75:
         21:29:c4:11:38:05:10:a5:dd:ca:44:81:01:ed:e5:80:db:1d:
         3f:fa:3a:ad:f6:9c:db:68:c2:f3:08:3d:b6:2b:50:e0:be:22:
         b5:2a:78:22:2f:d9:11:b7:aa:ed:8d:8d:1d:3f:cc:58:92:7f:
         a7:8b:13:55:da:cb:ae:8b:eb:47:34:25:53:e3:7d:a7:94:e6:
         5f:11:55:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org