Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30156/0B84ZUrSksemQD3H62tNY4ckBEU.roa
File:                     0B84ZUrSksemQD3H62tNY4ckBEU.roa (raw, json)
Hash identifier:          jXxI79r2dOhVR6/m6P8khwORJZF6uolwOkKW2NapsFc=
Subject key identifier:   D0:1F:38:65:4A:D2:92:C7:A6:40:3D:C7:EB:6B:4D:63:87:24:04:45
Certificate issuer:       /CN=66BB158F422A7BC0ADAE187EE4858F3A1DA91312
Certificate serial:       3E
Authority key identifier: 66:BB:15:8F:42:2A:7B:C0:AD:AE:18:7E:E4:85:8F:3A:1D:A9:13:12
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZrsVj0Iqe8Ctrhh-5IWPOh2pExI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30156/0B84ZUrSksemQD3H62tNY4ckBEU.roa
Signing time:             Thu 13 Apr 2023 09:52:43 +0000
ROA not before:           Thu 13 Apr 2023 09:52:43 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     55392
IP address blocks:        2404:8e01::/32 maxlen: 128

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66BB158F422A7BC0ADAE187EE4858F3A1DA91312
        Validity
            Not Before: Apr 13 09:52:43 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=D01F38654AD292C7A6403DC7EB6B4D6387240445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:43:b8:e9:9b:c2:f2:ab:22:75:af:18:ae:62:
                    12:81:85:b6:3d:92:7f:c3:68:5a:84:92:fd:9d:12:
                    5e:93:c1:fe:85:c1:23:27:fc:58:09:63:64:eb:75:
                    53:40:42:bd:7d:71:f8:5d:51:28:ce:d1:d8:5d:06:
                    04:b7:51:b0:0c:87:9a:be:5b:a2:86:d5:f4:bc:9b:
                    19:7d:04:1b:ba:63:15:32:44:f9:a8:c2:44:67:0a:
                    6c:4e:15:37:79:7e:c6:d7:7d:61:b3:29:71:46:45:
                    05:13:c0:1d:73:9b:45:d5:26:80:52:81:b2:d2:12:
                    0c:1f:70:1c:0b:34:68:9c:05:4c:44:14:70:3a:66:
                    12:2d:4d:89:d5:86:de:58:3f:02:55:44:37:e6:82:
                    c7:51:ea:49:3b:13:df:7e:83:0b:58:e3:82:94:46:
                    cf:8b:fc:ac:d3:45:9f:a0:2c:7c:a4:96:a0:c5:8c:
                    ed:85:00:c5:44:95:7d:aa:a7:63:19:34:7c:b0:c7:
                    dc:b6:c6:51:48:bc:14:c8:cd:0a:b5:02:a2:68:81:
                    f3:ae:79:a5:8b:c0:e7:ec:31:c9:2f:85:65:44:97:
                    8b:29:54:0d:dc:56:4a:b5:da:e1:71:dd:b3:c8:fb:
                    7d:f5:d1:29:50:f8:e1:91:3a:81:36:1d:90:14:3e:
                    c2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:1F:38:65:4A:D2:92:C7:A6:40:3D:C7:EB:6B:4D:63:87:24:04:45
            X509v3 Authority Key Identifier:
                keyid:66:BB:15:8F:42:2A:7B:C0:AD:AE:18:7E:E4:85:8F:3A:1D:A9:13:12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30156/ZrsVj0Iqe8Ctrhh-5IWPOh2pExI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZrsVj0Iqe8Ctrhh-5IWPOh2pExI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30156/0B84ZUrSksemQD3H62tNY4ckBEU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8e01::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:a8:cc:b3:98:d7:71:8d:17:e2:8a:d9:55:2a:08:da:30:c2:
         66:12:e4:a6:c6:93:40:bc:a7:aa:f6:7b:cc:62:be:6a:af:b2:
         3c:b0:5c:a1:27:79:22:25:78:6a:30:e6:17:83:cf:c4:3c:ff:
         43:30:cc:a2:e7:09:20:60:ed:25:b1:2f:e8:82:b2:bd:2c:7a:
         b2:b0:5c:00:c9:10:e3:d4:2e:c5:bc:50:e5:69:dc:b0:79:ac:
         ec:5c:3b:2d:2d:54:7e:dd:dd:5a:df:a4:fc:fc:83:d8:f2:b6:
         f8:79:64:47:06:39:0e:9d:a2:02:04:72:cf:a5:1a:ef:39:32:
         03:7a:38:44:1a:b4:46:45:39:aa:40:3e:d4:f7:28:6b:93:2d:
         59:1a:09:6b:19:1c:6d:d0:e4:dd:a3:4d:21:56:ed:d0:3f:51:
         91:7c:f9:dc:33:bd:8a:63:e1:e3:3d:c8:97:d7:f1:75:0e:8e:
         71:5c:e0:51:36:77:9f:28:92:84:39:8d:2b:86:7c:7a:35:1e:
         45:3e:04:bb:74:5d:63:4c:47:57:f5:85:de:3e:80:51:e8:41:
         ff:7f:5f:ce:1a:ad:5b:5d:04:39:05:8a:8f:dc:6a:36:12:76:
         4f:99:5f:35:ab:35:21:89:7c:ca:54:a9:8a:f0:92:f5:40:d6:
         c9:f7:4e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org