Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/xYDFHQ9w6D8tkcI77VcI6_YCMD0.roa
File:                     xYDFHQ9w6D8tkcI77VcI6_YCMD0.roa (raw, json)
Hash identifier:          N3pZIUmi+Nfva6rAJldpGHcqYazUzSx9quC8tf2CC14=
Subject key identifier:   C5:80:C5:1D:0F:70:E8:3F:2D:91:C2:3B:ED:57:08:EB:F6:02:30:3D
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       DF
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/xYDFHQ9w6D8tkcI77VcI6_YCMD0.roa
Signing time:             Tue 14 Jun 2022 09:32:06 +0000
ROA not before:           Tue 14 Jun 2022 09:32:06 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     2516
IP address blocks:        59.128.0.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 223 (0xdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Jun 14 09:32:06 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=C580C51D0F70E83F2D91C23BED5708EBF602303D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:49:8d:14:3f:da:01:b4:0e:10:94:c8:24:ab:
                    02:ec:fb:30:96:8d:3d:55:0b:2f:e3:f6:68:9d:4a:
                    d4:50:2d:80:34:f6:45:3f:1d:2a:8d:73:67:ef:73:
                    d6:5d:5c:5c:9e:17:cf:a0:69:6f:1c:b1:d9:fe:c5:
                    bf:91:45:04:ad:1f:23:05:2e:0a:3e:ed:89:99:26:
                    4a:6f:38:de:ab:8c:0b:31:cb:7d:66:10:94:76:84:
                    3e:e0:55:98:ad:cd:84:33:dc:ef:14:9c:29:68:9e:
                    62:28:48:05:04:5d:45:66:22:ae:3c:c6:f2:5e:c1:
                    b7:11:fc:7c:a7:08:dc:06:64:00:ed:05:e8:85:1c:
                    8e:64:bd:76:c7:06:a6:c5:9c:c9:bc:e5:78:03:74:
                    e6:ec:2a:c1:21:36:5c:4d:0e:39:4e:ab:8e:87:5e:
                    42:4a:78:cb:d2:be:2c:f5:58:6d:8d:e3:e8:c6:0b:
                    7e:fc:bd:81:c2:44:e4:b6:28:c8:2e:10:5c:47:ca:
                    99:76:16:f2:dc:9d:3f:c6:1a:0f:1e:07:73:3c:07:
                    08:5e:9a:e3:a7:f4:0a:37:91:25:54:5e:d4:da:aa:
                    c1:bc:71:d9:52:a1:69:bb:70:41:a0:b1:51:d6:ce:
                    eb:e0:8b:46:f8:ed:9e:7a:61:c3:d0:c6:45:f2:62:
                    f1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:80:C5:1D:0F:70:E8:3F:2D:91:C2:3B:ED:57:08:EB:F6:02:30:3D
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/xYDFHQ9w6D8tkcI77VcI6_YCMD0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.128.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4c:33:f2:b4:00:4b:87:a4:46:05:8e:4b:aa:1c:3e:34:fc:8a:
         4c:b3:84:25:4b:78:ca:19:00:71:a3:35:ad:1f:29:73:5d:e4:
         1e:da:ac:cf:a6:df:5d:87:3f:c3:bb:df:88:73:f6:65:00:b9:
         38:8e:00:fb:16:d8:57:79:07:27:c8:ee:4d:25:75:04:2a:2b:
         a0:a0:03:55:87:a1:ed:12:7e:85:82:53:16:fb:1f:b1:5d:2d:
         ea:e1:76:9a:81:6a:7e:b5:05:f9:bf:83:76:53:de:2f:6e:e3:
         94:10:dd:c0:72:8b:bb:f6:cc:65:47:9b:cf:ba:30:90:7d:58:
         a4:b5:5c:7f:b5:fe:db:f2:0d:7b:b6:ab:63:7f:b7:57:af:88:
         fe:b1:66:33:c8:af:25:cd:97:8c:8a:40:cc:0c:26:cc:e5:6b:
         41:73:53:f8:07:3f:00:91:00:4d:3e:6a:9f:85:83:6d:12:90:
         a5:df:65:88:0a:be:04:02:bd:79:50:0c:fc:2d:50:eb:a1:0a:
         05:ae:e8:dc:76:90:9b:d0:6b:4d:96:b7:f2:7d:bc:d9:fd:ce:
         b4:e1:df:5b:00:f5:09:a0:a3:80:09:a9:24:83:5b:f1:44:48:
         5b:ec:b9:d3:47:b0:bf:2c:b8:c2:e9:44:48:48:e7:b4:09:e2:
         2b:10:69:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:39 2024 by rpki-client on console-ams.rpki-client.org