Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30016/QL5OBJZm99bBP8Wcr10_DtOujEc.roa
File:                     QL5OBJZm99bBP8Wcr10_DtOujEc.roa (raw, json)
Hash identifier:          JlNFEFNfmYAdnan3WnzDkY5gIMpfYOdteg5g0jA0QZw=
Subject key identifier:   40:BE:4E:04:96:66:F7:D6:C1:3F:C5:9C:AF:5D:3F:0E:D3:AE:8C:47
Certificate issuer:       /CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8
Certificate serial:       24
Authority key identifier: 29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/QL5OBJZm99bBP8Wcr10_DtOujEc.roa
Signing time:             Sat 01 Oct 2022 01:29:43 +0000
ROA not before:           Sat 01 Oct 2022 01:29:43 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     2497
IP address blocks:        2001:300::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8
        Validity
            Not Before: Oct  1 01:29:43 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=40BE4E049666F7D6C13FC59CAF5D3F0ED3AE8C47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d7:ab:83:19:83:a0:ee:b9:b6:de:ce:08:de:
                    ea:6f:06:12:c2:61:fc:d3:9c:fb:19:8a:6a:41:e3:
                    e1:37:cf:41:cb:16:70:d3:8d:5b:77:af:b6:68:6b:
                    b5:fe:bf:2c:b0:4d:30:4f:bf:87:54:6e:1b:67:39:
                    cb:eb:31:ee:54:22:96:16:88:5c:52:f6:94:b6:59:
                    4a:37:92:52:6e:f6:84:be:4f:a2:f0:84:57:3f:3c:
                    1c:5f:a7:a4:ef:9f:6b:b2:37:a4:8c:b8:93:32:72:
                    16:d7:49:66:ef:0a:8f:1a:b6:42:db:9a:02:5f:08:
                    06:cd:53:90:b2:ce:8f:2c:4e:89:e2:f5:c6:5d:a4:
                    c6:48:c7:17:2f:b2:83:64:58:1d:af:3c:be:c2:40:
                    55:40:33:a7:0e:7e:fa:30:6e:fe:32:b8:a8:dc:76:
                    0a:9a:62:90:47:ee:b2:d9:af:da:84:6b:12:c8:7f:
                    c0:17:cc:60:e4:aa:c0:db:10:ca:16:96:49:47:ef:
                    8b:6e:2a:ad:1a:37:38:50:da:ee:66:92:2b:c3:82:
                    ff:0a:bd:5c:98:fe:d7:26:9b:7e:93:d7:7c:00:d5:
                    0f:b3:54:ec:53:87:16:b2:6f:3d:0c:99:f8:18:a3:
                    f9:c5:1d:03:26:ed:61:60:a7:16:8e:91:ad:3b:63:
                    1a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:BE:4E:04:96:66:F7:D6:C1:3F:C5:9C:AF:5D:3F:0E:D3:AE:8C:47
            X509v3 Authority Key Identifier:
                keyid:29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/QL5OBJZm99bBP8Wcr10_DtOujEc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:300::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:68:cd:6b:8d:db:75:4e:09:05:1a:64:2e:8b:2d:a6:74:3b:
         5e:d3:d7:1c:fa:2f:ab:d7:3e:ab:bb:5b:56:76:3f:a2:ea:aa:
         a9:34:fb:77:40:d3:da:e2:62:4d:08:e6:d5:e1:87:76:92:cd:
         5e:98:88:10:4b:4c:f7:de:da:eb:d1:7d:dc:c2:a6:26:a0:35:
         23:4e:9e:ef:51:01:a8:58:e5:da:0b:85:55:ac:ea:50:a1:39:
         4c:f6:31:84:e2:42:d6:d6:6b:12:86:82:c4:48:27:ef:fb:ef:
         99:89:4e:59:98:b2:2f:80:8c:82:75:b5:76:8f:0c:7c:cf:cd:
         dc:f5:b0:30:be:14:ba:2d:3e:b8:4f:f4:91:d2:67:74:2d:46:
         36:a9:dc:19:e4:08:ba:27:52:08:b6:7e:4b:f3:46:32:68:76:
         6a:e9:d6:96:fb:38:09:1f:3a:a4:59:5e:13:49:17:1b:54:3a:
         c2:9a:43:fe:7b:0a:3f:e8:55:30:af:5e:0c:ec:17:95:2f:69:
         a7:d4:34:a1:75:99:0c:cb:bf:5b:0d:bf:99:3c:18:b3:c9:40:
         b1:e4:b0:05:7c:ab:9a:07:b2:0c:c0:bd:c5:34:28:bf:7e:59:
         76:f6:33:40:70:f2:3c:1b:ba:46:ed:bf:dd:1a:7d:8c:c3:2a:
         45:3c:b1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org