Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30142/MHCQxSKI7Yea47giufmlpwRq_EU.roa
File:                     MHCQxSKI7Yea47giufmlpwRq_EU.roa (raw, json)
Hash identifier:          a4hvGqdGN1K5Lev6m/TzUIRFhVEGC2E38JPEKOW/p8M=
Subject key identifier:   30:70:90:C5:22:88:ED:87:9A:E3:B8:22:B9:F9:A5:A7:04:6A:FC:45
Certificate issuer:       /CN=9F5BF0E16F934FAAF9C281ED0BEC9A1F51200AC7
Certificate serial:       30
Authority key identifier: 9F:5B:F0:E1:6F:93:4F:AA:F9:C2:81:ED:0B:EC:9A:1F:51:20:0A:C7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/n1vw4W-TT6r5woHtC-yaH1EgCsc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30142/MHCQxSKI7Yea47giufmlpwRq_EU.roa
Signing time:             Thu 13 Apr 2023 09:54:07 +0000
ROA not before:           Thu 13 Apr 2023 09:54:07 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9371
IP address blocks:        2403:3a00::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F5BF0E16F934FAAF9C281ED0BEC9A1F51200AC7
        Validity
            Not Before: Apr 13 09:54:07 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=307090C52288ED879AE3B822B9F9A5A7046AFC45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:4f:88:d2:61:e7:60:a5:84:d8:dc:0a:d5:26:
                    b6:8a:c1:bc:ba:49:b9:38:6d:54:3d:78:d6:da:66:
                    c1:00:bf:22:8e:82:df:52:94:b2:dd:eb:57:6b:80:
                    d6:ff:88:4e:43:29:db:60:7b:25:69:fc:32:4f:fe:
                    ff:20:a6:be:78:64:dc:93:4c:69:d3:50:0e:5b:05:
                    12:ad:7d:a1:61:e2:a7:7d:9b:d9:b7:1f:20:05:17:
                    de:bd:6f:b5:8f:a1:ac:a0:91:c7:6d:3e:9a:b1:96:
                    03:3e:dc:c5:2f:c0:53:79:43:a2:02:8f:ce:f7:0b:
                    84:6f:e1:9e:1e:3c:85:a3:08:f2:07:7b:b0:e9:d6:
                    b9:52:eb:26:ba:98:fd:c2:30:7c:40:6d:cb:ec:1c:
                    45:b2:b6:a8:69:4c:12:78:1e:60:18:76:7e:d5:ce:
                    cc:4c:eb:0e:f0:08:80:07:80:f6:89:41:b7:19:4b:
                    b8:9b:b6:01:13:9e:11:30:e3:1a:88:6d:21:ce:88:
                    c2:6d:fa:32:7b:5e:24:7a:70:80:77:6a:3f:34:56:
                    6b:be:bf:c4:f4:63:58:81:ac:51:33:db:e6:65:37:
                    45:b8:5e:9f:82:74:dc:13:b7:f7:bb:b0:86:c1:1a:
                    4f:7e:2d:8b:29:ee:3b:60:e6:be:15:1b:73:d6:6d:
                    ab:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:70:90:C5:22:88:ED:87:9A:E3:B8:22:B9:F9:A5:A7:04:6A:FC:45
            X509v3 Authority Key Identifier:
                keyid:9F:5B:F0:E1:6F:93:4F:AA:F9:C2:81:ED:0B:EC:9A:1F:51:20:0A:C7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30142/n1vw4W-TT6r5woHtC-yaH1EgCsc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/n1vw4W-TT6r5woHtC-yaH1EgCsc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30142/MHCQxSKI7Yea47giufmlpwRq_EU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:3a00::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:43:bb:f6:bd:4b:13:aa:69:a3:1c:dd:3f:da:d2:f1:16:a9:
         e4:f1:bc:a5:8a:b0:7b:e8:a3:39:e1:8a:3c:6c:c4:9d:c6:e6:
         08:24:ff:81:6d:13:a6:59:3d:14:a4:c0:01:cc:c0:f5:b8:9f:
         97:4f:78:61:0a:f9:f2:2a:30:00:40:e6:69:c0:e2:d8:51:e6:
         cd:9b:bc:fa:49:1e:3f:19:6e:74:07:0f:a5:7e:7d:fd:f7:19:
         70:91:5b:69:8c:b0:56:c3:a2:2e:cb:2d:52:77:09:0e:62:18:
         41:20:80:e8:f3:28:0d:e0:d4:38:d4:6e:12:68:ec:a4:c3:06:
         ed:a6:85:3b:04:ac:33:a4:c8:38:24:db:64:8e:49:69:f8:de:
         e7:94:8c:7b:30:c6:58:29:ec:30:82:98:17:ab:7a:a3:71:97:
         66:6d:6d:6e:43:9e:44:c7:38:81:58:ee:7c:2c:5b:bc:3d:46:
         7d:b4:05:af:a8:69:55:4d:5d:c2:0f:03:dc:1c:25:d7:03:d3:
         9d:04:24:5a:3a:fc:b0:f8:4f:1e:06:3b:91:b9:f6:de:f8:54:
         8e:4e:3b:23:35:eb:3b:b9:28:8c:34:d6:a9:30:fe:20:af:ca:
         fb:af:ff:72:3b:f8:9f:1e:d9:a1:33:9a:dc:ac:b7:6d:c3:17:
         73:0b:6b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:58 2024 by rpki-client on console-ams.rpki-client.org