Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30188/vLupBi6tTsI2RH-vqOqW7SQycjE.roa
File:                     vLupBi6tTsI2RH-vqOqW7SQycjE.roa (raw, json)
Hash identifier:          AUlrNDlFouMsz8wuvj+Y+Tc3jMSXcekHbjxNzaZtzik=
Subject key identifier:   BC:BB:A9:06:2E:AD:4E:C2:36:44:7F:AF:A8:EA:96:ED:24:32:72:31
Certificate issuer:       /CN=157E088BE15A585F688D86A671D88F0150C3EDBA
Certificate serial:       02
Authority key identifier: 15:7E:08:8B:E1:5A:58:5F:68:8D:86:A6:71:D8:8F:01:50:C3:ED:BA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FX4Ii-FaWF9ojYamcdiPAVDD7bo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30188/vLupBi6tTsI2RH-vqOqW7SQycjE.roa
Signing time:             Wed 11 May 2022 01:54:54 +0000
ROA not before:           Wed 11 May 2022 01:54:54 +0000
ROA not after:            Thu 11 May 2023 01:50:27 +0000
asID:                     18260
IP address blocks:        2400:df00::/32 maxlen: 128

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=157E088BE15A585F688D86A671D88F0150C3EDBA
        Validity
            Not Before: May 11 01:54:54 2022 GMT
            Not After : May 11 01:50:27 2023 GMT
        Subject: CN=BCBBA9062EAD4EC236447FAFA8EA96ED24327231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:19:29:36:6e:84:b0:32:20:72:75:01:96:7b:
                    95:3e:52:25:11:f8:09:ac:78:3b:f1:7f:71:40:82:
                    a5:63:37:eb:15:b4:f5:11:79:9b:91:85:05:c5:ad:
                    2e:6e:d7:a6:70:1e:a1:aa:b3:80:1d:38:2f:4e:f7:
                    cd:7b:67:ad:ec:e4:5e:0e:e4:e6:2d:01:08:ca:64:
                    bf:88:ee:91:72:ea:d1:a8:61:00:6e:db:01:1b:4f:
                    b6:58:cc:80:62:b0:9f:80:7c:0c:29:6c:ad:5b:a5:
                    25:b6:9c:55:9f:d7:8f:30:86:da:23:c4:18:d0:7b:
                    51:93:af:0a:00:95:5b:d0:99:e6:b0:99:9d:aa:26:
                    0e:e9:4b:88:40:13:bf:4f:67:9f:2f:8a:5e:da:69:
                    3a:cc:d3:6c:36:5c:3c:a8:62:44:61:e2:2d:3c:75:
                    fa:06:7e:f0:42:1d:94:cf:7f:8c:9b:1f:a3:f3:2f:
                    54:6e:b3:51:76:d2:60:ae:44:c1:4c:96:a1:5e:ee:
                    9c:ce:b0:85:4d:2a:b7:73:11:64:0a:d2:1e:ae:57:
                    1b:54:0a:9e:e9:fd:1c:01:ea:62:9e:07:29:f9:be:
                    9e:1d:d8:7e:08:db:4d:b1:c5:9e:d0:b5:99:1c:14:
                    41:db:32:17:ca:ac:bf:d4:b9:5c:40:03:66:23:25:
                    39:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:BB:A9:06:2E:AD:4E:C2:36:44:7F:AF:A8:EA:96:ED:24:32:72:31
            X509v3 Authority Key Identifier:
                keyid:15:7E:08:8B:E1:5A:58:5F:68:8D:86:A6:71:D8:8F:01:50:C3:ED:BA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30188/FX4Ii-FaWF9ojYamcdiPAVDD7bo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FX4Ii-FaWF9ojYamcdiPAVDD7bo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30188/vLupBi6tTsI2RH-vqOqW7SQycjE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:df00::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:5b:c1:c1:73:14:a3:78:ee:1e:ed:2c:89:ca:66:27:f6:d7:
         29:13:b6:71:e7:32:b9:62:3a:47:11:0e:a6:e2:33:a5:6f:f9:
         d5:17:3f:a4:72:59:e0:07:5e:43:d9:40:9d:0b:eb:cb:a2:34:
         31:e6:72:5d:97:14:1b:9f:d7:03:e8:4d:69:ea:3f:ca:93:56:
         82:b6:5e:ec:f4:e8:7a:c6:61:bd:0a:10:c3:07:58:29:c6:ee:
         f5:8a:d6:91:57:18:3b:a8:8b:2a:e1:5e:4f:e2:f7:51:a0:48:
         a4:e0:69:a9:c6:aa:1d:29:b2:5c:f2:83:ad:78:70:03:37:25:
         24:4b:78:ff:96:54:b9:3c:64:16:d8:f3:6e:4b:d1:cc:3b:0d:
         33:46:b7:b1:90:0d:a2:23:a0:9d:2d:86:15:8e:d3:92:cf:6a:
         2f:b3:96:d5:3c:a9:57:bb:bd:e5:cb:21:e7:c6:5e:c8:26:fd:
         00:7d:ce:c6:93:d5:06:13:ce:83:6a:52:3f:33:dc:90:9e:20:
         d5:8c:2c:ff:4a:c2:86:d7:6c:b3:b2:1c:7c:d2:dc:40:c5:43:
         1a:e2:8e:00:2b:d0:dd:80:0f:22:22:31:8f:f8:70:6a:d7:aa:
         e1:3d:cb:16:b9:ad:40:43:bf:3e:43:af:74:56:9b:7a:15:80:
         08:e8:47:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org