Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30193/-CmQFD70GKwINrWTrHknKTFNmpw.roa
File:                     -CmQFD70GKwINrWTrHknKTFNmpw.roa (raw, json)
Hash identifier:          C+jYHdvqE2ehUG7llbScnLFBFkkE43D8KSK9yA6/iZU=
Subject key identifier:   F8:29:90:14:3E:F4:18:AC:08:36:B5:93:AC:79:27:29:31:4D:9A:9C
Certificate issuer:       /CN=59D1C2E49F90761EB302F05A991871CC5B1CDB07
Certificate serial:       37
Authority key identifier: 59:D1:C2:E4:9F:90:76:1E:B3:02:F0:5A:99:18:71:CC:5B:1C:DB:07
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WdHC5J-Qdh6zAvBamRhxzFsc2wc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30193/-CmQFD70GKwINrWTrHknKTFNmpw.roa
Signing time:             Thu 13 Apr 2023 09:53:23 +0000
ROA not before:           Thu 13 Apr 2023 09:53:23 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9363
IP address blocks:        2401:3b00::/32 maxlen: 128

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59D1C2E49F90761EB302F05A991871CC5B1CDB07
        Validity
            Not Before: Apr 13 09:53:23 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=F82990143EF418AC0836B593AC792729314D9A9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0c:02:07:78:56:3d:94:ca:d6:bc:99:33:e0:
                    67:14:39:29:88:c9:dd:4e:80:37:2a:d9:f4:1c:81:
                    1e:95:30:69:5b:2c:6f:58:09:19:6b:14:55:e1:b6:
                    dc:cf:e7:d1:76:a2:c9:9d:78:d4:0f:44:da:ba:4f:
                    dc:ac:75:88:aa:f3:2f:3a:f6:e5:44:3d:d4:db:36:
                    62:82:e6:1a:c4:41:d3:8a:89:f1:d8:74:51:ff:60:
                    e6:30:53:fc:ba:95:1d:10:99:8e:5c:8d:0e:c9:1a:
                    01:e9:fe:86:7a:60:cd:5f:f0:3f:39:e0:f0:a6:b4:
                    bf:00:81:56:8f:cb:ea:1e:26:a3:cf:ef:b0:dd:18:
                    8b:96:88:1c:18:e1:c2:77:fa:6d:86:8f:12:41:93:
                    a0:13:c7:12:9f:1e:70:f8:3c:d5:a7:49:f0:f0:f3:
                    aa:86:75:ba:e4:ef:47:4a:bd:10:ab:2b:b9:71:5e:
                    b3:e3:3c:75:47:7d:14:36:72:35:3f:c5:7d:1c:1a:
                    18:af:95:3b:03:95:d9:66:97:49:6d:a5:ac:ae:89:
                    8b:26:bb:44:fd:27:15:54:aa:42:c3:1a:fc:4d:9b:
                    2a:bb:c9:ec:ea:cb:d1:6d:f4:89:25:4a:d2:4c:29:
                    a5:3e:a8:b6:1d:ee:5d:19:5e:51:10:0b:2d:c6:dd:
                    91:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:29:90:14:3E:F4:18:AC:08:36:B5:93:AC:79:27:29:31:4D:9A:9C
            X509v3 Authority Key Identifier:
                keyid:59:D1:C2:E4:9F:90:76:1E:B3:02:F0:5A:99:18:71:CC:5B:1C:DB:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30193/WdHC5J-Qdh6zAvBamRhxzFsc2wc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WdHC5J-Qdh6zAvBamRhxzFsc2wc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30193/-CmQFD70GKwINrWTrHknKTFNmpw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:3b00::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:34:65:c4:f9:5f:2a:45:13:c2:57:63:84:55:f0:3f:cc:b1:
         ee:9c:21:86:f0:7c:14:b9:5f:bf:00:6c:c9:d3:b1:f7:98:31:
         c3:da:06:29:dc:ce:ae:d5:70:e0:73:7c:cf:92:6d:a3:7e:fa:
         fb:47:bd:4b:d1:94:eb:86:25:ce:f3:bf:93:41:7a:1e:07:1c:
         18:a7:0c:b2:84:08:22:72:32:39:32:7a:dd:e7:11:07:a6:35:
         07:e7:df:02:06:f5:35:20:f3:e5:c9:be:29:25:b6:86:a2:1d:
         63:be:6e:27:08:b4:e7:5b:5a:c2:93:92:c2:2e:f0:fa:cb:b7:
         ca:03:53:db:08:d4:3e:bc:b8:15:d4:16:7c:d6:af:36:19:22:
         8d:a8:fe:a6:e5:a9:a5:2c:d6:10:1d:7e:cf:5b:fc:33:21:1b:
         f1:bc:6e:84:2b:32:82:a8:5f:f6:01:a7:da:d9:b0:2a:00:bd:
         3c:39:2b:a3:b8:71:18:04:54:4e:a2:f9:3a:82:ef:c2:ed:41:
         5b:58:04:9f:5f:5c:f0:41:dd:ee:ab:ba:c8:e8:ed:83:d6:a4:
         de:e0:11:23:fe:c5:67:4a:ca:62:fb:ac:26:b7:07:1f:a2:75:
         79:38:c0:2c:5b:fc:d6:32:ee:f8:ee:cb:56:45:70:91:65:b4:
         23:61:c1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:00 2024 by rpki-client on console-ams.rpki-client.org