Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30228/2DPhzSnmJqv1ckFEk4ryGxiBs20.roa
File:                     2DPhzSnmJqv1ckFEk4ryGxiBs20.roa (raw, json)
Hash identifier:          /x0dEz5662LabJK8U3RmT5TJ0UBGOrYqAB1YQYXbUtk=
Subject key identifier:   D8:33:E1:CD:29:E6:26:AB:F5:72:41:44:93:8A:F2:1B:18:81:B3:6D
Certificate issuer:       /CN=D10D886582BDDF48B041851C38C0B632115F5C21
Certificate serial:       59
Authority key identifier: D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/2DPhzSnmJqv1ckFEk4ryGxiBs20.roa
Signing time:             Mon 01 May 2023 01:31:13 +0000
ROA not before:           Mon 01 May 2023 01:31:13 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        2406:bb04::/30 maxlen: 56

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D10D886582BDDF48B041851C38C0B632115F5C21
        Validity
            Not Before: May  1 01:31:13 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=D833E1CD29E626ABF5724144938AF21B1881B36D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:49:eb:11:c3:fa:06:44:5c:48:e5:8f:5a:48:
                    32:ff:ad:cd:86:95:cc:63:69:3b:43:64:be:69:0f:
                    9a:13:87:26:0b:36:9e:19:e8:05:34:c6:f5:e3:1e:
                    0d:e8:f4:17:c8:33:c1:de:cd:c4:cc:76:a4:20:e1:
                    6f:71:51:a8:fd:07:50:11:81:c6:ba:8b:7c:65:34:
                    b0:45:b5:44:fd:2d:79:58:91:9c:e1:74:1a:8b:20:
                    e6:1b:c6:bd:dc:3a:c0:5e:2f:db:99:db:da:76:b0:
                    21:fe:f7:d6:42:db:0a:7a:16:01:9f:5d:82:43:e6:
                    7b:e4:3c:39:a3:c2:d8:3a:01:ac:27:ea:bc:49:a2:
                    ac:91:bf:ae:e3:55:22:ac:68:cd:19:e1:ea:de:0b:
                    ac:82:84:e1:4e:29:fe:79:87:3e:12:c5:a4:ce:37:
                    64:0b:e7:c7:1d:b1:f0:a4:da:29:77:36:2b:42:43:
                    49:a6:da:fd:33:08:37:59:39:ce:87:29:99:90:80:
                    b4:35:ee:3e:57:08:df:47:01:0d:0a:fb:1b:d0:dc:
                    7e:ea:11:47:c5:07:b1:c1:5a:3e:e2:e8:8e:d6:a1:
                    14:9f:e3:95:a7:fa:48:62:4b:4a:c8:70:15:70:f3:
                    d2:c5:c0:bb:a6:34:7d:1b:65:ac:6f:13:9d:cc:c9:
                    3f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:33:E1:CD:29:E6:26:AB:F5:72:41:44:93:8A:F2:1B:18:81:B3:6D
            X509v3 Authority Key Identifier:
                keyid:D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/2DPhzSnmJqv1ckFEk4ryGxiBs20.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:bb04::/30

    Signature Algorithm: sha256WithRSAEncryption
         0b:5a:e8:f6:56:ef:05:f8:21:04:1b:c1:d1:b3:dd:89:fb:2a:
         02:cf:b4:f1:19:61:58:8a:4b:2e:d2:26:31:b5:cd:67:42:f7:
         98:51:09:cc:00:f0:69:65:6c:e5:0d:3a:1d:f8:f1:db:24:2c:
         00:5e:d7:1f:68:1a:9d:e7:80:00:b2:46:2d:de:61:3e:7c:11:
         67:0a:c0:77:06:29:52:94:ce:96:40:b6:08:ac:50:ec:09:57:
         1b:89:a8:d7:8c:af:5b:39:4d:4e:4d:04:20:dd:d2:91:82:41:
         1d:3f:48:2d:70:ce:17:9c:4d:68:c1:31:d5:ec:23:cf:b7:c2:
         d4:6a:30:f7:f7:b2:2a:62:04:7c:3e:46:93:46:43:0d:c1:c1:
         67:a8:5a:9e:47:df:b0:fb:e4:02:3d:24:5a:5b:94:e4:72:42:
         13:76:9f:e1:b3:85:13:9c:81:0d:25:38:56:e9:e5:e0:6d:2c:
         e2:59:79:c2:00:1a:ac:d4:a7:56:0e:2e:e6:1d:99:c7:0c:3e:
         0d:e3:93:51:57:32:97:4c:58:c7:ed:e7:68:d9:ce:0a:5c:fd:
         7b:7b:e4:20:59:22:85:cb:84:0a:ca:75:2a:f1:e2:5a:e4:c2:
         b3:91:2d:d5:c6:11:02:82:71:0d:70:65:3b:0e:a5:58:58:f6:
         92:99:8d:d5
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBWTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMTBE
ODg2NTgyQkRERjQ4QjA0MTg1MUMzOEMwQjYzMjExNUY1QzIxMB4XDTIzMDUwMTAx
MzExM1oXDTI0MDQxNDAxMzAwMlowMzExMC8GA1UEAxMoRDgzM0UxQ0QyOUU2MjZB
QkY1NzI0MTQ0OTM4QUYyMUIxODgxQjM2RDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALtJ6xHD+gZEXEjlj1pIMv+tzYaVzGNpO0NkvmkPmhOHJgs2nhno
BTTG9eMeDej0F8gzwd7NxMx2pCDhb3FRqP0HUBGBxrqLfGU0sEW1RP0teViRnOF0
Gosg5hvGvdw6wF4v25nb2nawIf731kLbCnoWAZ9dgkPme+Q8OaPC2DoBrCfqvEmi
rJG/ruNVIqxozRnh6t4LrIKE4U4p/nmHPhLFpM43ZAvnxx2x8KTaKXc2K0JDSaba
/TMIN1k5zocpmZCAtDXuPlcI30cBDQr7G9DcfuoRR8UHscFaPuLojtahFJ/jlaf6
SGJLSshwFXDz0sXAu6Y0fRtlrG8TnczJP4cCAwEAAaOCAikwggIlMB0GA1UdDgQW
BBTYM+HNKeYmq/VyQUSTivIbGIGzbTAfBgNVHSMEGDAWgBTRDYhlgr3fSLBBhRw4
wLYyEV9cITAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAyMjgvMFEySVpZSzkzMGl3UVlVY09NQzJNaEZmWENFLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMFEySVpZSzkzMGl3UVlVY09NQzJN
aEZmWENFLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMjI4LzJEUGh6U25tSnF2MWNrRkVrNHJ5R3hpQnMyMC5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQIkBrsEMA0GCSqGSIb3DQEBCwUAA4IBAQALWuj2Vu8F+CEEG8HRs92J
+yoCz7TxGWFYiksu0iYxtc1nQveYUQnMAPBpZWzlDTod+PHbJCwAXtcfaBqd54AA
skYt3mE+fBFnCsB3BilSlM6WQLYIrFDsCVcbiajXjK9bOU1OTQQg3dKRgkEdP0gt
cM4XnE1owTHV7CPPt8LUajD397IqYgR8PkaTRkMNwcFnqFqeR9+w++QCPSRaW5Tk
ckITdp/hs4UTnIENJThW6eXgbSziWXnCABqs1KdWDi7mHZnHDD4N45NRVzKXTFjH
7edo2c4KXP17e+QgWSKFy4QKynUq8eJa5MKzkS3VxhECgnENcGU7DqVYWPaSmY3V
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org