Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/yP_50To9Yn3egZxqR-k7_P8eaa8.roa
File:                     yP_50To9Yn3egZxqR-k7_P8eaa8.roa (raw, json)
Hash identifier:          D7MrYUXLfA6u8uTUf/HqCG+4x9aBWGqBcuwS++L7kHc=
Subject key identifier:   C8:FF:F9:D1:3A:3D:62:7D:DE:81:9C:6A:47:E9:3B:FC:FF:1E:69:AF
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       01B8
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/yP_50To9Yn3egZxqR-k7_P8eaa8.roa
Signing time:             Mon 01 May 2023 01:32:08 +0000
ROA not before:           Mon 01 May 2023 01:32:08 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        175.131.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 440 (0x1b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:32:08 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=C8FFF9D13A3D627DDE819C6A47E93BFCFF1E69AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fd:a9:16:4f:5a:84:4d:a5:98:dd:7b:e9:3e:
                    ae:7d:00:bd:92:2f:b6:48:fe:b9:02:fa:c2:3f:8b:
                    88:eb:59:a9:55:2a:a9:ab:29:38:d6:e2:61:fc:b7:
                    71:2a:6b:2d:b2:97:1e:2a:65:8e:e4:3d:c9:0b:3c:
                    0c:d9:df:e3:9a:c2:40:9c:ac:22:83:e0:e8:90:56:
                    62:60:db:a9:d1:54:6f:51:48:7d:f2:f3:b0:5e:ef:
                    44:c4:56:b1:a5:72:d9:95:48:3f:78:6d:2f:2e:8a:
                    7c:f0:83:30:8e:a6:c9:f6:7a:5c:27:39:a5:ad:ed:
                    23:66:2d:d6:86:08:f3:fc:12:db:0b:27:12:d6:22:
                    ea:12:0c:f1:ed:4f:4e:d4:9d:61:e2:3c:8d:fd:23:
                    02:e8:82:3e:85:54:16:58:93:f6:4e:7a:2d:e5:31:
                    6b:c4:e9:f0:cf:29:42:f6:6f:30:19:4e:3b:45:e4:
                    ff:0a:da:73:10:b4:83:cc:1d:a1:43:38:e8:5b:9b:
                    aa:e0:52:5e:c1:1f:8b:e1:b5:4b:00:1c:f4:9d:06:
                    c1:44:f7:7e:bc:f4:87:78:fd:0e:a9:a3:e2:bf:01:
                    c6:c6:09:7e:0b:47:95:b7:24:b1:24:1d:c7:cb:44:
                    51:6c:a4:cb:72:e3:88:9f:77:86:bd:f9:f7:2f:e4:
                    51:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:FF:F9:D1:3A:3D:62:7D:DE:81:9C:6A:47:E9:3B:FC:FF:1E:69:AF
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/yP_50To9Yn3egZxqR-k7_P8eaa8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.131.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0a:14:d1:9d:cd:89:66:ad:09:e9:14:41:d3:44:ff:53:3f:68:
         38:e7:35:b9:0e:2a:62:6f:47:a3:5c:f3:4a:8a:f1:58:2e:43:
         03:fa:91:4c:47:c9:3b:0f:06:95:f5:7c:e5:34:ee:f5:9b:72:
         b9:bf:f3:1a:7b:80:3d:61:b6:3c:76:03:3a:51:87:4e:05:c4:
         b8:55:27:bb:3c:83:e4:07:dd:cc:d0:46:b0:37:17:96:54:25:
         65:26:b8:2f:48:45:ae:fa:d9:19:1e:fb:f1:a5:fd:96:bc:fe:
         64:77:03:19:42:65:e9:86:8e:ce:40:bd:71:6a:00:f7:21:1f:
         cd:f9:52:19:9c:19:c1:b9:66:ad:75:19:d6:09:bd:77:6f:0a:
         0b:6e:db:61:54:1b:42:3b:c6:65:95:e0:6d:8b:ff:c9:b3:99:
         5b:20:3f:1c:61:55:79:57:09:dd:73:12:93:c6:df:fd:8f:e0:
         75:8d:50:31:54:22:c3:ca:4b:cf:57:b9:cf:92:74:e2:46:5d:
         c6:05:59:0b:04:ec:1f:03:92:e0:02:9a:be:b2:cd:f5:1e:4a:
         9d:16:bb:ea:1d:c7:41:a9:82:61:f9:86:88:66:5a:a4:2d:9b:
         11:9c:18:37:11:62:0a:08:b8:83:f2:30:32:1a:59:eb:09:ae:
         05:cd:88:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:39 2024 by rpki-client on console-ams.rpki-client.org