Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/wJPKPAHm96XcE9SuaDMbHkARj18.roa
File:                     wJPKPAHm96XcE9SuaDMbHkARj18.roa (raw, json)
Hash identifier:          ZEY/YhE209h83x63o1g5e7xN/fX6dd1GmITbFFbNNUE=
Subject key identifier:   C0:93:CA:3C:01:E6:F7:A5:DC:13:D4:AE:68:33:1B:1E:40:11:8F:5F
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       01DC
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/wJPKPAHm96XcE9SuaDMbHkARj18.roa
Signing time:             Mon 01 May 2023 01:33:40 +0000
ROA not before:           Mon 01 May 2023 01:33:40 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        210.249.0.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 476 (0x1dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:33:40 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=C093CA3C01E6F7A5DC13D4AE68331B1E40118F5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:30:df:82:19:4d:b8:51:62:3a:b4:f3:c2:5a:
                    97:69:ef:f3:94:60:ae:03:83:ea:f6:3a:ff:5b:bf:
                    19:4c:af:13:fd:76:1c:44:19:72:ed:96:ed:27:ec:
                    cd:7d:98:8d:ef:e1:53:0e:a1:88:1d:a1:af:17:68:
                    6b:d4:03:2f:34:e2:2b:35:78:f4:f2:32:ab:89:13:
                    df:f9:fa:e5:bb:e2:cb:ad:91:fc:40:5c:0f:f5:05:
                    95:98:97:1f:fb:3b:3b:8e:50:35:74:a9:1c:99:36:
                    04:8d:13:7a:0d:b5:8b:4e:78:06:c2:49:82:24:c0:
                    7c:c3:8d:84:9f:4d:ad:4f:56:9a:68:cb:34:5e:a4:
                    da:7a:4c:85:1f:12:bf:0e:97:86:2d:74:a0:86:fb:
                    78:8d:3b:d8:df:3e:04:d0:6f:83:14:b5:70:da:87:
                    44:4b:bb:bd:3c:83:d4:25:24:0e:15:32:dc:96:2c:
                    e0:2d:c3:6d:34:d0:b0:87:66:4f:4f:11:25:49:82:
                    7d:2d:f8:13:8e:a7:b4:9b:7e:f3:ab:df:50:c3:3c:
                    10:87:b8:d0:f7:7c:6b:1e:ef:91:10:f2:78:79:bc:
                    c2:b1:85:98:ef:b4:5a:c0:b2:13:bc:21:5f:7d:52:
                    5a:69:0a:a9:02:a8:d5:df:50:98:41:e1:21:4c:3f:
                    fc:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:93:CA:3C:01:E6:F7:A5:DC:13:D4:AE:68:33:1B:1E:40:11:8F:5F
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/wJPKPAHm96XcE9SuaDMbHkARj18.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.249.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         9f:8c:30:6d:88:de:0a:cc:a8:6e:0a:a9:71:4e:11:e4:76:0f:
         a8:c2:4d:86:78:e6:0d:48:ff:44:2e:36:a0:7b:46:82:bc:eb:
         80:00:f6:96:ab:0e:6b:e8:8c:2b:cf:af:fa:a5:36:be:f9:57:
         97:04:aa:51:37:3a:fd:41:b0:96:5c:7c:4e:bb:d9:ad:45:d2:
         cd:02:13:60:6e:ed:85:4f:f4:b7:3b:f6:48:bc:59:86:0d:3d:
         d4:fa:86:31:7c:ff:a9:55:1b:f2:d2:84:4f:23:fe:8f:f4:95:
         78:74:13:9f:29:bf:bb:6f:76:1f:47:2d:d9:0b:b1:8c:53:ed:
         11:c0:6e:47:65:ac:26:b9:13:d0:ea:38:f6:cb:64:ff:a6:ec:
         e1:fd:26:01:83:2d:a6:09:f9:24:fd:14:24:c5:e0:99:4d:81:
         de:88:ed:a7:b1:c0:4d:e1:fc:1b:b5:89:58:02:89:14:51:02:
         74:35:f9:43:89:e7:53:6a:a2:8b:67:da:d9:b7:f9:c7:9a:be:
         da:d0:54:68:18:51:94:0e:c9:65:f9:d1:a0:24:46:cf:92:c2:
         c2:3c:41:38:9f:c8:8b:97:90:1b:2e:2c:54:8d:19:99:f2:8a:
         f2:23:c5:39:d6:eb:ef:09:81:4e:a7:4e:35:9d:43:6a:f0:08:
         f9:65:0a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:39 2024 by rpki-client on console-ams.rpki-client.org