Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30215/Vy7bbJuTySf5lbYEhKNoMn7WXGA.roa
File:                     Vy7bbJuTySf5lbYEhKNoMn7WXGA.roa (raw, json)
Hash identifier:          umHRfLgKWq0FzzG2W9+99jM6kXCH+uglc9DnPSW6Io8=
Subject key identifier:   57:2E:DB:6C:9B:93:C9:27:F9:95:B6:04:84:A3:68:32:7E:D6:5C:60
Certificate issuer:       /CN=0F00A86B7BCBFEF8A45DE832A6F2CD797299E0DF
Certificate serial:       39
Authority key identifier: 0F:00:A8:6B:7B:CB:FE:F8:A4:5D:E8:32:A6:F2:CD:79:72:99:E0:DF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DwCoa3vL_vikXegypvLNeXKZ4N8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30215/Vy7bbJuTySf5lbYEhKNoMn7WXGA.roa
Signing time:             Thu 13 Apr 2023 09:53:31 +0000
ROA not before:           Thu 13 Apr 2023 09:53:31 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     18126
IP address blocks:        2402:6b00::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F00A86B7BCBFEF8A45DE832A6F2CD797299E0DF
        Validity
            Not Before: Apr 13 09:53:31 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=572EDB6C9B93C927F995B60484A368327ED65C60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:06:4f:ac:be:19:57:3e:90:76:77:d0:c5:f9:
                    38:ea:5d:34:6e:fb:f6:d4:a7:7e:44:01:81:63:21:
                    6e:78:56:85:ac:60:e5:78:25:12:f7:d2:da:02:7d:
                    ab:9d:3c:17:58:03:e7:c5:5d:bf:ca:0d:c2:51:a7:
                    f0:a4:04:8a:cb:9d:b0:42:7a:df:ed:f0:94:e9:57:
                    f3:53:1b:2d:4d:d8:bc:79:cf:cd:eb:3e:d6:90:d3:
                    85:48:c2:ce:7b:af:4e:eb:be:a7:ed:2c:98:db:f5:
                    ce:6a:39:18:1e:ac:a4:9a:f6:f1:7d:84:5a:39:96:
                    a6:0c:44:29:b3:ce:61:25:9b:23:a4:e2:d7:fd:ae:
                    b1:50:29:68:c2:1c:21:b9:fa:92:fb:4c:94:b8:86:
                    f7:d5:b8:92:39:0e:98:50:4d:ad:6f:0b:b7:cf:eb:
                    9d:95:18:80:52:75:0c:a7:5c:0f:ee:98:3f:45:87:
                    33:f7:d1:aa:54:8f:11:cc:24:c5:bf:d2:8b:ac:1f:
                    5a:c9:11:27:0f:55:c7:65:d5:3b:29:1c:cd:b9:1e:
                    ae:6d:05:30:0c:ac:07:95:ac:3b:1b:d7:28:44:c2:
                    71:b4:95:ac:64:12:7a:4c:7e:39:57:b3:36:6b:8f:
                    43:aa:bc:4a:68:1d:54:51:80:50:28:e8:a1:97:b6:
                    f9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:2E:DB:6C:9B:93:C9:27:F9:95:B6:04:84:A3:68:32:7E:D6:5C:60
            X509v3 Authority Key Identifier:
                keyid:0F:00:A8:6B:7B:CB:FE:F8:A4:5D:E8:32:A6:F2:CD:79:72:99:E0:DF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30215/DwCoa3vL_vikXegypvLNeXKZ4N8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DwCoa3vL_vikXegypvLNeXKZ4N8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30215/Vy7bbJuTySf5lbYEhKNoMn7WXGA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:6b00::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:ba:bf:e4:72:9b:f2:f9:4a:e5:1e:59:1e:b1:6a:6e:d3:1f:
         8e:12:91:c0:9a:f6:1d:94:02:a1:42:71:af:1d:8a:fb:00:c5:
         cc:69:3c:93:71:28:ff:06:5e:11:08:5e:95:28:22:0e:62:40:
         4b:e8:23:9a:cc:90:3f:5b:dc:3e:cb:7f:12:9f:35:da:00:a6:
         88:be:1e:39:44:08:02:7b:4b:5e:8b:c4:4b:2c:c8:3b:41:39:
         10:e2:55:3e:4c:fe:2b:ce:51:36:ac:3b:49:ad:43:e4:f9:af:
         0a:78:7a:c2:28:50:ae:e6:24:35:73:0b:46:e1:7b:77:36:ae:
         9b:77:0b:c1:71:01:cd:ec:2c:a0:6f:cd:62:f6:11:f4:dd:4d:
         f8:a9:99:8f:50:af:cb:2f:31:bf:03:71:b0:c3:cd:ad:91:b3:
         0d:6e:65:54:fc:a3:48:18:02:e9:db:d6:56:7f:9e:7f:0b:dc:
         c2:ab:d6:56:47:c4:2d:a4:44:b9:4d:4e:b4:f8:34:05:b7:5e:
         9e:2d:85:e6:86:01:fa:f5:c4:b0:17:60:e8:ac:27:1e:64:f9:
         c0:ff:b9:56:5a:4b:b2:7b:76:c6:88:f7:04:37:56:d5:c4:33:
         0e:27:9a:95:c5:a0:e4:95:88:d3:cc:01:8a:ee:20:6d:0f:dc:
         cd:52:ab:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:00 2024 by rpki-client on console-ams.rpki-client.org