Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30047/YMFjjf3niVIot6g-4UGFHZ_Ac1k.roa
File:                     YMFjjf3niVIot6g-4UGFHZ_Ac1k.roa (raw, json)
Hash identifier:          W8E2voi7kiYDgfAX+3tpTFP7tyMdiq9sVzvAs662UEg=
Subject key identifier:   60:C1:63:8D:FD:E7:89:52:28:B7:A8:3E:E1:41:85:1D:9F:C0:73:59
Certificate issuer:       /CN=075054052FAE3C210E8A73FBE525CAC74E786A26
Certificate serial:       31
Authority key identifier: 07:50:54:05:2F:AE:3C:21:0E:8A:73:FB:E5:25:CA:C7:4E:78:6A:26
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/B1BUBS-uPCEOinP75SXKx054aiY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30047/YMFjjf3niVIot6g-4UGFHZ_Ac1k.roa
Signing time:             Sun 01 May 2022 01:30:09 +0000
ROA not before:           Sun 01 May 2022 01:30:09 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     7671
IP address blocks:        2001:d70::/30 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=075054052FAE3C210E8A73FBE525CAC74E786A26
        Validity
            Not Before: May  1 01:30:09 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=60C1638DFDE7895228B7A83EE141851D9FC07359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a9:b7:ca:88:76:ea:47:97:26:a9:44:9f:a8:
                    28:37:12:bd:a7:93:40:88:e3:e6:e8:89:7c:04:fc:
                    d7:d1:20:8c:e4:59:76:a0:c2:5c:1c:8b:10:c1:b7:
                    6a:57:a4:c8:98:e2:80:39:ab:c5:6f:79:03:7c:81:
                    81:5a:2b:ac:fc:07:2f:c6:e7:64:ef:9b:4f:65:3a:
                    4b:76:a7:31:8d:96:60:49:2b:06:02:c9:ad:b8:ff:
                    07:88:3a:d6:73:f0:ee:21:c3:fd:c0:89:a2:61:65:
                    64:d4:20:b8:99:cb:ff:33:64:58:65:50:56:85:6d:
                    d0:3a:5e:60:22:5a:cf:01:12:eb:96:1b:ec:28:cb:
                    e6:6f:d1:18:51:73:c7:e1:3a:19:46:fd:e3:c6:26:
                    97:a8:32:74:2d:b9:d9:a2:3a:16:9d:13:58:e0:7c:
                    e9:63:f6:27:a6:8b:df:3a:c8:ba:69:64:a2:af:03:
                    a2:50:11:68:d7:f6:cb:8c:a6:9a:c6:7b:fe:b4:ae:
                    f8:c3:27:c1:5b:44:86:c9:6a:ea:50:61:50:77:c9:
                    1e:08:12:d4:fa:5a:de:cc:21:60:1f:3c:66:44:d1:
                    82:0d:d7:dd:d0:bc:ee:52:87:28:b2:94:ff:39:45:
                    ce:cc:63:5d:55:cc:7b:c4:70:74:5f:f0:8d:32:19:
                    7d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C1:63:8D:FD:E7:89:52:28:B7:A8:3E:E1:41:85:1D:9F:C0:73:59
            X509v3 Authority Key Identifier:
                keyid:07:50:54:05:2F:AE:3C:21:0E:8A:73:FB:E5:25:CA:C7:4E:78:6A:26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30047/B1BUBS-uPCEOinP75SXKx054aiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/B1BUBS-uPCEOinP75SXKx054aiY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30047/YMFjjf3niVIot6g-4UGFHZ_Ac1k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:d70::/30

    Signature Algorithm: sha256WithRSAEncryption
         db:d2:61:b9:94:2b:01:b8:4f:1f:e2:e5:17:ec:fa:b6:83:23:
         ca:35:b1:55:fc:2c:74:45:a9:4c:bb:59:cd:d2:52:c2:12:ab:
         ce:e5:28:32:f6:95:c3:74:b7:18:ba:56:90:90:c1:c9:14:2e:
         25:78:66:28:0f:39:16:92:3b:3e:fd:66:27:8f:ef:7f:02:3c:
         22:5c:89:c1:99:76:6e:2b:c3:71:8c:f2:10:35:0e:b7:1f:5a:
         07:31:ca:e1:23:96:97:15:46:41:47:7e:26:40:15:88:0d:63:
         d3:9d:da:c9:5e:fa:2b:18:fb:97:24:87:48:d3:c4:1e:e2:e0:
         07:6a:46:d5:95:b3:44:cf:50:ce:d8:2d:0b:99:ab:96:16:ea:
         0a:f9:29:6f:74:f3:79:1e:73:93:bc:8a:ef:d6:96:f8:8f:42:
         9c:f1:7e:ad:43:4a:cc:8e:ec:5c:2c:4f:ec:ba:0d:d0:9a:d3:
         9a:97:cc:5c:51:b2:9a:98:17:ef:5d:af:c9:c6:0d:1c:fc:7c:
         a5:44:39:99:f6:7f:59:cc:db:66:95:a4:67:02:8a:8c:b2:7a:
         9b:b1:9e:05:2a:0c:b2:48:d5:9e:bf:37:57:57:37:b2:95:cf:
         89:99:9d:12:31:a1:93:da:d9:76:58:ed:59:e1:95:a5:ff:fb:
         e6:a3:70:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org