Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30142/mwzzOqRYs_zDNqLpFo46u9_OZkQ.roa
File:                     mwzzOqRYs_zDNqLpFo46u9_OZkQ.roa (raw, json)
Hash identifier:          bE49xlWbWY6JcXTFrYZjrg5RdhnOHIkYuGswFQacRr0=
Subject key identifier:   9B:0C:F3:3A:A4:58:B3:FC:C3:36:A2:E9:16:8E:3A:BB:DF:CE:66:44
Certificate issuer:       /CN=9F5BF0E16F934FAAF9C281ED0BEC9A1F51200AC7
Certificate serial:       13
Authority key identifier: 9F:5B:F0:E1:6F:93:4F:AA:F9:C2:81:ED:0B:EC:9A:1F:51:20:0A:C7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/n1vw4W-TT6r5woHtC-yaH1EgCsc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30142/mwzzOqRYs_zDNqLpFo46u9_OZkQ.roa
Signing time:             Tue 25 May 2021 02:42:28 +0000
ROA not before:           Tue 25 May 2021 02:42:28 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     9371
IP address blocks:        2403:3a00::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F5BF0E16F934FAAF9C281ED0BEC9A1F51200AC7
        Validity
            Not Before: May 25 02:42:28 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=9B0CF33AA458B3FCC336A2E9168E3ABBDFCE6644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b6:7d:a9:84:19:fa:a8:98:9a:e6:94:66:ae:
                    e4:3c:da:fc:2f:31:d3:47:2d:a7:84:c4:2f:74:c6:
                    7d:dd:61:8d:91:48:97:4d:5d:a4:78:85:31:57:67:
                    ba:3a:23:20:df:30:7b:59:5e:49:17:13:ff:a9:77:
                    45:56:6a:42:15:e8:11:8b:05:10:ee:ad:3c:e6:c5:
                    31:f4:17:57:1f:31:ce:07:e2:7e:34:ee:5a:6a:a5:
                    5a:c2:97:6b:78:3b:6e:c4:ac:ba:4b:6b:bd:88:32:
                    25:99:4f:1b:b5:6f:02:84:1d:08:f4:6c:7d:72:95:
                    c7:7f:66:c3:4c:74:91:83:e3:c5:2b:e7:a2:ec:59:
                    39:81:06:7b:ec:b7:fe:c7:fc:90:b6:a5:d7:bd:4f:
                    8e:79:61:bc:02:d3:2e:ba:62:f6:12:71:d7:60:3e:
                    ac:6e:c0:10:59:88:29:56:ec:5b:10:d8:2b:52:d1:
                    22:35:cc:b0:2a:09:f7:b9:b8:4b:9a:2b:9a:fa:27:
                    f8:4d:97:04:83:a0:ca:3e:e1:80:03:29:25:95:86:
                    7d:d0:89:a7:94:59:ec:3f:74:d1:e5:c1:83:35:45:
                    43:69:d4:31:9e:f2:19:21:bb:29:ea:26:a2:38:5b:
                    3c:3e:b7:7b:de:41:c4:3d:a8:5a:41:cc:46:1b:14:
                    36:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:0C:F3:3A:A4:58:B3:FC:C3:36:A2:E9:16:8E:3A:BB:DF:CE:66:44
            X509v3 Authority Key Identifier:
                keyid:9F:5B:F0:E1:6F:93:4F:AA:F9:C2:81:ED:0B:EC:9A:1F:51:20:0A:C7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30142/n1vw4W-TT6r5woHtC-yaH1EgCsc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/n1vw4W-TT6r5woHtC-yaH1EgCsc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30142/mwzzOqRYs_zDNqLpFo46u9_OZkQ.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:3a00::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:26:18:50:3a:25:eb:67:6b:f8:57:4d:24:a8:33:0c:64:73:
         f4:e0:4f:7e:03:13:84:e1:7c:c6:c9:5a:8f:76:9f:23:08:1b:
         2b:d5:5e:fa:49:43:d6:19:e5:87:45:80:e6:59:dd:96:bf:51:
         2e:31:31:8f:87:b1:b6:28:47:79:1d:1e:38:80:cb:92:6f:3d:
         9c:f6:63:f4:b9:0b:1b:4d:4d:90:3c:88:35:85:3c:c2:ef:0a:
         0e:a1:07:05:3f:08:b7:e8:7c:20:5d:f7:a2:ee:e4:15:8c:29:
         1f:18:83:4d:81:fc:02:9d:18:ba:f8:e7:b5:39:61:11:4c:62:
         d5:5d:0f:03:dc:f5:96:53:36:63:11:d3:a9:5d:33:93:4b:09:
         08:72:19:4a:78:44:a3:04:c0:71:67:e6:e2:67:24:6e:25:d5:
         12:35:d5:71:37:4a:41:88:7e:c2:33:01:3b:ef:28:c8:a0:d5:
         8a:36:ff:26:a2:0b:21:53:5a:8f:6f:36:ca:1f:a5:a8:13:45:
         f2:d3:ed:10:9a:43:d9:6b:21:af:06:b4:fc:23:6a:31:5b:d9:
         18:8b:33:41:05:1d:f7:52:17:9f:97:f5:84:d5:74:10:21:24:
         70:2f:ed:c3:3c:f4:a1:cd:d7:9d:d5:e5:8b:d5:de:61:13:49:
         f5:22:dc:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org