Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/wc6Fk76mq3sqjdRv2fo5oBvuafw.roa
File:                     wc6Fk76mq3sqjdRv2fo5oBvuafw.roa (raw, json)
Hash identifier:          0qJyNd6Cx4OqIwZ1EVuVmoL6ukR2wYWvqW/eK1bTUJI=
Subject key identifier:   C1:CE:85:93:BE:A6:AB:7B:2A:8D:D4:6F:D9:FA:39:A0:1B:EE:69:FC
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       010F
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/wc6Fk76mq3sqjdRv2fo5oBvuafw.roa
Signing time:             Tue 14 Jun 2022 10:18:26 +0000
ROA not before:           Tue 14 Jun 2022 10:18:26 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        106.181.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 271 (0x10f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun 14 10:18:26 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=C1CE8593BEA6AB7B2A8DD46FD9FA39A01BEE69FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fa:8d:6f:85:3b:9c:bd:4c:3b:c6:64:d2:93:
                    04:82:b2:0a:34:0f:d0:d5:98:ef:f5:8b:a4:70:a8:
                    7a:fb:e9:09:58:cc:68:d4:78:62:bf:4e:d2:67:06:
                    9f:b6:04:b5:1a:d7:d8:b1:8a:bd:23:7b:34:0d:6b:
                    ac:2f:68:2f:e2:25:ca:ff:70:e8:fb:be:32:27:0b:
                    38:fb:59:57:00:23:85:43:b9:52:4a:c3:af:fb:02:
                    15:da:ce:ca:0f:b5:ac:b1:b9:0f:84:4a:2c:d0:0a:
                    de:81:c8:5a:23:a7:da:45:be:17:9d:c7:61:41:e0:
                    c2:3d:33:cb:74:1d:49:90:5c:e8:d0:ca:06:d4:5f:
                    43:80:7d:f0:79:45:d3:fb:6d:cd:d6:9c:af:0a:7f:
                    1b:2f:76:76:47:01:8f:05:36:75:b8:ba:f9:73:14:
                    68:d6:a1:1c:d6:71:fb:00:f4:18:e5:bf:84:f3:2a:
                    4d:5b:d0:dc:05:ef:a6:32:f0:4a:e4:0f:e0:b1:fd:
                    46:5c:12:ad:bf:a8:bd:91:5f:0f:62:f4:4b:0f:ca:
                    9c:7e:3e:65:c3:4a:f7:6b:dc:36:04:3a:03:b7:c3:
                    5f:93:61:35:c3:3d:fd:a4:c5:e5:7c:a2:91:72:9d:
                    ec:5d:f9:fc:af:00:89:7c:03:d2:6d:8a:50:66:42:
                    26:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:CE:85:93:BE:A6:AB:7B:2A:8D:D4:6F:D9:FA:39:A0:1B:EE:69:FC
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/wc6Fk76mq3sqjdRv2fo5oBvuafw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.181.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0b:59:6c:0d:18:1a:3b:46:f6:89:30:c1:e4:fd:93:8d:35:3d:
         16:4c:ef:93:54:40:86:f0:23:36:07:7e:3b:af:01:e2:07:8a:
         e4:19:dc:a9:17:26:21:3c:61:b2:ed:20:d1:72:bb:db:c0:66:
         f9:85:8e:15:69:18:40:3e:22:ae:0a:12:e5:b8:bd:c5:96:31:
         a6:20:18:ee:fa:6c:32:be:de:de:35:78:2d:5e:e6:18:7d:48:
         d5:6c:76:ff:52:5c:8d:1d:59:2b:d2:c3:5c:19:b2:66:2c:bb:
         d6:53:f2:48:d2:62:23:13:b7:62:84:3e:0f:2e:d8:6d:69:7e:
         ed:f0:ac:b8:f2:cc:79:f8:d5:0c:ad:ee:56:e0:a2:ac:cc:31:
         9e:ce:73:88:5e:6c:78:3a:dc:76:eb:67:c0:f7:c4:99:09:7d:
         fd:63:7a:12:4e:7e:aa:c6:3d:79:b7:6b:a6:de:62:db:4f:ec:
         3c:c9:70:e2:66:a7:64:68:a7:c6:95:a5:e7:4b:92:b8:0f:d9:
         b4:09:00:dc:37:57:cc:6f:51:fb:b7:2f:54:e1:b2:8a:ce:e0:
         31:a7:c6:91:4f:cc:e1:22:9b:a1:93:94:de:d7:85:f6:09:72:
         83:1c:74:b3:08:98:3f:83:e1:c0:97:9f:ea:e1:6b:68:6d:cc:
         7c:36:32:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org