Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30030/F2i6DNUSGXJi_p8DcEDtC9YsjsY.roa
File:                     F2i6DNUSGXJi_p8DcEDtC9YsjsY.roa (raw, json)
Hash identifier:          USB5g0c7ZaM4A5OBhuL/3c/jKroKCL24qo+QrjL/5Ww=
Subject key identifier:   17:68:BA:0C:D5:12:19:72:62:FE:9F:03:70:40:ED:0B:D6:2C:8E:C6
Certificate issuer:       /CN=E3D7C90E9CC2CA8CDB1D74C058B122B9AE3EFFD6
Certificate serial:       0C
Authority key identifier: E3:D7:C9:0E:9C:C2:CA:8C:DB:1D:74:C0:58:B1:22:B9:AE:3E:FF:D6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/49fJDpzCyozbHXTAWLEiua4-_9Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30030/F2i6DNUSGXJi_p8DcEDtC9YsjsY.roa
Signing time:             Wed 24 Feb 2021 01:24:25 +0000
ROA not before:           Wed 24 Feb 2021 01:24:25 +0000
ROA not after:            Tue 15 Feb 2022 01:30:02 +0000
asID:                     2527
IP address blocks:        240d::/27 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3D7C90E9CC2CA8CDB1D74C058B122B9AE3EFFD6
        Validity
            Not Before: Feb 24 01:24:25 2021 GMT
            Not After : Feb 15 01:30:02 2022 GMT
        Subject: CN=1768BA0CD512197262FE9F037040ED0BD62C8EC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e2:6f:61:98:d2:0d:0e:0b:ee:a2:fa:9a:82:
                    dd:de:fa:3a:01:41:2a:6d:a9:63:47:13:12:af:0a:
                    4e:5a:6e:34:37:e1:1a:65:94:c1:be:10:73:e4:4d:
                    36:fd:16:c6:f2:0c:fe:55:d1:6c:91:a0:81:4f:15:
                    09:3d:74:8c:13:4b:ce:6d:17:71:66:d6:2c:c0:52:
                    2b:7d:30:ed:24:5d:57:b3:70:9f:fb:70:7a:d7:90:
                    cd:0b:f0:5d:f3:30:d3:d0:09:1f:f8:86:68:74:95:
                    8c:12:1c:f3:0d:d2:8a:6f:15:d4:21:27:e5:5f:f9:
                    c3:7c:db:5c:73:48:f3:04:40:b6:b5:15:79:a3:cb:
                    3c:65:e6:b5:42:8f:0c:3e:d7:8c:7f:a0:38:68:80:
                    85:89:1b:f5:ce:c3:76:d4:26:17:1a:28:da:ef:95:
                    5a:1a:4e:cc:6b:a6:78:6b:19:ff:96:af:b9:4d:2f:
                    6a:1d:f4:8e:c9:46:4e:a5:26:19:8f:1a:76:c7:df:
                    f3:f0:f6:5b:66:da:9b:98:ab:24:dc:47:23:c6:66:
                    94:f1:e7:b6:c2:2f:1e:51:e6:1a:59:f7:09:b1:33:
                    96:77:94:80:c5:08:d6:4c:b9:b6:fb:70:8a:36:ff:
                    36:3d:b6:f1:93:af:76:47:bc:d1:58:35:46:be:e7:
                    31:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:68:BA:0C:D5:12:19:72:62:FE:9F:03:70:40:ED:0B:D6:2C:8E:C6
            X509v3 Authority Key Identifier:
                keyid:E3:D7:C9:0E:9C:C2:CA:8C:DB:1D:74:C0:58:B1:22:B9:AE:3E:FF:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30030/49fJDpzCyozbHXTAWLEiua4-_9Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/49fJDpzCyozbHXTAWLEiua4-_9Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30030/F2i6DNUSGXJi_p8DcEDtC9YsjsY.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240d::/27

    Signature Algorithm: sha256WithRSAEncryption
         1e:21:3b:00:80:94:92:ce:ad:21:6f:b7:fd:0b:8c:4c:9b:22:
         6b:47:42:cd:5f:10:11:c5:72:4a:f6:28:6d:1a:45:d4:01:87:
         80:fe:fe:0d:5b:c2:5b:e5:1a:76:f1:84:08:6b:6d:2e:20:15:
         91:57:d4:cd:79:ec:2d:11:e7:2c:29:71:c8:57:9d:c6:0d:f8:
         f5:9f:91:a2:81:5d:50:9b:15:29:db:34:00:1d:9d:63:d3:ab:
         c0:34:f8:bc:79:f7:f6:27:f0:91:c3:9a:7e:4a:11:f4:75:9c:
         2e:ba:58:0c:fd:31:d8:96:e6:cc:d7:3a:c1:26:67:d4:17:13:
         89:f1:95:14:b0:b4:6b:ae:26:fb:67:9c:92:34:5e:22:8e:a9:
         02:47:f6:d9:2b:96:01:66:33:d7:30:fe:fb:a5:03:3b:d2:74:
         e2:f1:cb:18:c3:85:68:30:30:91:87:7c:fb:c3:cc:5b:77:71:
         98:b0:01:fa:f6:51:3c:3b:0d:67:ce:80:09:c5:99:11:15:62:
         60:e1:0b:87:3e:d8:b7:40:04:a7:38:89:77:8e:6b:d2:05:b2:
         1a:75:e7:5a:37:3d:21:13:9c:17:d4:05:ee:79:db:ed:72:1f:
         72:47:40:1d:63:63:f9:fa:eb:54:80:fd:d6:32:8e:16:62:1b:
         d3:11:09:35
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgIBDDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFM0Q3
QzkwRTlDQzJDQThDREIxRDc0QzA1OEIxMjJCOUFFM0VGRkQ2MB4XDTIxMDIyNDAx
MjQyNVoXDTIyMDIxNTAxMzAwMlowMzExMC8GA1UEAxMoMTc2OEJBMENENTEyMTk3
MjYyRkU5RjAzNzA0MEVEMEJENjJDOEVDNjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKrib2GY0g0OC+6i+pqC3d76OgFBKm2pY0cTEq8KTlpuNDfhGmWU
wb4Qc+RNNv0WxvIM/lXRbJGggU8VCT10jBNLzm0XcWbWLMBSK30w7SRdV7Nwn/tw
eteQzQvwXfMw09AJH/iGaHSVjBIc8w3Sim8V1CEn5V/5w3zbXHNI8wRAtrUVeaPL
PGXmtUKPDD7XjH+gOGiAhYkb9c7DdtQmFxoo2u+VWhpOzGumeGsZ/5avuU0vah30
jslGTqUmGY8adsff8/D2W2bam5irJNxHI8ZmlPHntsIvHlHmGln3CbEzlneUgMUI
1ky5tvtwijb/Nj228ZOvdke80Vg1Rr7nMasCAwEAAaOCAd4wggHaMB0GA1UdDgQW
BBQXaLoM1RIZcmL+nwNwQO0L1iyOxjAfBgNVHSMEGDAWgBTj18kOnMLKjNsddMBY
sSK5rj7/1jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwMzAvNDlmSkRwekN5b3piSFhUQVdMRWl1YTQtXzlZLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNDlmSkRwekN5b3piSFhUQVdMRWl1
YTQtXzlZLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMDMwL0YyaTZETlVTR1hKaV9wOERjRUR0QzlZc2pzWS5yb2Ew
IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQUkDQAAMA0GCSqGSIb3DQEBCwUA
A4IBAQAeITsAgJSSzq0hb7f9C4xMmyJrR0LNXxARxXJK9ihtGkXUAYeA/v4NW8Jb
5Rp28YQIa20uIBWRV9TNeewtEecsKXHIV53GDfj1n5GigV1QmxUp2zQAHZ1j06vA
NPi8eff2J/CRw5p+ShH0dZwuulgM/THYlubM1zrBJmfUFxOJ8ZUUsLRrrib7Z5yS
NF4ijqkCR/bZK5YBZjPXMP77pQM70nTi8csYw4VoMDCRh3z7w8xbd3GYsAH69lE8
Ow1nzoAJxZkRFWJg4QuHPti3QASnOIl3jmvSBbIadedaNz0hE5wX1AXuedvtch9y
R0AdY2P5+utUgP3WMo4WYhvTEQk1
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org