Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/xGpifibSsz_bPZ91os49wEOgDqw.roa
File:                     xGpifibSsz_bPZ91os49wEOgDqw.roa (raw, json)
Hash identifier:          juY8CtEYXBZ8z1UpmYBSpenzc2DFdCCn4KkD6RqynFM=
Subject key identifier:   C4:6A:62:7E:26:D2:B3:3F:DB:3D:9F:75:A2:CE:3D:C0:43:A0:0E:AC
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       F3
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/xGpifibSsz_bPZ91os49wEOgDqw.roa
Signing time:             Tue 14 Jun 2022 09:34:03 +0000
ROA not before:           Tue 14 Jun 2022 09:34:03 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        106.171.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243 (0xf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun 14 09:34:03 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=C46A627E26D2B33FDB3D9F75A2CE3DC043A00EAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f8:d0:3c:73:ce:9f:43:25:b0:e2:0f:f5:4d:
                    64:26:42:48:1d:0d:da:24:41:d3:94:b9:66:87:d5:
                    45:42:3f:a5:58:cd:0e:21:a8:ed:92:40:fd:e0:8a:
                    d7:e6:df:72:71:47:e8:e4:98:c5:49:34:17:bd:b4:
                    3c:87:7b:bb:60:eb:ec:8f:a3:be:33:e5:5c:c4:9a:
                    74:02:e4:25:38:79:59:7c:0c:79:13:0c:62:a9:15:
                    02:72:e9:3d:22:d4:10:8f:90:2d:f4:f1:0d:41:66:
                    ef:f8:42:8e:78:67:32:ee:01:69:10:5f:b4:a9:9d:
                    21:17:99:ef:db:ac:6a:f1:af:a6:e0:1b:e6:db:a5:
                    18:50:2a:de:c8:e2:23:f6:9c:b8:90:8e:c5:eb:05:
                    44:38:87:4b:e4:50:1e:b7:d6:7e:f7:71:f5:5e:2b:
                    2c:da:a9:6c:6a:bf:1b:18:1c:ee:62:ef:70:75:aa:
                    2d:d6:02:d6:06:8a:0a:b0:d5:d2:6b:51:c8:53:cd:
                    05:b0:6f:2e:da:aa:1a:03:89:94:b8:50:f4:46:a3:
                    e7:7d:a3:7f:85:0e:72:8d:da:72:49:41:5e:23:91:
                    f1:15:c6:c3:bc:64:a1:35:cc:fc:cc:29:52:43:fc:
                    dc:59:f7:dd:9b:ef:f5:e5:72:25:51:68:a5:47:77:
                    70:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:6A:62:7E:26:D2:B3:3F:DB:3D:9F:75:A2:CE:3D:C0:43:A0:0E:AC
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/xGpifibSsz_bPZ91os49wEOgDqw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.171.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         74:0c:45:05:25:1c:73:71:fc:3c:c6:52:8c:fb:45:08:0a:c0:
         fc:b2:8d:4e:ae:3e:b8:85:2a:10:af:4b:9d:6d:ef:57:62:dd:
         bb:76:22:f5:fa:21:57:a8:1d:be:4c:3b:af:7f:f4:a7:48:8e:
         40:9a:18:6d:0a:a8:3f:a1:1a:8d:b8:3b:b2:8a:0a:b8:3b:23:
         57:b2:47:46:dc:2e:26:20:8b:e0:20:5e:a5:1a:48:0d:15:d1:
         1b:69:ee:82:a3:ad:dc:ee:a2:da:5e:07:a4:8c:1d:30:05:a7:
         83:71:99:37:b4:5f:f2:7e:7f:ee:8e:78:8a:bd:66:16:6a:ab:
         41:0b:91:04:6a:29:d4:ff:3f:9f:38:66:d7:f8:34:74:c1:5b:
         4c:c6:3e:37:da:40:41:9d:dc:0a:0b:19:41:6d:d8:d3:58:5c:
         12:c7:a2:3c:66:b2:16:9d:a0:85:94:a3:1d:d1:41:30:29:51:
         c5:13:51:b1:59:c1:7e:c3:d4:09:7b:94:35:bb:4c:02:af:ca:
         23:19:0f:23:ce:f6:e6:d2:9b:05:2d:af:eb:65:97:55:0f:02:
         2a:7d:1d:f4:7a:d8:e4:ed:0c:a6:0f:91:6c:4a:9f:69:cf:d1:
         97:0f:63:6f:b7:4a:d0:87:da:f9:bb:13:e6:ea:fb:f1:46:63:
         e0:72:b4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:39 2024 by rpki-client on console-ams.rpki-client.org