Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30068/6k1uo_sFSsKOkfJh3YPz9sA5yQg.roa
File:                     6k1uo_sFSsKOkfJh3YPz9sA5yQg.roa (raw, json)
Hash identifier:          /+gv7jUp61vM9NiqRBNCX2+Iz4/xkp3DaMWPmLGtyZ8=
Subject key identifier:   EA:4D:6E:A3:FB:05:4A:C2:8E:91:F2:61:DD:83:F3:F6:C0:39:C9:08
Certificate issuer:       /CN=CA02C5C43C00F14E85B5B07599EDD267C5A2B4D2
Certificate serial:       44
Authority key identifier: CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/6k1uo_sFSsKOkfJh3YPz9sA5yQg.roa
Signing time:             Thu 13 Apr 2023 09:54:22 +0000
ROA not before:           Thu 13 Apr 2023 09:54:22 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9370
IP address blocks:        2001:e40::/30 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA02C5C43C00F14E85B5B07599EDD267C5A2B4D2
        Validity
            Not Before: Apr 13 09:54:22 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=EA4D6EA3FB054AC28E91F261DD83F3F6C039C908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:33:4e:6e:30:42:ed:ce:3f:2e:88:8e:b0:52:
                    16:85:2f:ea:92:c6:98:07:53:95:a2:b9:25:9d:65:
                    59:96:2c:b8:e6:25:8a:06:07:15:84:84:eb:cb:db:
                    6b:76:e0:e3:df:e4:a8:74:b4:ee:56:bd:38:41:ed:
                    c4:fd:c8:39:e8:0c:6e:20:76:17:ac:36:2e:89:d2:
                    d7:f8:32:1a:1f:42:7a:b5:24:e4:41:5d:b2:c1:de:
                    f9:92:e4:70:b0:65:ca:fd:8b:e7:b4:a5:95:5f:70:
                    f6:24:8c:96:fb:df:41:91:1a:fd:db:b9:ed:d6:8d:
                    6f:21:67:94:8d:9e:e7:1b:db:d9:d8:87:73:01:23:
                    08:9d:bf:4e:55:8e:ef:e4:a7:94:97:cc:87:d5:6f:
                    a2:61:6a:e6:c7:d1:9e:9e:ff:36:5b:82:09:2d:e4:
                    ed:97:8d:75:6c:21:d2:84:f3:01:11:aa:47:ad:3e:
                    31:12:5c:b5:11:2d:5e:3b:e8:81:36:39:1a:e4:d5:
                    50:8a:87:5b:2a:29:1d:9a:d2:91:24:9b:48:41:07:
                    21:d8:a2:84:94:75:2b:e2:2d:05:0d:b2:76:cc:92:
                    14:4e:ae:66:69:ec:e2:0a:9d:b8:2a:9b:50:3f:4b:
                    d8:51:36:83:63:ce:e2:de:d4:59:e9:a6:7d:d9:43:
                    59:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:4D:6E:A3:FB:05:4A:C2:8E:91:F2:61:DD:83:F3:F6:C0:39:C9:08
            X509v3 Authority Key Identifier:
                keyid:CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/6k1uo_sFSsKOkfJh3YPz9sA5yQg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:e40::/30

    Signature Algorithm: sha256WithRSAEncryption
         b7:59:33:ff:67:1a:b4:5b:50:54:14:8b:92:38:3f:4b:e3:88:
         f9:32:e6:c6:15:c5:f2:a4:31:a6:1d:9d:9c:48:e1:cf:ad:95:
         11:9b:8c:32:26:48:a0:07:3d:75:67:1d:ac:bd:4f:95:63:e5:
         66:78:ec:ba:90:8d:36:39:00:a1:4d:26:28:1d:02:30:19:42:
         0b:8f:c7:ab:f1:f6:c2:a5:75:05:e5:ec:79:79:22:62:11:01:
         cb:8a:47:4e:cc:45:05:de:94:2c:c5:e9:16:b6:29:42:76:44:
         15:4e:76:cb:e2:c3:28:9e:31:25:fe:3e:80:4e:e5:f1:97:5f:
         3d:62:a8:52:ed:76:e5:20:b9:3e:e6:40:10:96:9c:c6:05:f5:
         79:f6:59:87:53:bf:8e:92:aa:73:e7:08:26:13:8a:e5:c1:6e:
         30:03:be:67:f0:ca:ed:06:71:af:f7:dc:f2:c9:34:2b:4f:89:
         05:6e:d4:35:35:95:16:4b:5c:14:d3:7a:b3:08:15:8e:cb:7e:
         5b:3d:de:1e:e7:fb:fb:1f:7b:61:5b:db:44:82:2b:b4:d9:8a:
         51:c3:d3:25:1e:a3:ea:cc:ef:a6:d0:19:f9:3a:52:a8:42:0d:
         c7:9f:9d:27:97:4c:9b:ee:5d:f4:75:88:67:12:16:f6:b6:96:
         8b:14:95:4f
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBRDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDQTAy
QzVDNDNDMDBGMTRFODVCNUIwNzU5OUVERDI2N0M1QTJCNEQyMB4XDTIzMDQxMzA5
NTQyMloXDTI0MDMxNDAxMzAwMlowMzExMC8GA1UEAxMoRUE0RDZFQTNGQjA1NEFD
MjhFOTFGMjYxREQ4M0YzRjZDMDM5QzkwODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAN0zTm4wQu3OPy6IjrBSFoUv6pLGmAdTlaK5JZ1lWZYsuOYligYH
FYSE68vba3bg49/kqHS07la9OEHtxP3IOegMbiB2F6w2LonS1/gyGh9CerUk5EFd
ssHe+ZLkcLBlyv2L57SllV9w9iSMlvvfQZEa/du57daNbyFnlI2e5xvb2diHcwEj
CJ2/TlWO7+SnlJfMh9VvomFq5sfRnp7/NluCCS3k7ZeNdWwh0oTzARGqR60+MRJc
tREtXjvogTY5GuTVUIqHWyopHZrSkSSbSEEHIdiihJR1K+ItBQ2ydsySFE6uZmns
4gqduCqbUD9L2FE2g2PO4t7UWemmfdlDWR8CAwEAAaOCAikwggIlMB0GA1UdDgQW
BBTqTW6j+wVKwo6R8mHdg/P2wDnJCDAfBgNVHSMEGDAWgBTKAsXEPADxToW1sHWZ
7dJnxaK00jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwNjgveWdMRnhEd0E4VTZGdGJCMW1lM1NaOFdpdE5JLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveWdMRnhEd0E4VTZGdGJCMW1lM1Na
OFdpdE5JLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMDY4LzZrMXVvX3NGU3NLT2tmSmgzWVB6OXNBNXlRZy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQIgAQ5AMA0GCSqGSIb3DQEBCwUAA4IBAQC3WTP/Zxq0W1BUFIuSOD9L
44j5MubGFcXypDGmHZ2cSOHPrZURm4wyJkigBz11Zx2svU+VY+VmeOy6kI02OQCh
TSYoHQIwGUILj8er8fbCpXUF5ex5eSJiEQHLikdOzEUF3pQsxekWtilCdkQVTnbL
4sMonjEl/j6ATuXxl189YqhS7XblILk+5kAQlpzGBfV59lmHU7+Okqpz5wgmE4rl
wW4wA75n8MrtBnGv99zyyTQrT4kFbtQ1NZUWS1wU03qzCBWOy35bPd4e5/v7H3th
W9tEgiu02YpRw9MlHqPqzO+m0Bn5OlKoQg3Hn50nl0yb7l30dYhnEhb2tpaLFJVP
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org