Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30060/kxhO0Z9_Wu_s8V07bu9h-ijuZOY.roa
File:                     kxhO0Z9_Wu_s8V07bu9h-ijuZOY.roa (raw, json)
Hash identifier:          v5XcqcXnsMfE9eF/zoIBH+Llpabffoc3eEfm6S5A3zw=
Subject key identifier:   93:18:4E:D1:9F:7F:5A:EF:EC:F1:5D:3B:6E:EF:61:FA:28:EE:64:E6
Certificate issuer:       /CN=C5CC959291097923A6F42D8F657B90BA032E5F6F
Certificate serial:       13
Authority key identifier: C5:CC:95:92:91:09:79:23:A6:F4:2D:8F:65:7B:90:BA:03:2E:5F:6F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xcyVkpEJeSOm9C2PZXuQugMuX28.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/kxhO0Z9_Wu_s8V07bu9h-ijuZOY.roa
Signing time:             Wed 15 Mar 2023 02:59:50 +0000
ROA not before:           Wed 15 Mar 2023 02:59:50 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     17683
IP address blocks:        2001:f98::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5CC959291097923A6F42D8F657B90BA032E5F6F
        Validity
            Not Before: Mar 15 02:59:50 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=93184ED19F7F5AEFECF15D3B6EEF61FA28EE64E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9e:ee:9a:38:cb:33:34:85:db:06:ff:a9:90:
                    66:cd:62:57:3b:54:1e:68:e3:6a:ab:42:0d:ed:27:
                    a6:7f:50:2a:b7:61:50:5f:58:b4:86:e1:eb:8f:11:
                    97:b3:bd:bc:06:d2:76:e7:9d:17:2d:32:4b:10:94:
                    9c:90:2c:25:62:fc:e3:60:c6:2b:fa:16:da:3a:02:
                    b0:45:3a:58:ea:0a:66:d6:b4:f7:ab:65:36:24:b0:
                    7d:bd:8a:08:cf:98:69:61:b7:32:cc:8e:ea:cf:fe:
                    e5:c1:be:b3:df:5b:65:8c:6c:c3:c5:98:40:4d:47:
                    46:ae:35:f4:c4:a5:c7:68:fe:04:67:22:65:19:17:
                    97:09:7c:60:aa:1f:7f:a4:8c:05:07:1d:82:cc:02:
                    7c:b8:cf:97:f1:e0:22:15:84:95:14:02:35:a5:d4:
                    48:21:9f:22:2b:0f:7d:c2:2e:d7:12:9e:52:21:58:
                    e1:a6:ae:c1:cb:ae:a8:11:11:ee:05:1e:55:21:21:
                    b9:8b:cc:f0:2f:e1:2c:1f:e6:7e:5b:87:52:32:ff:
                    98:71:13:09:73:d0:95:f3:68:fe:9c:07:c7:6d:8e:
                    bb:64:b9:6f:0f:cf:5d:2e:cf:6a:51:a4:dc:70:82:
                    06:59:9e:30:12:1c:90:3d:f4:12:61:5e:5c:32:7d:
                    22:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:18:4E:D1:9F:7F:5A:EF:EC:F1:5D:3B:6E:EF:61:FA:28:EE:64:E6
            X509v3 Authority Key Identifier:
                keyid:C5:CC:95:92:91:09:79:23:A6:F4:2D:8F:65:7B:90:BA:03:2E:5F:6F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xcyVkpEJeSOm9C2PZXuQugMuX28.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/kxhO0Z9_Wu_s8V07bu9h-ijuZOY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:f98::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:5d:8c:ef:5c:bd:4c:bd:3d:4b:90:21:e1:75:2b:12:74:57:
         9a:03:a8:9a:69:2b:38:7e:b0:a1:72:ac:65:9a:ad:c3:e2:e0:
         6b:41:b7:37:9a:a8:c4:a3:b4:58:1f:f0:f1:6b:39:5c:97:d9:
         5e:7d:e8:85:d2:fe:79:38:ac:4d:52:90:6f:6e:dc:8c:4d:3f:
         45:e9:26:ab:c9:95:b8:ee:cb:c3:53:c8:68:cf:53:25:09:e4:
         95:f3:db:df:51:05:a3:cb:3f:cb:4e:32:42:bb:74:4a:36:36:
         f5:4b:f8:97:a0:e1:61:84:76:00:68:46:95:18:81:0f:f5:f8:
         fa:d1:ce:ea:3a:64:0f:60:91:e0:54:fd:aa:e9:d5:07:59:fe:
         b8:a1:54:43:ff:d3:1c:a2:e2:e2:a8:02:4f:83:ca:8c:ce:ff:
         c9:5c:65:3a:51:98:f4:c9:de:af:ac:79:f4:cf:cb:f4:a7:33:
         2f:23:34:e4:24:40:fe:ee:38:72:26:d0:d3:03:59:a9:26:64:
         ed:d7:4b:70:67:74:87:72:c3:bf:8e:66:a7:00:5f:33:f0:d7:
         a8:f4:18:00:da:a6:dd:07:0d:32:23:47:21:c7:81:ef:36:a6:
         7e:76:00:ec:58:0e:83:1e:28:db:81:6e:fe:28:a4:f1:3d:be:
         68:51:ff:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org