Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/y0ZGQI_ukXB_8w4aoGChSkCLLW4.roa
File:                     y0ZGQI_ukXB_8w4aoGChSkCLLW4.roa (raw, json)
Hash identifier:          YcFss8Z2kEF7AUPumsiNFgEVSERdxQnL28llL3TW2Uo=
Subject key identifier:   CB:46:46:40:8F:EE:91:70:7F:F3:0E:1A:A0:60:A1:4A:40:8B:2D:6E
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       018D
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/y0ZGQI_ukXB_8w4aoGChSkCLLW4.roa
Signing time:             Mon 01 May 2023 01:30:27 +0000
ROA not before:           Mon 01 May 2023 01:30:27 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        118.155.128.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 397 (0x18d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:30:27 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=CB4646408FEE91707FF30E1AA060A14A408B2D6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:50:bd:a2:98:93:3f:f7:70:b3:66:b5:86:be:
                    54:ab:9b:dd:a2:a0:ba:d9:80:12:38:5c:9c:f8:e7:
                    18:0c:14:21:c9:e8:2b:b7:80:15:33:a0:1a:a5:e6:
                    2c:76:96:7d:ab:14:f1:71:54:34:80:63:5c:be:ec:
                    d6:ff:6f:50:26:05:df:1e:74:92:74:7d:cb:1e:56:
                    e1:bb:12:1e:02:dd:a3:55:62:e6:76:8f:e8:f3:d7:
                    09:89:a5:92:bc:60:ed:e5:07:f6:f8:08:32:6d:c3:
                    5d:80:9f:cf:68:72:01:00:e7:0d:5b:88:0e:8b:b8:
                    9d:a5:7f:7c:29:8f:81:7a:dc:34:09:fc:db:88:37:
                    3b:53:3c:1d:62:53:bb:47:84:41:50:77:e9:a9:2e:
                    2b:b3:96:9b:4b:f3:d8:a9:8b:91:bf:8b:eb:49:03:
                    dd:5e:54:70:80:64:65:f0:67:cc:1b:9d:a4:46:a9:
                    4a:f2:c6:56:dd:54:1d:fe:49:8b:d0:18:32:ad:66:
                    f7:65:fd:c0:21:da:dd:77:62:57:31:56:e1:fb:ab:
                    9d:96:ca:90:8d:d3:7a:3b:66:f4:c7:59:de:f9:80:
                    4c:bc:28:5b:63:54:1c:65:7d:a6:e3:4e:94:8a:e3:
                    76:a8:86:09:5d:e6:f0:ad:c8:56:0b:62:07:e5:e9:
                    52:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:46:46:40:8F:EE:91:70:7F:F3:0E:1A:A0:60:A1:4A:40:8B:2D:6E
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/y0ZGQI_ukXB_8w4aoGChSkCLLW4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.155.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         91:86:8e:7d:70:b7:dd:8c:5e:92:e7:7b:d4:18:92:84:b0:a5:
         e3:79:a4:d4:dc:3c:d0:3e:c4:e5:ec:89:4d:be:92:ba:51:87:
         f2:27:bb:a4:ef:de:36:31:47:c7:28:4e:64:80:af:c4:d6:b6:
         e6:60:c8:d5:e6:d5:6f:05:dc:ea:60:2f:79:52:c5:4e:d1:91:
         1c:04:de:14:4c:74:d9:5a:e8:42:04:c2:53:8e:41:5d:7b:47:
         bc:10:be:8e:3c:05:16:f1:d4:0c:6c:e9:8a:01:4b:10:9f:8b:
         0c:11:29:4f:00:5e:b0:0c:c2:48:a9:e9:db:7c:f1:d1:f9:49:
         a1:6d:6b:05:a7:5f:95:3c:76:b4:ba:51:f2:75:ca:9b:a0:48:
         5d:a2:31:8a:cc:3f:41:ce:53:b4:62:cb:52:59:3a:98:03:16:
         94:1e:b4:44:7b:ff:55:90:ed:00:0f:cf:31:41:ab:4a:9f:b5:
         ab:1b:a1:7e:4c:be:a2:70:da:03:77:f5:a7:9e:54:18:3a:60:
         2c:89:15:f7:3f:4b:51:66:a6:c4:d9:b0:90:20:7d:e9:6b:d7:
         e2:db:0f:f1:3b:24:76:f0:9f:af:b8:0a:ff:45:29:e8:11:2b:
         2f:23:89:02:58:10:ad:04:d2:df:7b:8d:a8:e4:9c:f1:74:cf:
         a1:28:92:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org