Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30162/suVNMUM5QxxxGBxEJ5If9q79cCA.roa
File:                     suVNMUM5QxxxGBxEJ5If9q79cCA.roa (raw, json)
Hash identifier:          ZBtCF1kMd9ntpC0JvNkrOsqAoAC+aKV31uUMvoMsyHw=
Subject key identifier:   B2:E5:4D:31:43:39:43:1C:71:18:1C:44:27:92:1F:F6:AE:FD:70:20
Certificate issuer:       /CN=7B15BDD9CBD423091F1FF323341BFDD0A70CB623
Certificate serial:       12
Authority key identifier: 7B:15:BD:D9:CB:D4:23:09:1F:1F:F3:23:34:1B:FD:D0:A7:0C:B6:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/exW92cvUIwkfH_MjNBv90KcMtiM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30162/suVNMUM5QxxxGBxEJ5If9q79cCA.roa
Signing time:             Fri 07 Oct 2022 06:56:33 +0000
ROA not before:           Fri 07 Oct 2022 06:56:33 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     24295
IP address blocks:        2404:ca00::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B15BDD9CBD423091F1FF323341BFDD0A70CB623
        Validity
            Not Before: Oct  7 06:56:33 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=B2E54D314339431C71181C4427921FF6AEFD7020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ea:04:64:3e:4d:59:a1:5a:4a:28:81:5f:54:
                    24:79:aa:a5:b6:cc:9a:05:7c:fe:bf:36:bc:e6:dc:
                    8d:8e:37:36:d4:ab:d9:ae:7a:39:66:40:94:1f:79:
                    02:d4:7a:2b:4c:d0:f5:41:1f:d2:24:e1:b1:61:d4:
                    7c:22:a7:30:35:bf:01:4a:8e:98:e5:f2:cc:de:f4:
                    4d:91:7a:a8:6d:47:80:19:4a:c1:e7:ac:02:09:3f:
                    f7:4d:b6:15:b8:a8:d3:c4:a5:91:a4:5a:94:a4:7e:
                    99:59:20:73:10:cb:5e:f1:4b:43:ef:5c:b6:8a:c2:
                    83:ea:84:cf:9d:89:d5:b0:19:b6:fe:32:a2:2b:98:
                    e2:0b:b8:3e:08:db:d7:c3:82:c4:ca:ef:c9:07:5a:
                    52:f2:f1:6a:d9:53:48:ba:00:70:65:21:b2:d7:03:
                    b0:64:34:d9:a7:59:4a:b1:3c:ea:66:27:36:09:3b:
                    90:69:ce:a8:ae:a4:35:24:ac:70:9c:37:74:dc:b6:
                    3d:45:1f:53:1b:c6:a4:41:9e:c9:0b:38:85:af:0c:
                    dd:2d:c4:3d:11:5d:3f:01:81:b0:90:8f:be:2b:16:
                    06:da:02:61:cf:43:d2:84:ae:34:45:b1:7c:11:17:
                    2c:7e:e5:2a:18:46:ed:1f:d6:3a:26:95:e9:78:f2:
                    fa:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E5:4D:31:43:39:43:1C:71:18:1C:44:27:92:1F:F6:AE:FD:70:20
            X509v3 Authority Key Identifier:
                keyid:7B:15:BD:D9:CB:D4:23:09:1F:1F:F3:23:34:1B:FD:D0:A7:0C:B6:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30162/exW92cvUIwkfH_MjNBv90KcMtiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/exW92cvUIwkfH_MjNBv90KcMtiM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30162/suVNMUM5QxxxGBxEJ5If9q79cCA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:ca00::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:7f:13:65:86:d9:7d:58:48:d6:de:35:64:90:da:68:9a:1f:
         b3:c6:83:cf:93:cc:3a:02:f6:40:6d:62:ea:26:8c:f8:bc:dd:
         24:3d:3b:a7:c4:08:bf:9c:2f:e9:10:86:44:cc:8a:d4:f8:c6:
         c4:70:55:c0:cc:a7:b8:26:38:2d:4d:7c:36:b8:66:3e:83:43:
         b8:40:ac:db:f6:49:4b:82:04:4b:c9:d6:c9:7a:d2:3c:18:09:
         4f:f6:b5:f6:df:c7:46:1f:0b:e0:f5:25:8d:10:48:64:a7:b9:
         b6:ba:9f:2d:36:c6:b1:5d:71:75:0c:7b:7d:71:c5:18:2b:d1:
         ca:3d:98:68:a3:e2:d2:ff:7c:cd:e4:38:eb:13:d3:40:1b:2d:
         66:3b:a2:fd:36:3f:28:2b:20:94:c3:3a:78:79:0e:69:7f:e0:
         1b:17:73:fd:5c:ed:64:28:ce:f3:82:52:21:9c:22:2b:4e:f8:
         b3:f0:9b:cf:a4:99:46:f3:03:76:ac:10:77:7c:81:0c:00:72:
         b8:bf:f3:18:d9:d9:15:59:5a:ca:d1:06:f2:e5:85:b6:55:d9:
         55:f4:4e:91:22:3c:13:62:62:41:df:9c:3c:ba:a2:34:dc:7d:
         6b:21:93:54:92:50:25:8c:ed:d7:76:78:43:d5:0d:cd:3e:36:
         8b:a8:6b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org