Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30047/QgQoiomF_GWWhFrIHqcpmcF-UQY.roa
File:                     QgQoiomF_GWWhFrIHqcpmcF-UQY.roa (raw, json)
Hash identifier:          6ngSrc+ixXSHFmoHNnuyD9F+jVgwE+e+slKgNuBpvss=
Subject key identifier:   42:04:28:8A:89:85:FC:65:96:84:5A:C8:1E:A7:29:99:C1:7E:51:06
Certificate issuer:       /CN=075054052FAE3C210E8A73FBE525CAC74E786A26
Certificate serial:       3F
Authority key identifier: 07:50:54:05:2F:AE:3C:21:0E:8A:73:FB:E5:25:CA:C7:4E:78:6A:26
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/B1BUBS-uPCEOinP75SXKx054aiY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30047/QgQoiomF_GWWhFrIHqcpmcF-UQY.roa
Signing time:             Thu 13 Apr 2023 09:52:52 +0000
ROA not before:           Thu 13 Apr 2023 09:52:52 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     7671
IP address blocks:        2001:d70::/30 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=075054052FAE3C210E8A73FBE525CAC74E786A26
        Validity
            Not Before: Apr 13 09:52:52 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=4204288A8985FC6596845AC81EA72999C17E5106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:12:8f:05:18:d3:48:00:8a:86:bd:f5:85:b7:
                    1b:e5:af:49:08:40:a4:19:42:22:67:e5:b9:e9:77:
                    eb:58:cf:1c:6f:fe:2c:ff:dd:62:7b:93:44:a5:e5:
                    e4:33:7b:db:4a:35:c0:bd:c0:7c:71:c7:ca:eb:2b:
                    a3:59:63:e0:94:c8:fa:55:a1:61:a3:f5:28:15:74:
                    56:1c:d3:e1:1e:39:f9:95:50:7c:9a:1f:14:bb:3a:
                    b7:3a:ac:db:dd:95:30:26:af:11:6b:63:28:a5:7e:
                    62:97:8b:ea:1c:d5:3f:5d:f3:f0:40:58:de:e3:48:
                    1c:97:81:d5:7c:75:8f:30:b6:ca:d8:c0:aa:00:84:
                    d6:ac:09:44:78:27:35:63:42:82:aa:e6:cb:80:76:
                    de:e2:3e:4b:56:f5:a8:8c:63:eb:c8:14:5d:52:4d:
                    c6:a8:12:f1:da:6e:1c:78:e5:69:c5:a5:1d:d9:7c:
                    36:01:75:f5:a6:cc:5f:7f:75:69:20:30:29:37:20:
                    e6:af:a8:7b:19:a5:87:28:68:e6:ff:d1:f6:11:73:
                    3d:81:1c:dc:49:59:05:b8:6e:c3:ba:75:f9:74:0f:
                    63:39:10:1f:a1:95:b0:b8:39:86:f3:48:27:44:11:
                    87:87:b3:70:6b:49:d6:85:eb:23:03:49:e5:63:66:
                    06:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:04:28:8A:89:85:FC:65:96:84:5A:C8:1E:A7:29:99:C1:7E:51:06
            X509v3 Authority Key Identifier:
                keyid:07:50:54:05:2F:AE:3C:21:0E:8A:73:FB:E5:25:CA:C7:4E:78:6A:26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30047/B1BUBS-uPCEOinP75SXKx054aiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/B1BUBS-uPCEOinP75SXKx054aiY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30047/QgQoiomF_GWWhFrIHqcpmcF-UQY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:d70::/30

    Signature Algorithm: sha256WithRSAEncryption
         28:a0:bd:49:4e:c3:10:e6:22:7f:a6:7b:92:2c:7f:ab:29:44:
         ac:0e:e7:d4:47:f3:78:1e:f5:4e:9c:01:23:aa:3e:40:d1:7e:
         97:ec:56:87:b4:bc:27:f3:6a:ff:9a:ef:7e:d0:2b:9d:3a:8a:
         95:3b:95:86:11:3e:f6:88:06:0b:2e:1d:b9:23:ba:7d:2c:8d:
         39:92:75:be:6c:50:16:71:d0:56:7a:03:0a:80:80:8e:72:9a:
         b6:d7:5c:2d:d2:14:a9:ca:66:a5:52:7f:72:66:3b:88:97:cb:
         64:12:25:82:98:f8:5b:90:09:77:0c:25:b1:0a:59:27:77:5c:
         b8:71:d0:15:5d:d4:1b:34:a2:47:cc:f9:db:ed:38:85:5d:2e:
         79:50:10:54:ae:78:65:e2:64:4e:26:1f:e5:52:51:9c:e5:c4:
         c7:b8:7f:de:cc:d8:75:17:bc:61:c8:6f:a7:d5:a3:20:07:a3:
         ef:b5:23:c9:a5:53:ac:f9:a9:2f:9b:25:cc:16:5a:09:bb:3e:
         4f:71:ae:f9:2f:7f:13:fd:92:b7:36:81:9d:3f:82:37:fd:c2:
         3e:6d:80:3d:d0:75:49:a1:6d:16:e5:a1:5a:5b:ff:1c:f2:11:
         ff:3d:d3:1d:5c:84:da:6a:5d:57:12:3b:d9:43:ba:ef:24:cf:
         5c:7c:ed:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org