Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30144/NrZVJK8IFZT83cdFMtSdxREQ3GE.roa
File:                     NrZVJK8IFZT83cdFMtSdxREQ3GE.roa (raw, json)
Hash identifier:          e7uFBkxJGOlEIXui5KhDQ4dUy4HQ1g6ycgjuKaW3Pl4=
Subject key identifier:   36:B6:55:24:AF:08:15:94:FC:DD:C7:45:32:D4:9D:C5:11:10:DC:61
Certificate issuer:       /CN=87DAEC20EDF4A2010423DD7B004E1574F113A735
Certificate serial:       14
Authority key identifier: 87:DA:EC:20:ED:F4:A2:01:04:23:DD:7B:00:4E:15:74:F1:13:A7:35
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h9rsIO30ogEEI917AE4VdPETpzU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/NrZVJK8IFZT83cdFMtSdxREQ3GE.roa
Signing time:             Sat 11 Feb 2023 07:33:42 +0000
ROA not before:           Sat 11 Feb 2023 07:33:42 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     17676
IP address blocks:        2403:9900::/24 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87DAEC20EDF4A2010423DD7B004E1574F113A735
        Validity
            Not Before: Feb 11 07:33:42 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=36B65524AF081594FCDDC74532D49DC51110DC61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f7:d5:ae:0c:cc:f8:a9:48:e0:d8:51:2b:89:
                    66:5b:f3:5c:0b:03:bf:95:4f:3e:6a:5e:3f:7c:20:
                    3d:f8:74:78:a8:e6:3d:c1:aa:85:d1:1a:f5:76:15:
                    c4:b0:82:bc:42:cc:57:4e:54:ad:c4:3e:8a:32:3e:
                    56:64:dc:77:3c:96:76:db:be:52:23:f7:8d:21:37:
                    2d:4a:79:a4:3a:7d:b7:40:4a:4c:07:5c:e9:87:34:
                    71:5d:0c:b3:50:76:89:da:1c:e0:ef:ae:07:7c:3a:
                    48:b7:aa:32:de:0c:ac:eb:3a:b7:52:6c:72:94:a2:
                    25:39:5b:0b:66:c1:55:b5:18:ef:7f:ce:b0:7e:1a:
                    d7:1d:19:c0:df:81:e6:5d:c4:82:f3:53:ec:16:fd:
                    9d:cb:31:e6:a1:ad:df:29:5b:46:5b:e5:55:92:d1:
                    19:ff:af:ec:73:f7:8e:2f:14:db:52:24:8a:05:e9:
                    c2:12:c7:fe:19:01:b8:15:16:58:1a:8a:39:ab:bd:
                    ab:e8:97:38:a9:c9:e5:a3:c2:de:30:d4:59:ed:b5:
                    64:0a:16:d5:87:20:d4:58:24:f4:05:4d:88:46:18:
                    10:ce:98:ce:a6:bf:f0:50:5e:79:c9:cb:bc:a5:b8:
                    2b:f3:e5:2e:c0:11:63:cc:2d:2b:72:d0:33:96:17:
                    7b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B6:55:24:AF:08:15:94:FC:DD:C7:45:32:D4:9D:C5:11:10:DC:61
            X509v3 Authority Key Identifier:
                keyid:87:DA:EC:20:ED:F4:A2:01:04:23:DD:7B:00:4E:15:74:F1:13:A7:35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/h9rsIO30ogEEI917AE4VdPETpzU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h9rsIO30ogEEI917AE4VdPETpzU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30144/NrZVJK8IFZT83cdFMtSdxREQ3GE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:9900::/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:32:31:c7:82:14:a6:ef:49:6c:54:f8:a9:f3:ba:a5:c3:6d:
         83:c4:dd:9d:bf:c5:07:8e:77:c9:61:d5:9a:44:27:0d:62:d1:
         61:5f:53:49:42:3a:3b:73:6c:ea:f7:67:65:55:ea:1a:85:05:
         a3:f3:38:33:d0:23:c4:bd:f5:f1:06:65:5b:df:c8:85:d8:14:
         f6:38:74:9a:7d:c9:89:cb:8d:3f:58:0b:f6:7d:2b:30:38:9a:
         76:2a:7e:55:71:ee:cf:19:4f:a8:58:c6:c9:ce:c8:fd:17:fe:
         79:4b:dc:07:c0:f1:af:b7:26:be:09:11:36:9f:bd:c2:16:2f:
         70:d8:e3:05:c1:4e:ef:ea:f0:74:82:dc:0c:05:7c:cc:82:1f:
         cf:4f:c3:42:93:c7:cb:70:f6:00:c9:80:eb:20:9c:21:4f:44:
         b8:34:35:94:21:ba:95:a2:cd:4b:f1:0d:11:e0:a3:01:16:8b:
         0e:67:9a:4f:5a:79:6e:ff:bf:f6:63:d2:47:68:07:9b:c6:d4:
         08:d1:3d:e0:db:32:9c:7b:fe:d2:74:8b:7e:0f:04:a1:ff:73:
         de:b1:e3:71:a5:86:ee:a0:bd:8a:12:bb:f9:ef:09:27:ac:e0:
         16:80:88:d8:c2:7a:38:77:49:3f:da:1e:e1:51:41:05:1b:3b:
         c1:04:77:41
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org