Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/zYCj4e0xdQaVGiSxw86Gs6kek-w.roa
File:                     zYCj4e0xdQaVGiSxw86Gs6kek-w.roa (raw, json)
Hash identifier:          mrjUxmokXjPRcFlcR336pTPkDRtoPzq9ic/HXe0GjdY=
Subject key identifier:   CD:80:A3:E1:ED:31:75:06:95:1A:24:B1:C3:CE:86:B3:A9:1E:93:EC
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       01E1
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/zYCj4e0xdQaVGiSxw86Gs6kek-w.roa
Signing time:             Mon 01 May 2023 01:33:42 +0000
ROA not before:           Mon 01 May 2023 01:33:42 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        121.111.192.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 481 (0x1e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:33:42 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=CD80A3E1ED317506951A24B1C3CE86B3A91E93EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c4:9c:8d:04:72:8c:7f:7e:71:c4:b3:b7:78:
                    bd:60:41:fe:a4:f5:86:c4:5d:34:a1:99:35:b3:25:
                    44:61:80:bb:2a:c5:06:1e:4d:b1:ea:fb:15:be:ff:
                    a9:ce:13:ca:5a:e4:22:1f:da:0b:8c:3b:02:6a:c4:
                    52:c9:68:1e:d0:a3:fb:0f:ae:a5:65:f8:05:99:cc:
                    d5:97:92:ba:8a:9b:e7:68:19:ee:e0:8d:20:de:a3:
                    61:aa:db:10:09:64:5d:b1:62:01:ec:00:b1:19:f3:
                    b5:fc:fe:dc:c5:65:24:ee:9c:2d:60:7e:75:89:70:
                    9d:c9:32:94:76:b0:04:2e:76:0f:fc:de:e4:66:f2:
                    f7:db:62:59:df:86:97:bd:19:ce:47:61:40:64:89:
                    b2:02:a5:87:6b:22:e3:9c:6b:b2:24:64:84:6f:2b:
                    24:b1:53:82:8f:c6:c1:fd:d7:7b:4b:39:03:7d:69:
                    81:e1:ab:dd:de:9a:95:0e:71:63:60:7d:4e:a3:6a:
                    fe:3c:ee:60:a0:f3:f5:8d:12:63:1c:8f:4e:10:51:
                    8c:06:c3:d9:c1:d9:bb:98:66:f9:ba:34:10:b1:28:
                    c3:60:c5:0f:5b:dc:25:79:21:c3:40:50:d2:07:cf:
                    1c:9d:76:94:f9:26:bf:ea:d1:8c:61:26:a4:ef:0f:
                    de:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:80:A3:E1:ED:31:75:06:95:1A:24:B1:C3:CE:86:B3:A9:1E:93:EC
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/zYCj4e0xdQaVGiSxw86Gs6kek-w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.111.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         38:28:6d:73:fd:cb:b6:02:58:f5:38:71:b5:83:d4:b0:f4:3c:
         07:3c:4f:c9:5c:9e:26:54:8f:7c:5e:d1:f9:8f:e1:bf:79:52:
         4f:9b:ca:e5:6d:c7:75:cc:49:b9:89:a1:47:56:65:6f:f5:78:
         33:08:a7:e7:f8:3f:04:23:ac:54:68:38:7d:f1:f6:04:e0:a9:
         8d:30:ba:20:81:a6:bb:06:6b:b4:c2:44:85:a2:b2:86:6e:04:
         85:1f:0d:dc:58:0c:f7:1d:73:eb:9c:56:08:b1:e2:a5:16:6b:
         14:f4:4a:ea:b9:eb:ba:d3:1f:59:da:7c:48:48:4c:ea:d0:81:
         83:96:44:ef:38:5f:6a:c5:e9:7a:de:ae:8d:41:65:87:ee:7b:
         d3:61:52:5a:8f:4e:7c:17:a8:da:38:fd:9b:92:44:d8:8f:7f:
         19:b8:ec:57:1d:43:8e:87:4c:e2:02:55:75:37:2c:01:65:9f:
         5d:fc:28:49:a0:57:92:9a:37:5a:ef:87:7f:76:96:97:b0:77:
         ca:e0:7e:6f:58:e3:3e:ea:7e:25:e1:cf:cb:20:54:9d:76:56:
         ee:11:5a:7c:d7:8c:b1:34:2c:1b:6f:27:de:a2:5e:2c:5f:31:
         9b:05:40:52:59:da:b7:3e:82:03:8f:d4:8d:1b:72:66:86:d0:
         d1:99:50:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org