Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/xbpO_sJzCM-iNW-dRNnqXYARjrM.roa
File:                     xbpO_sJzCM-iNW-dRNnqXYARjrM.roa (raw, json)
Hash identifier:          8zQvgwb4MfHAq30BaMfztwTGsw8HE0473RSMIfLMxzY=
Subject key identifier:   C5:BA:4E:FE:C2:73:08:CF:A2:35:6F:9D:44:D9:EA:5D:80:11:8E:B3
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0186
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/xbpO_sJzCM-iNW-dRNnqXYARjrM.roa
Signing time:             Mon 01 May 2023 01:28:53 +0000
ROA not before:           Mon 01 May 2023 01:28:53 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        59.135.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 390 (0x186)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:28:53 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=C5BA4EFEC27308CFA2356F9D44D9EA5D80118EB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b8:12:8d:51:48:3f:88:86:cd:4d:20:be:e6:
                    b4:88:5d:ab:61:0d:8e:be:b2:89:38:64:e1:ad:8d:
                    26:33:56:e2:86:1a:af:92:f0:59:e3:d9:a8:c4:ed:
                    ef:e7:ce:17:3d:98:68:6b:7c:10:0c:39:8f:23:fe:
                    19:1a:4f:f6:8a:dc:ad:89:15:e3:10:d7:97:35:f1:
                    0e:00:15:20:be:56:6b:b5:8e:01:5e:cd:2a:b7:0a:
                    5a:76:5c:e5:05:72:70:63:59:64:53:8c:dd:5d:77:
                    aa:06:c1:e7:41:a2:ac:63:15:26:f9:7e:a4:2b:ce:
                    13:3b:b7:e3:d6:69:05:68:ff:08:81:39:f0:1e:1b:
                    2f:37:db:74:be:c5:03:40:11:a8:b0:de:46:04:ec:
                    90:92:99:b8:22:fd:c6:d1:0a:09:a7:4c:65:3e:81:
                    37:bb:72:d5:e7:05:c8:62:37:52:70:33:8a:89:e7:
                    9c:84:27:d4:59:b4:84:52:f0:1c:3a:fd:1d:f3:be:
                    00:7b:fa:f3:9a:88:4c:d9:0d:36:27:78:e7:6f:da:
                    35:f1:34:63:98:40:b7:cc:b2:f2:76:db:f1:84:7e:
                    61:bb:47:dd:19:40:3e:10:fe:b4:f2:aa:31:3b:9e:
                    9d:19:1f:f4:50:98:65:c7:c2:7d:5e:be:1f:c5:8e:
                    ba:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:BA:4E:FE:C2:73:08:CF:A2:35:6F:9D:44:D9:EA:5D:80:11:8E:B3
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/xbpO_sJzCM-iNW-dRNnqXYARjrM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.135.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         07:b9:f1:b2:7b:bd:e1:e7:1f:05:0b:48:0d:53:0a:71:56:36:
         b6:a5:2b:2a:ed:df:29:49:ee:b5:6c:c8:bf:b3:f9:4d:e1:4d:
         09:ed:e5:1a:ef:1d:02:c8:52:0e:a7:76:19:8e:e9:bb:26:c0:
         84:5c:26:ad:dd:b8:1e:ca:5f:32:52:6c:6f:c1:a2:8c:30:c0:
         2d:d0:d8:4e:95:60:58:e5:fb:97:aa:a5:2e:9f:02:8e:8b:39:
         fc:30:69:a6:15:ac:2f:b3:5f:09:92:93:1e:a6:8d:f4:22:f0:
         2b:7f:32:59:d1:23:9a:94:f2:67:56:aa:63:b4:46:85:76:4d:
         01:17:5d:ae:bf:47:6a:ff:70:90:6c:34:93:9f:b9:93:ff:9e:
         25:66:08:e8:23:7b:52:cd:80:1c:46:1f:6b:f2:22:6c:f1:ce:
         67:86:58:7a:fe:58:0e:f5:0d:eb:71:1a:1e:19:b8:83:45:51:
         b8:c6:2c:f0:ff:2e:09:a4:02:85:e8:f9:3f:41:d7:0d:7a:06:
         65:00:80:9e:a8:16:34:64:3f:df:70:76:f9:85:41:90:83:19:
         30:7f:ce:e1:4b:7d:e8:a0:7e:be:c2:53:12:9a:e5:f4:a8:b7:
         b7:08:5b:b7:0f:87:d9:a6:40:bb:2d:c7:01:3f:f6:81:3f:4a:
         a6:46:89:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:39 2024 by rpki-client on console-ams.rpki-client.org