Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30156/G1MxyHxhhmEYlOOHQ0ERF3aK6Ys.roa
File:                     G1MxyHxhhmEYlOOHQ0ERF3aK6Ys.roa (raw, json)
Hash identifier:          HDG8Grij7eJMRKPq9vA0OfPexTpflNx1OprJqlAA7tk=
Subject key identifier:   1B:53:31:C8:7C:61:86:61:18:94:E3:87:43:41:11:17:76:8A:E9:8B
Certificate issuer:       /CN=66BB158F422A7BC0ADAE187EE4858F3A1DA91312
Certificate serial:       30
Authority key identifier: 66:BB:15:8F:42:2A:7B:C0:AD:AE:18:7E:E4:85:8F:3A:1D:A9:13:12
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZrsVj0Iqe8Ctrhh-5IWPOh2pExI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30156/G1MxyHxhhmEYlOOHQ0ERF3aK6Ys.roa
Signing time:             Sun 01 May 2022 01:29:59 +0000
ROA not before:           Sun 01 May 2022 01:29:59 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     55392
IP address blocks:        2404:8e01::/32 maxlen: 128

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66BB158F422A7BC0ADAE187EE4858F3A1DA91312
        Validity
            Not Before: May  1 01:29:59 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=1B5331C87C6186611894E38743411117768AE98B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:16:ba:74:09:a4:d7:b3:e4:78:15:0f:aa:ed:
                    82:9c:bd:76:99:28:65:97:3a:6f:13:bd:b1:c7:5f:
                    84:95:e7:f5:28:f5:e9:2d:65:09:71:e9:3c:8e:50:
                    2a:a3:85:35:e2:f2:d4:71:b6:03:f3:09:4e:8c:5d:
                    1d:8c:95:9d:09:86:ca:37:2b:b1:23:79:54:03:46:
                    ca:e2:9f:b7:80:c0:f1:ab:71:79:7d:32:6a:c7:65:
                    4a:eb:c1:f8:4d:81:94:21:1f:21:56:fa:c3:bd:fb:
                    b9:22:02:31:fa:3b:80:94:c1:f5:70:92:c1:99:6e:
                    ef:b5:6e:7a:9c:e2:27:78:7f:e0:8e:a8:9a:a8:d3:
                    1c:b8:34:b1:60:c7:b0:17:cc:6e:de:f0:24:57:a2:
                    09:cb:86:bb:bd:7e:44:e7:74:79:1f:b6:c3:5c:3d:
                    aa:2c:e2:ca:d1:d5:82:18:bb:27:96:5a:60:f4:2a:
                    bd:0b:e3:b9:9e:8b:fb:97:af:b5:67:30:1b:ca:0e:
                    16:0d:60:85:6c:88:96:4a:4a:95:12:12:90:e1:6f:
                    c0:4a:e1:51:e2:97:cf:04:f5:d2:38:a9:c3:53:ed:
                    d7:0c:db:b0:c7:f5:5f:c2:ac:a3:cd:3b:79:70:03:
                    b9:b6:2e:f5:39:8d:30:7e:6d:c9:2d:40:a8:dd:2f:
                    fe:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:53:31:C8:7C:61:86:61:18:94:E3:87:43:41:11:17:76:8A:E9:8B
            X509v3 Authority Key Identifier:
                keyid:66:BB:15:8F:42:2A:7B:C0:AD:AE:18:7E:E4:85:8F:3A:1D:A9:13:12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30156/ZrsVj0Iqe8Ctrhh-5IWPOh2pExI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZrsVj0Iqe8Ctrhh-5IWPOh2pExI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30156/G1MxyHxhhmEYlOOHQ0ERF3aK6Ys.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8e01::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:6c:e5:88:cf:46:e7:b4:82:6c:ff:6b:87:09:e3:cc:1e:d4:
         ac:5e:cd:1d:7b:8b:78:81:60:ef:71:84:9c:a2:fa:9e:34:9f:
         27:73:d9:9c:1a:0d:bd:49:1d:93:97:ae:26:01:fb:c8:f5:43:
         48:5f:1e:02:08:59:f6:13:0d:7e:bf:b3:47:9b:a3:8c:ef:83:
         c2:3f:76:96:4a:ab:ac:c4:e0:44:c9:f6:b9:64:b3:07:2b:13:
         a7:aa:8e:b2:9e:09:53:34:21:29:46:c9:37:18:c9:3a:41:16:
         ce:22:4a:90:2f:15:8a:35:f0:39:a3:ca:af:59:b6:1d:ea:e1:
         94:83:56:09:14:b8:38:03:53:09:00:85:82:49:a4:85:eb:b1:
         6d:83:15:fc:5e:ae:9c:bd:90:74:ea:a5:38:e5:0b:48:0d:12:
         72:3b:49:64:b1:00:0c:80:65:9d:5b:22:77:f4:f4:26:7e:fc:
         1c:21:17:5f:e2:51:26:cc:61:be:53:13:ac:f3:6b:bd:33:35:
         94:4e:0a:c1:b1:98:b4:02:94:5b:86:30:8b:f5:d0:a3:3f:f8:
         73:cb:30:15:9e:fd:1d:71:09:0b:54:97:90:96:dc:51:05:90:
         05:55:69:f7:63:c1:00:c2:f1:f1:02:4c:06:68:42:42:9a:ba:
         3a:49:35:b4
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBMDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2NkJC
MTU4RjQyMkE3QkMwQURBRTE4N0VFNDg1OEYzQTFEQTkxMzEyMB4XDTIyMDUwMTAx
Mjk1OVoXDTIzMDQyNzA5NTIzNFowMzExMC8GA1UEAxMoMUI1MzMxQzg3QzYxODY2
MTE4OTRFMzg3NDM0MTExMTc3NjhBRTk4QjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOUWunQJpNez5HgVD6rtgpy9dpkoZZc6bxO9scdfhJXn9Sj16S1l
CXHpPI5QKqOFNeLy1HG2A/MJToxdHYyVnQmGyjcrsSN5VANGyuKft4DA8atxeX0y
asdlSuvB+E2BlCEfIVb6w737uSICMfo7gJTB9XCSwZlu77VuepziJ3h/4I6omqjT
HLg0sWDHsBfMbt7wJFeiCcuGu71+ROd0eR+2w1w9qiziytHVghi7J5ZaYPQqvQvj
uZ6L+5evtWcwG8oOFg1ghWyIlkpKlRISkOFvwErhUeKXzwT10jipw1Pt1wzbsMf1
X8Kso807eXADubYu9TmNMH5tyS1AqN0v/iMCAwEAAaOCAikwggIlMB0GA1UdDgQW
BBQbUzHIfGGGYRiU44dDQREXdorpizAfBgNVHSMEGDAWgBRmuxWPQip7wK2uGH7k
hY86HakTEjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAxNTYvWnJzVmowSXFlOEN0cmhoLTVJV1BPaDJwRXhJLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWnJzVmowSXFlOEN0cmhoLTVJV1BP
aDJwRXhJLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMTU2L0cxTXh5SHhoaG1FWWxPT0hRMEVSRjNhSzZZcy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAkBI4BMA0GCSqGSIb3DQEBCwUAA4IBAQCLbOWIz0bntIJs/2uHCePM
HtSsXs0de4t4gWDvcYScovqeNJ8nc9mcGg29SR2Tl64mAfvI9UNIXx4CCFn2Ew1+
v7NHm6OM74PCP3aWSqusxOBEyfa5ZLMHKxOnqo6ynglTNCEpRsk3GMk6QRbOIkqQ
LxWKNfA5o8qvWbYd6uGUg1YJFLg4A1MJAIWCSaSF67FtgxX8Xq6cvZB06qU45QtI
DRJyO0lksQAMgGWdWyJ39PQmfvwcIRdf4lEmzGG+UxOs82u9MzWUTgrBsZi0ApRb
hjCL9dCjP/hzyzAVnv0dcQkLVJeQltxRBZAFVWn3Y8EAwvHxAkwGaEJCmro6STW0
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org