Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30030/eq2Kej7nYHWmXn7bs9SLBPt6Xxw.roa
File:                     eq2Kej7nYHWmXn7bs9SLBPt6Xxw.roa (raw, json)
Hash identifier:          r0GGP6+cdREhY9NoL6N0h7XaZT6T9MjGZXoXvEeIFy0=
Subject key identifier:   7A:AD:8A:7A:3E:E7:60:75:A6:5E:7E:DB:B3:D4:8B:04:FB:7A:5F:1C
Certificate issuer:       /CN=E3D7C90E9CC2CA8CDB1D74C058B122B9AE3EFFD6
Certificate serial:       0D
Authority key identifier: E3:D7:C9:0E:9C:C2:CA:8C:DB:1D:74:C0:58:B1:22:B9:AE:3E:FF:D6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/49fJDpzCyozbHXTAWLEiua4-_9Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30030/eq2Kej7nYHWmXn7bs9SLBPt6Xxw.roa
Signing time:             Wed 24 Feb 2021 01:24:25 +0000
ROA not before:           Wed 24 Feb 2021 01:24:25 +0000
ROA not after:            Tue 15 Feb 2022 01:30:02 +0000
asID:                     2527
IP address blocks:        2001:3b8::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3D7C90E9CC2CA8CDB1D74C058B122B9AE3EFFD6
        Validity
            Not Before: Feb 24 01:24:25 2021 GMT
            Not After : Feb 15 01:30:02 2022 GMT
        Subject: CN=7AAD8A7A3EE76075A65E7EDBB3D48B04FB7A5F1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:4d:38:65:7b:05:fd:6b:fa:85:fb:60:98:c3:
                    e8:87:b8:43:d5:e3:e0:07:38:4c:49:bb:38:b4:21:
                    4b:a5:a9:fa:d2:02:4b:43:03:d7:f6:c6:15:1e:77:
                    d4:13:14:cc:91:a7:3c:a4:da:0e:39:50:cb:69:23:
                    68:86:72:d0:45:11:59:32:db:d1:fe:0d:b0:39:f0:
                    c6:a2:8f:92:48:87:52:50:c3:e7:e2:cf:b0:3c:58:
                    34:5e:43:7b:74:bf:5d:ae:4c:46:43:2c:fb:e2:45:
                    7a:e0:e8:4a:c7:0c:5f:57:82:43:44:27:d7:ed:2b:
                    00:5d:b9:68:0b:af:3b:99:7d:2a:1b:98:49:ec:ad:
                    4b:65:ef:c3:11:b0:a2:80:f6:82:2c:91:b6:fd:60:
                    48:8c:96:a2:a7:27:99:56:52:c9:98:d7:57:05:53:
                    28:6f:f6:d1:58:3c:31:13:72:87:e7:cd:b3:2d:4a:
                    3b:54:c4:ea:07:1e:6a:5f:05:74:13:a6:0d:fb:dd:
                    96:2a:bc:6c:9e:24:2a:56:62:eb:b4:3e:c0:40:c6:
                    ac:e6:80:1f:17:d0:a2:69:92:e4:33:28:b9:a9:56:
                    ad:ba:5f:00:0f:77:0d:fc:91:48:41:38:c7:07:44:
                    8c:3b:f2:5f:e8:1d:26:aa:16:db:0b:83:e4:09:1f:
                    48:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:AD:8A:7A:3E:E7:60:75:A6:5E:7E:DB:B3:D4:8B:04:FB:7A:5F:1C
            X509v3 Authority Key Identifier:
                keyid:E3:D7:C9:0E:9C:C2:CA:8C:DB:1D:74:C0:58:B1:22:B9:AE:3E:FF:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30030/49fJDpzCyozbHXTAWLEiua4-_9Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/49fJDpzCyozbHXTAWLEiua4-_9Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30030/eq2Kej7nYHWmXn7bs9SLBPt6Xxw.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:3b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:17:f7:69:6c:cc:2e:c4:db:e4:77:7c:cf:46:d6:f2:a0:30:
         f6:bb:32:48:7a:66:db:24:61:fb:56:53:76:9a:03:05:86:cd:
         bc:a5:88:63:39:4d:bb:e8:bf:04:9e:0e:45:20:3a:18:bf:f4:
         e9:f0:e7:65:1c:94:3c:99:be:db:c7:a2:2e:0d:87:dc:05:24:
         7b:05:58:cc:13:92:33:fc:ab:4b:99:3d:07:26:55:6c:88:b8:
         a9:34:ae:17:a2:a8:d7:52:88:ee:57:aa:f2:b3:d5:9f:44:46:
         a6:8d:26:b4:6e:68:7f:4e:28:cd:7a:0e:a3:ab:94:b3:99:39:
         a3:1b:41:a9:ad:fe:49:48:2c:e3:f3:0e:4e:75:c5:6e:a7:55:
         67:67:69:9a:bb:bd:02:85:e0:00:54:fe:6c:65:55:b2:9a:61:
         2a:3f:75:9f:f4:cb:91:30:30:0d:fe:52:6a:8d:f0:4a:ae:b0:
         1a:48:88:e9:42:3c:5e:d1:3e:19:f1:9a:7d:72:06:eb:86:8d:
         83:04:b3:0b:cd:65:27:b4:3c:c2:72:64:9d:0a:7d:c4:70:f6:
         c6:21:0f:f7:dc:ae:6e:fc:e1:22:de:40:b6:dd:89:1c:cf:82:
         21:00:2a:ff:25:60:71:14:03:6e:74:f4:3d:67:dd:26:15:1b:
         f6:06:d5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org