Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/whIcsEWQkbtFV6tJRk4wYJkRTs8.roa
File:                     whIcsEWQkbtFV6tJRk4wYJkRTs8.roa (raw, json)
Hash identifier:          dIoQL8szaYneOSFrQbli8A1JdSUAbJW7KvXQ+WegBos=
Subject key identifier:   C2:12:1C:B0:45:90:91:BB:45:57:AB:49:46:4E:30:60:99:11:4E:CF
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       51
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/whIcsEWQkbtFV6tJRk4wYJkRTs8.roa
Signing time:             Tue 07 Jun 2022 10:01:12 +0000
ROA not before:           Tue 07 Jun 2022 10:01:12 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        113.157.128.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:01:12 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=C2121CB0459091BB4557AB49464E306099114ECF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:33:08:e4:cc:cc:59:0d:1a:87:83:69:ba:50:
                    84:c3:f8:1e:90:26:0e:44:eb:2e:5b:1a:38:92:9d:
                    55:33:68:13:8e:4a:2b:e0:3e:23:0d:5e:a7:f3:7a:
                    0a:15:36:f0:4a:f7:9b:f5:e2:74:97:3a:dc:77:f2:
                    b1:31:0e:0a:ba:18:91:cb:59:c1:54:ea:eb:7b:95:
                    e1:ea:f1:23:97:7b:e2:20:bc:be:01:c2:36:6f:02:
                    47:ba:47:8a:93:43:ce:76:b6:2f:a2:d8:c1:e2:27:
                    84:5c:5e:02:5e:d8:2d:ab:cf:07:36:1d:89:95:79:
                    30:17:41:bb:27:69:2a:97:38:aa:2b:c4:17:a0:51:
                    df:63:52:60:56:81:6c:0f:8a:5b:5c:ab:a4:f4:f1:
                    a9:09:3b:94:6f:69:80:c4:e0:a4:88:0d:40:21:bc:
                    c4:0d:96:9c:24:ca:96:c3:7f:8e:45:d1:e7:44:5d:
                    7c:0d:ca:b6:d5:e5:91:c1:db:0d:62:65:ce:82:9a:
                    4b:b3:a0:34:03:0c:7b:d6:5c:4c:58:36:0e:b2:49:
                    34:e0:13:60:fe:d1:dd:d9:7d:f8:f6:25:1c:5b:94:
                    f8:cc:86:95:65:b9:dc:f2:8c:d6:1a:c8:4a:11:22:
                    b0:d2:9d:ce:d0:f7:5a:ea:8b:2a:7b:b6:fd:48:06:
                    04:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:12:1C:B0:45:90:91:BB:45:57:AB:49:46:4E:30:60:99:11:4E:CF
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/whIcsEWQkbtFV6tJRk4wYJkRTs8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.157.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0f:6a:02:4e:74:97:5d:ca:5e:23:c6:56:04:ff:ae:32:3b:01:
         4c:dd:ff:ba:16:fc:38:e7:1b:b3:76:62:eb:d3:77:55:c1:a1:
         e2:f4:70:72:c9:f9:a4:98:7f:18:b3:2d:64:ea:e9:0e:d0:bf:
         3f:13:fc:eb:eb:2b:9e:8c:c7:6e:71:88:c1:2f:cb:35:fe:99:
         09:4f:00:ce:29:b1:16:b3:43:af:8f:f0:19:e7:98:42:67:3b:
         34:e5:a9:8d:61:f2:a0:5c:ae:0e:ba:64:5b:01:dd:d7:dc:92:
         ab:8a:6c:fe:8a:ba:19:27:f6:ad:cf:21:dd:e4:54:b8:dc:b8:
         3c:1e:e8:f2:6a:d0:18:2d:b5:5e:f4:f1:01:9c:93:94:1b:8a:
         48:55:35:7a:f2:ae:05:b3:ee:1a:3e:dd:10:04:73:96:b2:21:
         e8:95:6f:5c:eb:95:28:d8:be:62:f3:bb:70:83:68:4a:98:45:
         df:31:78:19:80:1f:66:08:63:e8:30:ff:c5:b0:ca:db:02:eb:
         34:63:78:63:40:01:49:78:65:97:f8:af:fa:df:cc:46:d8:12:
         78:c2:45:60:59:09:81:74:c0:3b:e1:09:84:a8:4d:a7:7d:6f:
         c8:95:a6:1a:53:2c:d8:1b:e3:f9:13:20:2c:75:da:d7:24:83:
         e0:85:99:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org