Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/vbUmkxTyoG9ts_f5eHr0izwycjU.roa
File:                     vbUmkxTyoG9ts_f5eHr0izwycjU.roa (raw, json)
Hash identifier:          qsP2J8Z0rVJn0q1DQBIaNinpwdrkIphh6rk5dlJD/Ow=
Subject key identifier:   BD:B5:26:93:14:F2:A0:6F:6D:B3:F7:F9:78:7A:F4:8B:3C:32:72:35
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0124
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/vbUmkxTyoG9ts_f5eHr0izwycjU.roa
Signing time:             Tue 11 Oct 2022 09:19:46 +0000
ROA not before:           Tue 11 Oct 2022 09:19:46 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2516
IP address blocks:        106.186.64.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 292 (0x124)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Oct 11 09:19:46 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=BDB5269314F2A06F6DB3F7F9787AF48B3C327235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8a:35:65:39:0b:07:69:27:1a:82:f2:ec:32:
                    ec:76:92:e6:19:28:2a:a8:ab:19:cf:ec:19:e1:97:
                    80:32:b5:4a:69:0d:ef:fa:96:32:7a:2b:00:41:9e:
                    58:4d:34:c9:6d:49:68:36:0b:09:91:67:30:62:e5:
                    7c:40:cb:fa:35:eb:bd:90:93:49:b4:2b:98:06:3b:
                    12:08:60:e1:36:d2:5e:38:f0:89:59:cc:6a:98:cc:
                    10:88:d2:43:72:be:41:b3:0d:d1:87:71:22:03:fa:
                    a7:b6:68:2d:ec:88:be:e7:94:84:63:73:e8:50:28:
                    cd:02:56:69:11:f1:a2:a9:fb:a4:23:81:f9:08:21:
                    78:cc:4f:5c:07:1a:6e:ff:aa:b4:3a:7f:32:98:dd:
                    65:4c:70:12:61:63:db:8d:28:98:09:28:9c:d0:72:
                    cb:3c:4a:9c:3f:fc:a3:13:50:88:00:0b:87:f8:1b:
                    59:4a:bc:a9:e9:6e:73:fb:a0:1c:56:d8:64:4c:68:
                    fb:82:8a:8c:ac:4d:62:24:44:e2:60:87:3e:97:dc:
                    7d:5e:e2:00:7f:79:e0:88:fa:ed:9a:90:a6:24:6e:
                    45:f9:2e:c1:82:d0:02:20:2f:21:45:70:3f:f3:0b:
                    16:25:67:76:fb:0d:7e:d0:61:8a:22:1d:bb:e9:c5:
                    b8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B5:26:93:14:F2:A0:6F:6D:B3:F7:F9:78:7A:F4:8B:3C:32:72:35
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/vbUmkxTyoG9ts_f5eHr0izwycjU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.186.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         54:1e:79:50:b9:ce:5c:1e:64:25:0e:6b:25:2d:24:c8:79:53:
         4a:0c:64:d1:d9:5b:85:8c:95:d6:98:54:01:9a:b4:59:a0:52:
         b3:a7:21:45:e8:be:6d:2c:06:b1:25:89:1f:17:4e:ea:df:76:
         1b:47:09:e2:65:5b:26:4e:25:75:e8:5a:98:46:33:7e:80:0f:
         11:15:ff:1f:ee:1d:1f:2e:05:2d:78:56:fd:b7:82:88:a7:cc:
         bc:57:e5:7a:96:45:12:b1:cf:5c:b1:ac:d3:d8:60:cd:bd:77:
         a8:f1:8a:4b:7b:2b:56:87:33:47:33:4f:00:3a:8c:06:3d:6f:
         bc:48:7a:9e:74:4d:2c:60:d1:5a:d8:5c:9e:23:a5:d1:7f:cb:
         6d:dc:9d:7b:c5:93:74:c1:9b:6a:24:ca:41:2f:b0:f2:04:f5:
         b0:5f:6f:b0:5d:8e:bf:d2:2f:c7:cc:0e:ce:e6:26:32:40:34:
         d5:10:64:6c:f9:7a:e9:e1:7c:0e:0c:46:8e:c9:d2:4f:e1:c4:
         8c:76:70:e6:d4:2c:ed:67:ca:6b:ef:aa:81:b2:d0:6b:be:99:
         95:25:79:b0:a6:ae:49:e5:6d:ed:38:3a:eb:df:16:de:8b:69:
         a9:d4:16:20:32:2c:ec:56:77:d3:e6:06:92:21:cf:76:d8:7c:
         7c:a7:24:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:39 2024 by rpki-client on console-ams.rpki-client.org