Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/xHBGBUIs6FSfc5BZqop6NYwsRMI.roa
File:                     xHBGBUIs6FSfc5BZqop6NYwsRMI.roa (raw, json)
Hash identifier:          vvaaFUDugf1hL0sNBizjHujUXmuEWBWDbSy4scIhoiU=
Subject key identifier:   C4:70:46:05:42:2C:E8:54:9F:73:90:59:AA:8A:7A:35:8C:2C:44:C2
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       64
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/xHBGBUIs6FSfc5BZqop6NYwsRMI.roa
Signing time:             Tue 07 Jun 2022 10:05:18 +0000
ROA not before:           Tue 07 Jun 2022 10:05:18 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        118.157.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun  7 10:05:18 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=C4704605422CE8549F739059AA8A7A358C2C44C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:52:29:72:7a:e2:54:fd:71:4a:de:8e:91:ae:
                    c1:71:4d:48:7a:23:57:07:c6:32:16:6d:53:a3:ed:
                    40:92:26:fc:9e:e9:d4:3b:11:79:6c:f3:f6:03:20:
                    f2:e1:de:a5:84:94:7f:72:91:9d:07:0c:ff:7f:32:
                    a3:5b:d2:25:2d:65:f9:f8:e2:9b:ce:9c:92:da:32:
                    9c:07:cf:b7:77:da:cb:f8:f0:c4:d1:ff:61:fe:60:
                    90:0b:45:41:40:3d:de:b5:a5:b0:56:77:82:c8:ee:
                    cd:b2:f3:89:64:70:db:2c:8b:36:9d:64:ba:b0:62:
                    8b:b6:0c:9a:17:56:45:0f:20:7f:c8:b2:08:b6:c7:
                    75:54:7c:2f:f0:89:da:8a:b2:54:46:f2:58:69:3a:
                    17:f7:19:02:0f:ce:3c:26:e6:3a:10:b3:b3:5e:8a:
                    f8:2a:d4:2f:de:04:ff:f4:90:cf:95:0f:8d:6a:d1:
                    2b:77:0f:36:b6:14:23:27:7a:c0:b3:81:8a:2a:c4:
                    68:ca:f4:52:6b:ea:75:83:e1:51:ff:3f:09:d5:dc:
                    d7:94:73:6d:1f:81:25:74:ee:1a:71:fb:d2:fd:51:
                    12:79:a7:e5:36:e6:b8:14:c8:44:10:b5:e5:90:11:
                    70:27:81:41:51:78:6b:94:ee:9f:14:ec:8a:c6:2b:
                    60:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:70:46:05:42:2C:E8:54:9F:73:90:59:AA:8A:7A:35:8C:2C:44:C2
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/xHBGBUIs6FSfc5BZqop6NYwsRMI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.157.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         83:da:e9:27:0d:d9:6c:40:55:c2:99:43:9b:f5:4a:ff:72:db:
         10:07:5c:75:48:60:f2:aa:13:54:7b:c0:df:85:ea:74:f6:9c:
         7c:e5:af:65:e2:a9:6b:24:4b:60:b4:78:0f:fd:c6:57:9c:b6:
         92:a8:3d:23:29:e4:03:32:e4:85:74:69:6a:77:57:4e:cf:3b:
         14:50:48:86:cb:b7:52:2b:0b:c6:4a:27:79:c9:5f:17:54:1f:
         dd:1e:80:ba:92:b7:85:8e:b3:ef:fe:12:ce:b0:dd:38:e6:36:
         71:c8:34:d2:19:2f:1c:f9:82:cb:28:a2:74:f2:0f:2b:03:3d:
         0b:28:17:c1:27:8e:07:75:64:75:fc:89:ab:d5:ae:b6:09:d3:
         9d:f0:96:38:03:f8:c5:5d:68:bb:68:84:65:30:7f:4c:d5:52:
         33:c5:19:ed:36:f9:d7:28:4a:9c:54:e1:d0:81:39:b4:06:74:
         30:86:e8:05:de:09:44:a8:c7:c2:35:24:e6:d5:8a:64:0a:11:
         e1:a8:fd:47:c3:a6:79:46:12:4c:53:ac:72:08:cf:25:48:9b:
         e2:08:4c:c1:88:b2:1f:db:a3:2f:b4:2e:1b:a7:60:55:d2:9c:
         27:06:2c:c1:7f:e8:28:44:2f:be:31:b6:99:3f:34:d2:99:ee:
         72:a1:2c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org