Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30040/Xk7Cc--UgVNM4zM8r9BFRDXnPKY.roa
File:                     Xk7Cc--UgVNM4zM8r9BFRDXnPKY.roa (raw, json)
Hash identifier:          +fihzk/1wk9m4IPFJqsl+1aJFstixPxrBliWvcpwb3I=
Subject key identifier:   5E:4E:C2:73:EF:94:81:53:4C:E3:33:3C:AF:D0:45:44:35:E7:3C:A6
Certificate issuer:       /CN=5DEFF9E1A97D46CCDC12F606EEB38A3E64DBC81F
Certificate serial:       04
Authority key identifier: 5D:EF:F9:E1:A9:7D:46:CC:DC:12:F6:06:EE:B3:8A:3E:64:DB:C8:1F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xe_54al9RszcEvYG7rOKPmTbyB8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/Xk7Cc--UgVNM4zM8r9BFRDXnPKY.roa
Signing time:             Mon 20 Feb 2023 03:56:56 +0000
ROA not before:           Mon 20 Feb 2023 03:56:56 +0000
ROA not after:            Fri 16 Feb 2024 08:11:04 +0000
asID:                     9619
IP address blocks:        2001:cf8:acf::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DEFF9E1A97D46CCDC12F606EEB38A3E64DBC81F
        Validity
            Not Before: Feb 20 03:56:56 2023 GMT
            Not After : Feb 16 08:11:04 2024 GMT
        Subject: CN=5E4EC273EF9481534CE3333CAFD0454435E73CA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:66:a7:c4:eb:6c:28:88:0d:70:9c:bc:42:c1:
                    45:d2:16:cc:bb:72:91:6a:64:b5:01:c6:82:aa:1b:
                    11:e9:3c:5d:be:af:01:a4:ec:c3:69:f0:a6:51:4e:
                    76:0e:e6:06:57:8f:9f:c5:5d:85:26:89:91:a6:6f:
                    61:3f:d8:32:bb:18:b7:a5:76:0a:8a:93:1f:21:53:
                    71:4b:2e:b2:ef:fb:c4:23:ac:93:f4:26:63:a4:5c:
                    41:cf:c8:ed:40:a5:46:88:af:07:68:8a:e9:58:66:
                    25:61:15:33:43:85:fb:71:4f:ac:36:b7:8d:d1:89:
                    d9:1a:ab:03:0b:42:29:87:75:63:32:d6:9b:50:c4:
                    9a:96:fb:9c:1b:9e:fd:06:80:47:ca:4f:24:22:26:
                    74:ab:05:05:ab:a4:7c:e3:56:97:12:d6:d7:1a:b2:
                    f8:e7:40:f9:de:7c:99:3f:8e:a9:13:12:78:30:ea:
                    58:a1:ec:f0:67:aa:9b:e8:ce:a9:1e:4d:43:0f:02:
                    bf:86:ef:07:be:f7:76:9c:84:ac:9a:88:0f:77:cd:
                    fb:34:1f:29:42:d6:8e:41:04:1b:a9:44:bb:7e:38:
                    26:bc:28:05:5a:3a:68:11:73:ab:4a:26:6a:62:3b:
                    a7:7b:ca:16:98:99:57:ee:64:b4:53:ce:53:a5:7d:
                    3f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:4E:C2:73:EF:94:81:53:4C:E3:33:3C:AF:D0:45:44:35:E7:3C:A6
            X509v3 Authority Key Identifier:
                keyid:5D:EF:F9:E1:A9:7D:46:CC:DC:12:F6:06:EE:B3:8A:3E:64:DB:C8:1F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/Xe_54al9RszcEvYG7rOKPmTbyB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xe_54al9RszcEvYG7rOKPmTbyB8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/Xk7Cc--UgVNM4zM8r9BFRDXnPKY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:cf8:acf::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:e4:00:ba:dd:d6:50:06:ad:77:f9:99:11:d4:cd:74:56:6e:
         ff:28:22:ef:05:4a:ad:74:39:f5:15:19:f8:98:e5:36:8d:fa:
         29:40:62:ae:ff:f9:78:ea:89:62:bd:37:2c:a7:48:47:56:46:
         b5:64:22:c5:77:8e:3d:12:f2:40:f2:a4:28:97:d0:f5:9d:cb:
         79:ef:00:0a:d6:15:3e:11:0a:16:46:fc:68:ae:d0:4b:7f:33:
         d2:34:df:a1:a8:82:80:72:6b:90:b6:14:5c:0b:04:61:7b:8e:
         09:46:41:8f:12:71:e7:5c:7a:63:56:e8:95:e6:d2:f0:a9:0c:
         8c:9a:17:ec:29:95:52:d2:77:fd:07:fb:0a:ed:0d:09:ac:b4:
         62:d9:57:34:b0:6c:6a:a4:1a:6e:35:a3:33:81:b2:7e:65:7d:
         3f:86:3e:2d:a6:cf:77:39:87:78:11:a6:db:a0:4e:9a:ac:a4:
         66:28:d1:0b:fa:5f:40:34:85:d4:21:4f:2c:41:f4:1a:de:6e:
         eb:a4:e9:3f:48:3a:15:02:e7:b5:29:3e:9f:14:2e:9f:93:24:
         05:fc:e8:58:24:0e:0b:da:b1:6e:3f:ed:fc:1a:1e:ad:7e:ed:
         ac:96:82:22:5d:d6:28:e7:f1:d0:28:63:88:f2:44:47:d3:e5:
         c3:c3:2c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org