Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30194/x8IUIsPiltuym9AQ5_XI8XzI4qw.roa
File:                     x8IUIsPiltuym9AQ5_XI8XzI4qw.roa (raw, json)
Hash identifier:          /+ar/+5Tt23KEUhJXZT5olZBVZ5v2taEJe2srYeLbR4=
Subject key identifier:   C7:C2:14:22:C3:E2:96:DB:B2:9B:D0:10:E7:F5:C8:F1:7C:C8:E2:AC
Certificate issuer:       /CN=88AC5827EA5086C58535538005B12A51FCD1F0F0
Certificate serial:       2A
Authority key identifier: 88:AC:58:27:EA:50:86:C5:85:35:53:80:05:B1:2A:51:FC:D1:F0:F0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iKxYJ-pQhsWFNVOABbEqUfzR8PA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30194/x8IUIsPiltuym9AQ5_XI8XzI4qw.roa
Signing time:             Sun 01 May 2022 01:30:44 +0000
ROA not before:           Sun 01 May 2022 01:30:44 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     45680
IP address blocks:        2401:5300::/32 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88AC5827EA5086C58535538005B12A51FCD1F0F0
        Validity
            Not Before: May  1 01:30:44 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=C7C21422C3E296DBB29BD010E7F5C8F17CC8E2AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1f:c8:a0:1a:61:5f:36:c9:ea:8f:52:b4:0d:
                    1f:3f:dd:de:ea:5d:19:d8:a9:f9:30:88:ef:80:f7:
                    c5:4d:32:75:b9:2e:a4:b3:ba:e5:82:4a:8d:57:52:
                    5b:db:d5:f1:64:d6:5e:10:3e:66:35:a3:0e:b4:02:
                    79:37:05:fd:60:78:3b:7a:0a:80:04:c9:26:68:aa:
                    d0:77:02:dd:9c:d3:89:56:59:e3:3f:8c:59:a4:10:
                    09:1e:8e:f7:bf:e5:3b:18:ff:e5:44:3f:79:a3:c2:
                    5e:36:b7:82:fb:0d:c3:48:c1:1e:9d:a9:b3:7d:f3:
                    9f:f0:f1:e2:64:5e:a4:aa:c2:0e:21:6d:e1:c0:7a:
                    42:ea:3a:3a:d9:e9:02:41:da:80:57:e7:24:d6:00:
                    ff:33:78:a1:e3:75:0d:fe:05:dd:50:13:7d:08:a3:
                    30:ea:69:41:ae:32:b1:b4:52:c3:0e:59:b5:db:ad:
                    1d:f6:66:da:94:01:56:d4:09:79:d1:04:6c:f9:16:
                    70:70:7b:1b:a8:29:28:9c:5b:5b:09:1d:f6:0d:e7:
                    b9:f1:38:b7:8c:67:78:91:c6:b9:92:22:82:49:ee:
                    ea:06:6d:63:80:9e:76:01:92:9d:4f:82:53:98:50:
                    61:fa:63:f7:63:98:72:9e:f9:57:fe:7f:01:5e:be:
                    1d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C2:14:22:C3:E2:96:DB:B2:9B:D0:10:E7:F5:C8:F1:7C:C8:E2:AC
            X509v3 Authority Key Identifier:
                keyid:88:AC:58:27:EA:50:86:C5:85:35:53:80:05:B1:2A:51:FC:D1:F0:F0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30194/iKxYJ-pQhsWFNVOABbEqUfzR8PA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iKxYJ-pQhsWFNVOABbEqUfzR8PA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30194/x8IUIsPiltuym9AQ5_XI8XzI4qw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:5300::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:43:34:11:24:3e:6f:58:79:f5:93:30:1d:b6:1f:33:5a:ec:
         32:4c:d5:34:a1:40:e8:64:e5:9d:77:70:3c:fd:96:8c:03:4f:
         e8:45:6e:a7:28:e2:a7:b9:d8:9a:af:d7:7d:3f:54:ba:43:2f:
         8c:40:08:f1:b1:95:b2:35:e6:bb:08:3b:43:16:81:27:6e:d1:
         ed:49:7a:98:16:8d:71:b5:83:9f:b5:24:19:e8:31:8d:ca:b8:
         ca:5a:9c:c7:e2:a6:52:bc:48:16:6f:60:f3:c4:db:5d:08:94:
         d4:96:58:66:bd:ac:53:0f:15:d5:29:73:0e:83:9d:4e:d2:7f:
         20:49:dc:1b:49:6c:5e:da:f9:91:c0:7b:4e:81:26:da:c4:67:
         7a:96:48:35:e6:37:be:b1:d6:bd:64:b3:0d:b3:49:a9:f7:65:
         13:cf:2e:1b:73:da:6d:52:ab:01:de:4e:e0:1f:af:ab:ab:85:
         62:55:48:1c:1a:9c:15:02:bb:54:06:a9:84:10:73:74:cb:46:
         76:b2:9f:d6:51:0e:e0:ca:dd:78:53:e0:2b:b6:0c:55:34:21:
         b0:8c:47:77:21:69:a2:d7:d9:80:53:65:a1:31:8e:fd:4a:05:
         80:f1:23:e2:91:b2:8c:03:e7:4e:b1:a1:03:e7:f7:19:7c:cf:
         6a:ee:bb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org