Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30017/UmHL2LDOuDT7y7nB9X6uaS7rucY.roa
File:                     UmHL2LDOuDT7y7nB9X6uaS7rucY.roa (raw, json)
Hash identifier:          XYASwenVQaRzg9/akXDT8xEr13mPcwe+VBsmWJ4Pquw=
Subject key identifier:   52:61:CB:D8:B0:CE:B8:34:FB:CB:B9:C1:F5:7E:AE:69:2E:EB:B9:C6
Certificate issuer:       /CN=A629AA8AEB242A13FB371A44CA5E1F2957A70E1B
Certificate serial:       12
Authority key identifier: A6:29:AA:8A:EB:24:2A:13:FB:37:1A:44:CA:5E:1F:29:57:A7:0E:1B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pimqiuskKhP7NxpEyl4fKVenDhs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30017/UmHL2LDOuDT7y7nB9X6uaS7rucY.roa
Signing time:             Fri 28 Oct 2022 08:46:42 +0000
ROA not before:           Fri 28 Oct 2022 08:46:42 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     2516
IP address blocks:        240f:100::/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A629AA8AEB242A13FB371A44CA5E1F2957A70E1B
        Validity
            Not Before: Oct 28 08:46:42 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=5261CBD8B0CEB834FBCBB9C1F57EAE692EEBB9C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f4:e6:d3:b5:95:82:68:8b:30:9c:d6:89:5a:
                    37:2e:7a:db:3b:39:7a:17:62:77:2e:9c:0f:44:36:
                    7e:6b:df:41:33:e4:b1:55:4c:5d:09:1b:03:24:68:
                    18:35:09:07:24:f5:a8:4f:a5:e7:f8:4d:cb:ff:4c:
                    51:11:60:fa:93:f2:f6:51:0f:c8:5a:ab:46:8b:0e:
                    1b:c1:fc:e7:f8:e6:cd:c8:40:00:53:cd:a4:90:d1:
                    82:3e:fc:36:46:f4:6c:a9:02:81:90:06:7d:1b:b4:
                    f9:54:e2:34:b1:3c:a1:ae:84:89:a6:55:35:1a:89:
                    6c:c7:05:b7:1b:48:60:f1:d4:9c:9f:d7:d3:3a:28:
                    18:64:6e:cd:28:b1:e7:a9:dd:5f:cd:7d:1d:dc:26:
                    60:04:f2:5c:80:ab:e4:3a:78:2b:3d:6a:87:39:9a:
                    00:e5:25:5d:c2:51:7b:20:81:64:1b:51:78:35:1d:
                    5a:e8:91:35:23:d7:b8:09:f3:00:73:86:f5:2f:3a:
                    80:ee:3f:04:00:90:49:a0:47:e3:80:0c:9b:27:0f:
                    7c:2d:03:0c:8e:a7:cf:67:4d:02:32:9c:07:af:d6:
                    b5:9a:08:63:53:e0:4b:f2:6a:ba:48:6e:16:90:b1:
                    1d:9a:d7:de:46:f0:4d:ed:68:9c:72:e4:cc:1c:25:
                    de:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:61:CB:D8:B0:CE:B8:34:FB:CB:B9:C1:F5:7E:AE:69:2E:EB:B9:C6
            X509v3 Authority Key Identifier:
                keyid:A6:29:AA:8A:EB:24:2A:13:FB:37:1A:44:CA:5E:1F:29:57:A7:0E:1B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30017/pimqiuskKhP7NxpEyl4fKVenDhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pimqiuskKhP7NxpEyl4fKVenDhs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30017/UmHL2LDOuDT7y7nB9X6uaS7rucY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240f:100::/24

    Signature Algorithm: sha256WithRSAEncryption
         14:62:76:39:22:31:7d:ca:fb:8c:23:6f:a5:8b:48:28:bb:ac:
         7e:0a:20:3a:3a:25:8f:6a:01:e9:86:9b:13:02:c3:18:df:67:
         88:94:e0:fa:1e:91:6d:63:38:0c:8b:bc:8c:09:31:11:cd:70:
         89:65:67:01:f7:5b:8b:55:22:50:b6:bd:84:e3:1f:9e:4a:86:
         d4:97:ba:84:3e:85:a2:ab:bc:8c:ba:ea:74:00:15:a0:4f:20:
         7b:84:4b:64:59:1e:52:64:ac:ed:6c:d7:b5:1a:17:23:11:e4:
         c4:71:8d:eb:ac:34:11:0a:aa:51:fb:67:6c:06:8e:ca:23:f6:
         c2:d1:61:a2:39:e7:a2:70:db:d5:78:20:26:a1:e3:df:fb:37:
         4d:8b:e5:dd:e2:2e:28:9e:30:82:27:58:2c:ed:0a:9a:29:52:
         c2:ad:eb:2f:51:c7:c3:05:91:bb:47:34:2c:de:3a:79:52:ee:
         39:e1:c1:8d:2f:9f:8c:bc:af:67:8a:08:39:04:08:90:61:57:
         17:ca:ed:0b:e1:2c:0d:8d:96:5e:63:78:47:de:9f:53:57:2a:
         da:bc:cc:3d:36:87:a0:d6:9e:ef:66:bb:3c:79:44:04:04:8f:
         41:3a:d8:5d:29:0f:17:20:73:8d:eb:6f:18:f6:7e:72:80:1e:
         65:1e:e2:36
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org