Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30003/uJHmeZZBjGminlcHvziJTqQ4d7Q.roa
File:                     uJHmeZZBjGminlcHvziJTqQ4d7Q.roa (raw, json)
Hash identifier:          4WX9TIvJV8JOThC0makKdZ/qETVDULhsvFTnxT0538o=
Subject key identifier:   B8:91:E6:79:96:41:8C:69:A2:9E:57:07:BF:38:89:4E:A4:38:77:B4
Certificate issuer:       /CN=EA6B49B0752AD3BE3DD683B8AEEA2205F5AFD279
Certificate serial:       42
Authority key identifier: EA:6B:49:B0:75:2A:D3:BE:3D:D6:83:B8:AE:EA:22:05:F5:AF:D2:79
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6mtJsHUq07491oO4ruoiBfWv0nk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/uJHmeZZBjGminlcHvziJTqQ4d7Q.roa
Signing time:             Fri 17 Mar 2023 13:10:15 +0000
ROA not before:           Fri 17 Mar 2023 13:10:15 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     0
IP address blocks:        2001:7fa:7::/48 maxlen: 128

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA6B49B0752AD3BE3DD683B8AEEA2205F5AFD279
        Validity
            Not Before: Mar 17 13:10:15 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=B891E67996418C69A29E5707BF38894EA43877B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:41:e3:84:86:32:15:a1:5b:29:d8:89:88:03:
                    42:b4:4f:d8:48:bc:c5:8b:ce:da:5b:22:7a:66:3b:
                    0f:c0:a7:4b:33:7c:cf:35:40:84:c2:d2:c2:21:1a:
                    b7:a8:12:a8:04:17:02:9a:a8:a8:98:f6:7a:14:cb:
                    1e:5f:67:b9:46:1f:85:44:f9:50:c2:e0:81:80:fa:
                    49:d2:71:92:5e:91:8e:28:f1:92:3d:ef:fc:64:0c:
                    cd:ed:6f:e2:4f:6e:7a:70:8c:95:46:b6:db:76:be:
                    06:b7:c3:d9:4b:48:81:35:45:63:e9:d3:4b:8e:b3:
                    bc:08:a3:5f:58:04:72:f3:66:62:be:a7:67:2b:84:
                    d2:b0:68:11:ef:7d:ba:11:94:eb:01:f4:f8:7b:e0:
                    a5:e7:16:23:1b:2f:39:82:79:ca:3c:16:5b:c6:93:
                    6b:68:79:87:7e:c2:db:d5:b1:6e:ad:c1:b4:20:6a:
                    08:80:f5:9b:79:fe:67:08:1f:3e:26:43:2b:ca:86:
                    05:77:89:e5:c9:f8:ff:85:19:4c:0a:f8:cb:af:23:
                    76:3d:5b:a7:6e:c8:e9:d7:5f:b0:9e:63:f4:d9:7f:
                    d5:f8:fb:5c:2b:6e:5d:23:24:96:d1:9a:bb:71:94:
                    ed:30:59:88:d9:32:47:52:98:72:19:74:b0:aa:d6:
                    13:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:91:E6:79:96:41:8C:69:A2:9E:57:07:BF:38:89:4E:A4:38:77:B4
            X509v3 Authority Key Identifier:
                keyid:EA:6B:49:B0:75:2A:D3:BE:3D:D6:83:B8:AE:EA:22:05:F5:AF:D2:79

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/6mtJsHUq07491oO4ruoiBfWv0nk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6mtJsHUq07491oO4ruoiBfWv0nk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/uJHmeZZBjGminlcHvziJTqQ4d7Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:7fa:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:f1:ae:f6:e5:25:5d:ed:0c:b2:12:ef:31:a1:9e:f2:59:31:
         2d:7b:68:9f:75:6a:78:02:af:35:d8:27:6e:83:29:b5:c3:b8:
         ea:b3:e3:04:92:ae:aa:9a:4c:58:5c:cd:03:2a:89:1c:53:7b:
         7d:c1:3a:b7:24:5f:6c:d8:71:fc:ad:93:6d:e9:69:fb:a3:82:
         78:5d:e1:8f:03:03:f2:a5:bb:a4:c0:d3:3c:0b:12:f3:a0:12:
         e2:b4:b4:67:da:a8:0e:30:92:50:dc:ec:c4:2e:8d:f2:23:72:
         53:14:54:98:19:01:e2:88:b7:27:8e:bf:6e:29:94:48:36:97:
         3c:32:0e:3a:7d:f7:73:26:c8:d4:ba:99:77:05:22:05:72:0e:
         8d:bc:f4:0f:0d:18:9e:b9:e0:01:6e:88:d8:b7:c0:b4:a6:88:
         bf:dd:bf:e9:c2:0c:d5:67:de:8a:47:05:45:df:d1:8e:be:60:
         30:a7:ea:e4:17:8b:c6:f1:7e:80:5e:a9:fa:80:45:2c:8b:22:
         cb:0d:cf:fe:ae:9b:8e:3d:22:38:66:bc:e9:fc:95:b6:27:31:
         1b:f7:4f:4a:5e:f3:50:8c:26:57:79:e3:52:57:a7:fb:ee:33:
         85:bc:6b:0a:2e:9f:fc:74:36:68:ab:83:6f:f1:79:2f:ab:6f:
         c7:24:d2:21
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgIBQjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFQTZC
NDlCMDc1MkFEM0JFM0RENjgzQjhBRUVBMjIwNUY1QUZEMjc5MB4XDTIzMDMxNzEz
MTAxNVoXDTI0MDMxNDAxMzAwMlowMzExMC8GA1UEAxMoQjg5MUU2Nzk5NjQxOEM2
OUEyOUU1NzA3QkYzODg5NEVBNDM4NzdCNDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKpB44SGMhWhWynYiYgDQrRP2Ei8xYvO2lsiemY7D8CnSzN8zzVA
hMLSwiEat6gSqAQXApqoqJj2ehTLHl9nuUYfhUT5UMLggYD6SdJxkl6Rjijxkj3v
/GQMze1v4k9uenCMlUa223a+BrfD2UtIgTVFY+nTS46zvAijX1gEcvNmYr6nZyuE
0rBoEe99uhGU6wH0+HvgpecWIxsvOYJ5yjwWW8aTa2h5h37C29Wxbq3BtCBqCID1
m3n+ZwgfPiZDK8qGBXeJ5cn4/4UZTAr4y68jdj1bp27I6ddfsJ5j9Nl/1fj7XCtu
XSMkltGau3GU7TBZiNkyR1KYchl0sKrWE0UCAwEAAaOCAiswggInMB0GA1UdDgQW
BBS4keZ5lkGMaaKeVwe/OIlOpDh3tDAfBgNVHSMEGDAWgBTqa0mwdSrTvj3Wg7iu
6iIF9a/SeTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwMDMvNm10SnNIVXEwNzQ5MW9PNHJ1b2lCZld2MG5rLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNm10SnNIVXEwNzQ5MW9PNHJ1b2lC
Zld2MG5rLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMDAzL3VKSG1lWlpCakdtaW5sY0h2emlKVHFRNGQ3US5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAgAQf6AAcwDQYJKoZIhvcNAQELBQADggEBAHPxrvblJV3tDLIS7zGh
nvJZMS17aJ91angCrzXYJ26DKbXDuOqz4wSSrqqaTFhczQMqiRxTe33BOrckX2zY
cfytk23pafujgnhd4Y8DA/Klu6TA0zwLEvOgEuK0tGfaqA4wklDc7MQujfIjclMU
VJgZAeKItyeOv24plEg2lzwyDjp993MmyNS6mXcFIgVyDo289A8NGJ654AFuiNi3
wLSmiL/dv+nCDNVn3opHBUXf0Y6+YDCn6uQXi8bxfoBeqfqARSyLIssNz/6um449
IjhmvOn8lbYnMRv3T0pe81CMJld541JXp/vuM4W8awoun/x0Nmirg2/xeS+rb8ck
0iE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org