Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/zZqCEqn7VG3DUp1nJt6Or7RgvsI.roa
File:                     zZqCEqn7VG3DUp1nJt6Or7RgvsI.roa (raw, json)
Hash identifier:          BlxuWct45/cKTI5FqtHtu2F4rVH4GEqt0sLXZyUwn9I=
Subject key identifier:   CD:9A:82:12:A9:FB:54:6D:C3:52:9D:67:26:DE:8E:AF:B4:60:BE:C2
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       020B
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/zZqCEqn7VG3DUp1nJt6Or7RgvsI.roa
Signing time:             Mon 01 May 2023 01:35:49 +0000
ROA not before:           Mon 01 May 2023 01:35:49 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        114.20.0.0/15 maxlen: 15

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 523 (0x20b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: May  1 01:35:49 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=CD9A8212A9FB546DC3529D6726DE8EAFB460BEC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4e:33:53:da:8f:9d:be:94:de:a4:c6:2f:cb:
                    f1:3f:52:25:60:12:a8:11:08:24:fe:2b:79:ce:d3:
                    51:28:f2:fb:c5:93:95:a7:19:73:7f:6f:90:ae:5f:
                    27:9d:72:39:7e:ab:d8:1c:25:01:cd:6b:e3:67:7e:
                    c7:8f:1d:b6:96:d8:26:38:b1:64:03:84:ab:8c:4a:
                    fc:34:4d:f3:bf:a6:bd:5f:c1:8c:76:34:7e:90:86:
                    1d:55:31:51:71:46:c3:3e:6d:49:68:5b:92:e7:e2:
                    07:1a:63:14:2c:b1:db:21:20:e4:04:d2:63:21:19:
                    c6:0e:e3:4b:21:7e:7a:44:3c:85:6f:68:76:72:b0:
                    21:21:b6:42:f3:1b:dc:25:76:28:5b:e7:cd:7d:f9:
                    6b:68:09:14:48:21:75:fc:15:a2:2c:83:a1:88:24:
                    8e:f2:b6:db:91:75:bd:40:2e:e2:63:b3:3d:3c:92:
                    69:a4:07:a0:53:83:d7:dd:39:48:00:92:c9:fe:a4:
                    31:1c:70:9b:e6:cc:f0:75:d0:7d:aa:b1:9b:9a:49:
                    d1:07:c8:df:f3:11:f6:83:4d:cc:5f:02:a7:43:26:
                    a1:a4:09:6b:22:ba:6c:71:7c:71:2b:82:ee:58:0c:
                    23:6d:4b:78:5c:e4:b5:49:27:2f:dd:54:9f:d6:65:
                    02:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:9A:82:12:A9:FB:54:6D:C3:52:9D:67:26:DE:8E:AF:B4:60:BE:C2
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/zZqCEqn7VG3DUp1nJt6Or7RgvsI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.20.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         07:f7:e0:fa:fe:1c:2d:8b:73:33:9c:63:7c:1d:d3:6b:fe:86:
         db:6c:66:15:8b:aa:6a:c5:3c:74:a9:62:81:b2:6d:fe:d6:5d:
         47:de:62:23:a6:8a:2a:ef:8b:69:9d:42:53:44:00:59:66:3f:
         e8:ad:60:55:0b:83:1a:c3:14:cd:99:9d:20:56:a4:a5:7a:40:
         11:39:37:68:1c:2d:cb:ca:62:a2:aa:71:e3:1a:fa:6b:25:db:
         77:cd:1b:6f:5d:7b:7c:d0:7b:bd:3b:e1:42:34:75:c9:55:7f:
         29:22:4e:60:88:ac:90:92:7b:0d:1f:b6:0d:30:12:78:91:6a:
         1b:76:7d:95:73:ee:55:3e:1f:5f:95:11:fb:2f:e7:76:97:2f:
         59:9c:61:78:e5:68:72:18:f9:99:2c:02:65:8f:e3:a5:7f:0b:
         a8:2d:26:53:fe:15:d8:2f:49:5f:b1:de:d4:ee:ca:5c:ac:5e:
         1b:d2:b4:5b:07:c0:11:4e:0c:07:e5:7e:9f:18:f9:f2:05:12:
         8e:16:91:33:7c:4f:6f:8d:90:6d:95:52:cc:7b:9e:94:39:d2:
         ad:69:bf:fe:10:13:4b:25:34:fe:ef:2d:7d:19:49:f6:1c:63:
         54:ba:e0:ae:86:59:ea:30:d8:6d:4e:74:36:f2:cf:96:24:64:
         2c:c8:3e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org