Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30015/LI-9_38dfaXhX9sEUtmiOpw8090.roa
File:                     LI-9_38dfaXhX9sEUtmiOpw8090.roa (raw, json)
Hash identifier:          Sg2ZpGUGRUO9olrOokTukRL6b41emlQvNitW+rreAFs=
Subject key identifier:   2C:8F:BD:FF:7F:1D:7D:A5:E1:5F:DB:04:52:D9:A2:3A:9C:3C:D3:DD
Certificate issuer:       /CN=EEA5D8215658E644312DA44055A1A16C95328D8B
Certificate serial:       22
Authority key identifier: EE:A5:D8:21:56:58:E6:44:31:2D:A4:40:55:A1:A1:6C:95:32:8D:8B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7qXYIVZY5kQxLaRAVaGhbJUyjYs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30015/LI-9_38dfaXhX9sEUtmiOpw8090.roa
Signing time:             Mon 01 Aug 2022 01:29:14 +0000
ROA not before:           Mon 01 Aug 2022 01:29:14 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     2518
IP address blocks:        2001:260::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEA5D8215658E644312DA44055A1A16C95328D8B
        Validity
            Not Before: Aug  1 01:29:14 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=2C8FBDFF7F1D7DA5E15FDB0452D9A23A9C3CD3DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fd:9f:9f:19:d5:77:39:d7:f4:65:92:d9:c0:
                    5e:2f:3b:53:49:50:40:f6:4b:a5:24:94:67:a5:ae:
                    38:aa:11:c7:ed:93:66:b6:78:c2:95:25:a6:e4:56:
                    d2:ce:0f:3c:79:68:c8:7f:0f:c6:36:f0:c8:da:66:
                    33:b1:71:1c:c7:5d:0a:92:81:03:17:21:54:bf:b2:
                    03:d0:52:60:da:72:5e:2a:4c:fc:79:4f:3d:05:ec:
                    5d:f7:fa:a5:12:c6:82:30:82:02:b6:21:af:33:ba:
                    63:d8:4b:48:ac:a4:8f:d1:53:5a:36:dc:84:64:25:
                    42:31:e4:86:a6:b5:93:05:9e:d9:7d:b5:a0:ee:03:
                    c3:0d:e1:af:5f:95:bb:7e:27:e6:84:1b:73:04:16:
                    2a:ee:5d:21:5d:7a:2f:d7:c7:a3:f1:0b:1d:8e:5b:
                    e8:8c:90:ad:db:d6:3b:01:1b:35:32:a7:f7:50:aa:
                    db:8c:79:b5:1a:c6:80:e3:44:c2:82:56:9b:c2:53:
                    d5:18:37:0b:fc:13:3f:6c:44:29:d3:53:4f:fc:2b:
                    02:89:10:11:e8:f7:ac:ed:36:47:10:84:c0:a0:ac:
                    d4:26:2a:53:1c:0a:16:80:1f:22:2a:26:5d:2f:59:
                    34:1e:de:9c:59:03:29:0a:fb:dc:f6:9c:9c:87:d1:
                    e4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:8F:BD:FF:7F:1D:7D:A5:E1:5F:DB:04:52:D9:A2:3A:9C:3C:D3:DD
            X509v3 Authority Key Identifier:
                keyid:EE:A5:D8:21:56:58:E6:44:31:2D:A4:40:55:A1:A1:6C:95:32:8D:8B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30015/7qXYIVZY5kQxLaRAVaGhbJUyjYs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7qXYIVZY5kQxLaRAVaGhbJUyjYs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30015/LI-9_38dfaXhX9sEUtmiOpw8090.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:260::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:39:8d:52:79:c6:b9:f3:5b:30:c6:7d:43:c0:a4:a4:8c:41:
         57:c2:08:69:a5:9a:3c:c7:7e:10:df:e3:7e:6b:19:00:31:dc:
         37:45:10:66:66:bb:ca:ca:01:97:10:da:2f:81:28:31:0d:df:
         35:81:8c:cc:df:83:c1:0c:7c:18:d1:ec:a6:5b:da:be:b0:c1:
         a9:c9:76:93:20:fa:1d:b2:95:cd:60:88:cf:ca:f7:6e:e2:61:
         3b:e8:4a:01:39:01:b6:b9:0b:3f:07:2f:77:21:be:7a:3c:8b:
         32:5b:58:a3:d0:5a:9f:3b:ee:80:ee:ff:ae:d4:aa:29:7a:dd:
         f7:eb:26:ea:5c:51:aa:c9:7d:38:da:68:ec:33:6e:af:d5:1e:
         67:97:26:06:3e:3e:61:cb:03:ca:d7:f4:e8:fa:c5:5f:2c:0d:
         e4:7e:e0:48:0c:43:43:4f:0e:b7:2f:f2:51:d4:05:36:d1:63:
         16:3b:22:0a:66:5c:fb:25:3c:3c:c6:ac:0b:c0:af:1b:81:96:
         c7:25:de:f8:3a:d0:c2:8f:4d:8c:d6:86:07:2e:96:89:ac:c7:
         c5:32:f0:0c:2c:81:7f:c6:21:37:a8:7e:ae:ea:b2:34:12:da:
         16:d7:8e:d3:1b:73:c3:1e:da:40:29:f6:f3:81:1b:6f:6c:f8:
         d3:89:19:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org