Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/vY7eYpzolrhjK4KkeG6yY3ZJ4_I.roa
File:                     vY7eYpzolrhjK4KkeG6yY3ZJ4_I.roa (raw, json)
Hash identifier:          EWFZrlAYbc/fXaAr1b/V9d2hBErCvaQ3xSWFAFYnSFw=
Subject key identifier:   BD:8E:DE:62:9C:E8:96:B8:63:2B:82:A4:78:6E:B2:63:76:49:E3:F2
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       014E
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/vY7eYpzolrhjK4KkeG6yY3ZJ4_I.roa
Signing time:             Fri 28 Oct 2022 05:56:01 +0000
ROA not before:           Fri 28 Oct 2022 05:56:01 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        125.29.0.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 334 (0x14e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Oct 28 05:56:01 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=BD8EDE629CE896B8632B82A4786EB2637649E3F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:82:76:03:1a:58:a5:d1:84:52:f3:b5:62:f0:
                    92:ab:bb:e7:fa:2d:73:6b:4d:ad:1d:89:83:54:8e:
                    61:58:20:9a:8b:34:15:b7:92:15:e6:8e:da:29:52:
                    d3:4f:c0:e4:50:6b:42:78:63:56:92:0d:4f:a0:8b:
                    2a:12:26:22:51:85:8f:aa:7b:a8:a9:10:ba:a6:12:
                    78:ba:7d:94:bf:11:30:14:7c:ba:64:fc:2b:d6:a4:
                    ff:74:e7:59:3e:c7:25:55:a8:f9:ba:93:79:f3:c8:
                    47:0c:ef:f1:e6:cc:f7:71:53:7b:93:4c:95:a2:7c:
                    76:45:25:c3:e0:4a:d1:87:e5:d4:1a:cf:75:ac:c3:
                    74:e3:2b:74:31:5e:37:9f:6b:2d:d9:6f:a2:46:66:
                    2d:95:01:68:d6:d7:81:0d:ed:f4:05:92:3c:19:fd:
                    42:b5:50:91:8a:3c:4a:1e:bf:f6:aa:03:24:da:2c:
                    ec:63:95:e7:0a:44:a0:78:65:a4:1a:10:b7:d3:e4:
                    bf:8d:be:98:7f:f6:7a:b6:ce:c4:2a:6b:87:dc:f6:
                    67:e5:73:b2:9a:26:4a:e8:55:78:19:77:67:45:13:
                    f5:20:99:d5:b5:7a:02:6f:a8:59:b8:b0:f5:bb:41:
                    7e:f0:85:f2:73:b8:ac:c9:28:b1:bd:98:65:02:d6:
                    f1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:8E:DE:62:9C:E8:96:B8:63:2B:82:A4:78:6E:B2:63:76:49:E3:F2
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/vY7eYpzolrhjK4KkeG6yY3ZJ4_I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.29.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         60:da:01:38:10:ec:8a:60:ce:57:15:d0:da:de:cf:1e:7e:6f:
         75:90:c7:7e:dc:0e:9e:b8:db:9d:3b:e6:72:78:72:87:95:b0:
         88:61:d1:f1:be:d7:a9:c4:03:0b:ab:ce:a5:f4:cd:04:a4:50:
         74:75:ba:ec:a0:d1:f2:4b:c1:5a:7c:4a:de:a5:c2:67:3d:e3:
         74:a6:b3:72:cf:c2:24:88:20:00:e8:81:e7:20:37:c5:24:ec:
         af:2e:25:1c:58:51:23:66:bd:4c:cb:3c:f1:f3:58:82:bd:7b:
         13:71:44:6c:b7:bf:f4:5c:17:9b:23:72:a4:b4:6b:c7:87:e3:
         1d:33:62:d6:8d:4a:9a:45:96:51:da:63:85:b3:63:90:31:64:
         36:57:f0:5d:23:76:21:ee:ee:55:a4:bd:62:a8:55:1e:0d:b2:
         97:21:13:85:50:75:a8:bb:84:a2:3e:e5:47:6a:b0:26:6e:9f:
         21:27:31:1f:f7:91:a9:49:d1:fe:18:85:95:c9:5b:12:05:97:
         7b:d9:b5:68:64:fa:a1:f1:ab:cd:90:36:f5:0e:b4:71:34:4e:
         0e:fc:8f:97:e6:25:83:2b:10:f9:d8:f8:f6:dc:0b:1f:10:05:
         14:e4:a6:ce:50:9a:70:0c:20:a3:68:d0:2f:77:21:0e:b7:74:
         7a:ca:56:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:39 2024 by rpki-client on console-ams.rpki-client.org