Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30215/QQ9BTutPmzfG3cp5_shKVBLDh-A.roa
File:                     QQ9BTutPmzfG3cp5_shKVBLDh-A.roa (raw, json)
Hash identifier:          WDGGIqLzVxzDpcGsq//Du+tAvwlqSshVH2aEQDcpkCk=
Subject key identifier:   41:0F:41:4E:EB:4F:9B:37:C6:DD:CA:79:FE:C8:4A:54:12:C3:87:E0
Certificate issuer:       /CN=0F00A86B7BCBFEF8A45DE832A6F2CD797299E0DF
Certificate serial:       2C
Authority key identifier: 0F:00:A8:6B:7B:CB:FE:F8:A4:5D:E8:32:A6:F2:CD:79:72:99:E0:DF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DwCoa3vL_vikXegypvLNeXKZ4N8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30215/QQ9BTutPmzfG3cp5_shKVBLDh-A.roa
Signing time:             Sun 01 May 2022 01:30:41 +0000
ROA not before:           Sun 01 May 2022 01:30:41 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     18126
IP address blocks:        2402:6b00::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F00A86B7BCBFEF8A45DE832A6F2CD797299E0DF
        Validity
            Not Before: May  1 01:30:41 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=410F414EEB4F9B37C6DDCA79FEC84A5412C387E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:ba:32:8a:d8:31:c4:9a:f5:ce:b8:15:b2:c0:
                    c1:5a:02:ac:ac:44:04:90:9f:c4:15:12:03:45:06:
                    d9:9f:fb:3d:a2:66:35:5c:75:69:48:8e:dc:b7:59:
                    93:41:26:70:09:ed:96:de:4c:f5:46:2f:4f:80:e7:
                    55:25:85:02:1d:a6:6d:50:e6:77:b6:03:9b:f4:05:
                    3b:af:0e:81:01:19:d9:4a:5c:c9:69:a9:c6:a4:37:
                    45:fb:ce:8c:c9:4c:0f:04:28:7a:a7:f7:82:96:0f:
                    03:48:9f:e3:cb:d9:f1:43:4e:45:9e:7a:11:86:ed:
                    6b:7c:ae:08:41:c3:66:12:3a:70:33:2b:93:28:1d:
                    83:d1:76:30:a5:c3:82:ea:c0:b0:b0:0a:51:f0:79:
                    97:82:9d:2c:71:a6:08:76:49:cb:10:0e:84:d3:5a:
                    c8:a0:23:5f:50:dc:cd:72:87:f6:b5:cf:21:43:08:
                    e2:f7:c0:21:10:f0:c8:d4:71:00:51:cc:77:8a:fc:
                    d7:4e:76:10:f6:05:90:ec:80:a9:15:2f:46:65:af:
                    45:22:d4:44:33:21:26:05:ea:f8:bf:dc:8b:58:c8:
                    fd:b1:07:b7:74:4a:83:af:90:04:0f:e3:73:94:53:
                    b2:b7:ec:2a:24:a7:50:1b:91:69:b1:92:b2:70:bf:
                    c6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:0F:41:4E:EB:4F:9B:37:C6:DD:CA:79:FE:C8:4A:54:12:C3:87:E0
            X509v3 Authority Key Identifier:
                keyid:0F:00:A8:6B:7B:CB:FE:F8:A4:5D:E8:32:A6:F2:CD:79:72:99:E0:DF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30215/DwCoa3vL_vikXegypvLNeXKZ4N8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DwCoa3vL_vikXegypvLNeXKZ4N8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30215/QQ9BTutPmzfG3cp5_shKVBLDh-A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:6b00::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:63:9c:36:85:7c:e0:3f:e7:06:52:17:e3:2b:4b:d3:7d:96:
         7b:e1:2c:67:2d:09:f7:d4:5f:62:59:d0:20:dd:ab:3c:05:18:
         3b:81:a8:37:c4:67:eb:fd:16:2f:7b:76:b8:e6:d5:48:9e:5e:
         6c:bf:df:c9:7a:2d:1e:01:74:4c:35:cd:ae:27:af:d1:67:66:
         0a:7c:87:6b:cb:e6:1d:34:7d:3a:c0:08:0d:3f:fe:ae:d9:1a:
         76:f0:fa:82:d0:5c:b4:33:e1:7f:3f:ac:0a:e3:f2:20:32:7d:
         f6:a6:c8:db:19:e6:4e:8d:09:bd:b8:3d:ab:40:5f:21:dc:34:
         f7:47:e3:f6:e2:bc:8d:5c:c7:5c:13:a1:2a:ce:3d:97:a5:d2:
         a4:d3:d7:49:86:01:dc:b1:1f:62:52:4e:6e:48:b2:48:7d:65:
         98:ef:d3:09:64:84:56:68:42:92:55:9a:40:62:1c:2b:50:63:
         40:c4:b6:ac:2a:04:9b:6b:e9:bf:ad:f7:f4:7a:7b:5c:56:3c:
         33:3f:0b:f0:d7:e2:04:ed:f5:ca:e4:30:4c:1f:cc:d9:60:c0:
         07:a2:f9:c0:d2:c1:5c:54:48:4d:4b:fc:22:67:b3:8d:58:55:
         3d:53:9d:d6:c4:e2:3b:08:54:b1:96:06:aa:a3:9a:d5:42:1c:
         40:e6:e5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:00 2024 by rpki-client on console-ams.rpki-client.org