Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30208/If8IoBpwZbeaWT637z0Fw6kY-qM.roa
File:                     If8IoBpwZbeaWT637z0Fw6kY-qM.roa (raw, json)
Hash identifier:          3NLiAp+ppqlHXvnQ3XOrdfGUpdqRUlNLS1inGmTzwqY=
Subject key identifier:   21:FF:08:A0:1A:70:65:B7:9A:59:3E:B7:EF:3D:05:C3:A9:18:FA:A3
Certificate issuer:       /CN=DFF122974C1A7D89D168BBB5345BFF1BBF341626
Certificate serial:       1F
Authority key identifier: DF:F1:22:97:4C:1A:7D:89:D1:68:BB:B5:34:5B:FF:1B:BF:34:16:26
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3_Eil0wafYnRaLu1NFv_G780FiY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30208/If8IoBpwZbeaWT637z0Fw6kY-qM.roa
Signing time:             Sat 01 Oct 2022 01:29:46 +0000
ROA not before:           Sat 01 Oct 2022 01:29:46 +0000
ROA not after:            Fri 15 Sep 2023 01:30:03 +0000
asID:                     38651
IP address blocks:        2401:f100::/32 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFF122974C1A7D89D168BBB5345BFF1BBF341626
        Validity
            Not Before: Oct  1 01:29:46 2022 GMT
            Not After : Sep 15 01:30:03 2023 GMT
        Subject: CN=21FF08A01A7065B79A593EB7EF3D05C3A918FAA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:57:88:0e:a4:2b:f2:5d:e0:72:d5:c7:d6:17:
                    75:88:7e:f3:3c:a5:ed:da:58:ce:36:81:7a:ec:e7:
                    cb:28:32:fb:41:90:19:af:01:e4:15:1d:f6:5b:d4:
                    f4:12:f1:7e:00:d2:45:1d:e2:60:b4:b3:3d:a8:66:
                    b1:7d:57:74:1b:34:6c:e1:aa:91:69:5b:69:87:b5:
                    f0:36:dd:19:7d:96:f5:c6:c4:5c:c2:3b:29:d3:87:
                    8a:a7:e5:c3:69:58:27:be:77:1c:f0:cb:03:84:45:
                    d6:1b:ff:f6:f9:e7:d0:a3:7e:2b:33:f7:c1:66:de:
                    e7:78:f4:04:c7:08:11:95:3e:a6:37:a0:75:c4:ee:
                    5f:75:42:dd:aa:c1:4e:74:5a:2d:57:f4:fe:ac:68:
                    52:d8:11:8d:0e:54:b9:66:b1:b4:42:54:1e:43:42:
                    96:84:9c:44:f4:5f:f1:99:68:ad:15:4c:7b:d7:5f:
                    0c:e2:d6:c9:46:17:49:4b:31:74:93:f1:79:41:94:
                    fd:3b:8e:37:ad:88:32:41:be:88:c9:0f:68:93:20:
                    6f:c4:6e:5d:a8:05:b7:d2:0f:71:4f:f8:a0:c3:38:
                    e9:fb:9d:52:56:44:c0:93:21:0a:15:df:38:bd:53:
                    39:24:ed:a3:0c:d1:65:46:aa:ae:43:f9:71:82:b9:
                    fc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:FF:08:A0:1A:70:65:B7:9A:59:3E:B7:EF:3D:05:C3:A9:18:FA:A3
            X509v3 Authority Key Identifier:
                keyid:DF:F1:22:97:4C:1A:7D:89:D1:68:BB:B5:34:5B:FF:1B:BF:34:16:26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30208/3_Eil0wafYnRaLu1NFv_G780FiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3_Eil0wafYnRaLu1NFv_G780FiY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30208/If8IoBpwZbeaWT637z0Fw6kY-qM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:f100::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:26:5d:2e:f4:e0:87:8d:b9:e7:e7:11:6f:3f:73:5e:7d:67:
         77:a8:cb:a9:65:cd:6d:6e:36:da:01:5a:e8:e4:32:e4:7b:63:
         78:f2:ce:c7:36:25:4b:5c:99:14:bb:95:2e:5a:37:5e:8c:e6:
         b2:9d:3e:44:bd:5a:59:f2:4c:4f:64:88:4d:42:ec:08:34:ba:
         19:0e:ad:18:3b:3d:ad:28:7d:29:b5:92:c2:8d:60:dc:54:d0:
         25:2a:71:da:fa:da:06:6e:0d:3b:a1:6b:a6:00:7d:d7:0b:9f:
         1c:de:c5:f8:9d:2a:89:c6:e2:50:9e:a5:da:8d:37:57:41:56:
         ea:7f:cd:5f:6d:c1:79:35:58:80:5e:4a:35:f3:05:a1:a0:6c:
         cf:d3:33:23:b5:2c:c9:a6:ab:f6:b6:6e:e4:b9:f8:25:a0:8f:
         54:ed:85:32:55:d1:a1:4f:bf:c9:f4:94:2d:8f:25:96:d7:f5:
         38:81:bb:7c:6a:e0:99:f9:dd:16:c5:cb:ab:49:48:a5:f2:57:
         f1:4f:47:97:bb:1b:00:66:8e:86:a4:78:21:dd:9d:b9:08:e1:
         50:6a:de:83:99:45:55:02:a0:4b:01:92:48:25:55:0a:12:b5:
         4c:18:3f:5d:1b:5f:94:76:49:0b:11:e7:74:2b:b9:f6:a1:a9:
         10:4e:e9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org