Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30367/VJrhDvppzLy966U6Z_nGMyQui6A.roa
File:                     VJrhDvppzLy966U6Z_nGMyQui6A.roa (raw, json)
Hash identifier:          QAjx3MhCn+oCCdklZ4Y5oPJzbpdgAjQOVT7DxDIkPjY=
Subject key identifier:   54:9A:E1:0E:FA:69:CC:BC:BD:EB:A5:3A:67:F9:C6:33:24:2E:8B:A0
Certificate issuer:       /CN=82E5B28A20F4C6A62A4612F6C5DFB7A3D64D9DEA
Certificate serial:       12
Authority key identifier: 82:E5:B2:8A:20:F4:C6:A6:2A:46:12:F6:C5:DF:B7:A3:D6:4D:9D:EA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/VJrhDvppzLy966U6Z_nGMyQui6A.roa
Signing time:             Mon 07 Nov 2022 05:41:00 +0000
ROA not before:           Mon 07 Nov 2022 05:41:00 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     131921
IP address blocks:        2406:a1c0:2::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82E5B28A20F4C6A62A4612F6C5DFB7A3D64D9DEA
        Validity
            Not Before: Nov  7 05:41:00 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=549AE10EFA69CCBCBDEBA53A67F9C633242E8BA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a6:c6:ae:8a:d2:76:31:e9:42:aa:9b:19:50:
                    1d:e2:8c:4e:47:b3:1e:65:66:8d:08:ab:91:73:79:
                    b8:7e:15:73:fb:5f:90:d7:3c:16:9b:f5:f2:b9:e9:
                    c8:95:d2:e5:c3:d8:ef:21:c0:02:0a:1a:9e:5d:1d:
                    90:57:6e:bb:9a:5d:b6:fa:42:4f:11:f9:52:7a:98:
                    08:52:38:51:30:ec:12:2e:ee:8b:d6:0c:00:a4:2f:
                    2d:d8:9f:41:bf:ac:fd:04:9d:fd:44:d7:06:b9:3b:
                    3d:44:24:37:24:70:01:28:88:16:d2:9a:b7:00:94:
                    cc:92:b7:cb:ed:61:0e:60:84:69:6c:8e:9a:10:d7:
                    ad:67:a5:e9:9c:fb:a7:16:43:c1:4c:a5:fd:e3:6b:
                    9e:4f:a8:40:b6:1d:9b:1c:92:03:fd:c0:60:72:2c:
                    55:08:bd:10:53:14:a8:7c:c6:ff:e7:af:f6:a6:76:
                    10:bb:9a:85:4f:cc:66:c0:a9:ca:b0:72:ef:cd:a6:
                    e3:68:02:2c:ec:33:1f:84:14:de:91:6d:45:1d:47:
                    d9:ff:67:3f:77:99:d1:8b:13:cc:e9:1d:a6:0e:4e:
                    84:07:c0:50:ab:1b:0d:6d:52:8a:26:70:10:7e:73:
                    ce:05:42:72:6e:e1:99:42:71:e7:fe:53:12:58:27:
                    8d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:9A:E1:0E:FA:69:CC:BC:BD:EB:A5:3A:67:F9:C6:33:24:2E:8B:A0
            X509v3 Authority Key Identifier:
                keyid:82:E5:B2:8A:20:F4:C6:A6:2A:46:12:F6:C5:DF:B7:A3:D6:4D:9D:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/VJrhDvppzLy966U6Z_nGMyQui6A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:a1c0:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:5a:fb:90:01:0c:94:37:37:ec:7d:cb:24:7e:98:b8:9c:66:
         95:2a:7a:b1:08:d8:5b:00:2c:14:8c:91:87:f3:2b:0a:55:c4:
         f0:00:58:14:3c:85:7e:c0:df:01:50:9d:b5:f4:e7:7a:78:c7:
         73:f5:2a:dc:b8:9b:93:1f:9c:a5:4a:3d:82:c6:5d:62:27:7f:
         b2:1e:d1:40:ac:3e:7e:62:26:14:4c:8c:83:9a:0a:2e:3c:69:
         ff:c2:9d:16:81:ad:a2:15:05:96:d9:ac:df:f4:36:55:1d:ab:
         41:09:3d:19:00:07:43:3e:3f:7f:82:f1:e4:f0:56:c0:15:87:
         a6:e7:08:3d:97:07:21:83:77:7e:68:9a:93:1c:dd:ae:b9:50:
         10:32:45:f4:64:4b:86:9e:03:13:35:b5:2c:06:1c:69:bb:a6:
         aa:0e:2a:03:c7:fa:72:99:52:ae:e0:6d:02:28:98:9f:04:d3:
         d9:d6:f6:e9:c9:2f:b5:04:3c:53:09:82:05:45:bc:c8:19:d8:
         ed:75:5a:48:63:65:47:db:80:db:ee:ee:92:c2:a6:10:ba:af:
         d3:d5:68:8a:f6:bd:1e:a2:f5:cd:5f:af:ec:a1:89:2c:4f:d2:
         b8:2d:a0:10:34:8b:f0:a7:a0:07:07:6f:25:40:4b:8a:0e:ee:
         8d:3e:e8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:00 2024 by rpki-client on console-ams.rpki-client.org