Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30367/ZV_Mn5Wv5igsPPjP2qC84eBkSWY.roa
File:                     ZV_Mn5Wv5igsPPjP2qC84eBkSWY.roa (raw, json)
Hash identifier:          khe+BJbxyJ5r2mwFIZ3C0YS0m/QwVUPW5wxobXZAVGM=
Subject key identifier:   65:5F:CC:9F:95:AF:E6:28:2C:3C:F8:CF:DA:A0:BC:E1:E0:64:49:66
Certificate issuer:       /CN=82E5B28A20F4C6A62A4612F6C5DFB7A3D64D9DEA
Certificate serial:       16
Authority key identifier: 82:E5:B2:8A:20:F4:C6:A6:2A:46:12:F6:C5:DF:B7:A3:D6:4D:9D:EA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/ZV_Mn5Wv5igsPPjP2qC84eBkSWY.roa
Signing time:             Mon 07 Nov 2022 05:43:00 +0000
ROA not before:           Mon 07 Nov 2022 05:43:00 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     131921
IP address blocks:        2406:a1c0:400::/40 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82E5B28A20F4C6A62A4612F6C5DFB7A3D64D9DEA
        Validity
            Not Before: Nov  7 05:43:00 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=655FCC9F95AFE6282C3CF8CFDAA0BCE1E0644966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4b:5e:a2:7f:ef:c6:f6:cd:3e:4e:a9:4b:c1:
                    66:99:61:0d:c0:95:f5:cd:b2:1f:8a:f6:02:08:b2:
                    79:9e:bb:e9:2a:1b:01:5d:39:df:0d:b8:c9:c8:4f:
                    16:ed:55:fa:3a:7e:48:07:24:8f:46:03:73:39:0e:
                    f3:d7:c6:7a:b5:51:0d:14:8c:27:81:37:df:89:89:
                    86:03:9d:b0:97:8d:bf:50:74:f9:f9:f4:45:62:6b:
                    69:74:8c:58:f5:b0:79:63:f3:84:fd:d4:cf:8e:b5:
                    7a:e5:c4:d3:38:d8:99:f8:35:0d:ec:1b:99:0e:f1:
                    c4:92:82:da:b4:3e:9c:e4:19:c1:7a:75:33:59:51:
                    f9:47:30:b0:b7:8f:a1:28:61:60:b4:6f:dd:54:5b:
                    92:44:45:4a:03:01:66:2e:eb:65:3e:d3:57:c9:46:
                    2e:bd:2c:83:cc:e2:3b:ef:fe:3c:8a:bf:43:37:d7:
                    9a:1b:06:b1:9a:1f:55:af:dd:04:f3:ff:7f:9f:0d:
                    fd:30:d0:7f:a1:a1:35:fe:90:f9:67:c7:4c:34:95:
                    7c:e4:8d:82:3e:32:32:66:d7:d6:8f:e0:c1:79:67:
                    5f:26:e2:15:e9:35:83:5a:65:23:3d:a6:5a:25:9d:
                    cd:5a:5b:f9:e9:e0:d7:b9:2e:06:f4:62:7c:d3:73:
                    1f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:5F:CC:9F:95:AF:E6:28:2C:3C:F8:CF:DA:A0:BC:E1:E0:64:49:66
            X509v3 Authority Key Identifier:
                keyid:82:E5:B2:8A:20:F4:C6:A6:2A:46:12:F6:C5:DF:B7:A3:D6:4D:9D:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/ZV_Mn5Wv5igsPPjP2qC84eBkSWY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:a1c0:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         8c:6e:71:d7:5e:52:c1:c8:8a:db:8b:5c:79:cb:ff:2d:7d:8f:
         64:0f:eb:39:33:87:0d:db:37:96:13:b9:29:d8:2b:d1:34:5f:
         22:f1:9c:12:7d:ff:18:d4:b7:b9:46:08:b0:b6:ca:d4:eb:04:
         8a:a5:79:59:73:8c:1e:94:f5:e5:b0:29:26:48:8c:31:6a:25:
         b8:d9:db:74:34:94:2c:7a:55:81:da:b1:d3:b8:1c:44:ef:c3:
         da:a6:51:88:e9:ab:c4:5f:78:ca:fd:9e:27:80:9b:92:ef:08:
         a7:b4:3e:bf:7a:93:1b:c2:45:0d:96:9a:31:c2:93:b6:ae:64:
         cd:58:ae:b9:8b:1b:ff:1b:77:1e:42:bf:73:0c:f0:5e:25:92:
         ce:18:6d:63:29:06:b4:0d:e7:8c:2e:a3:b9:c7:02:84:22:e0:
         42:38:d4:01:89:6d:09:c2:e4:b6:e2:bb:b6:2d:19:a8:3e:23:
         8c:bf:2e:43:84:70:68:14:12:b3:3e:d9:fa:72:e6:fe:4c:13:
         63:d5:7b:2f:e4:60:27:af:0b:bb:c0:4e:1f:ef:5d:76:dc:93:
         26:49:4f:69:aa:09:b8:c6:6c:39:d9:6c:3d:d4:10:84:ce:c6:
         6b:aa:a3:45:b7:cb:88:df:1b:1c:00:5c:bf:af:11:e5:bf:22:
         1d:be:7b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:00 2024 by rpki-client on console-ams.rpki-client.org