Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30228/7OW2wrV_7dGXTuvh4xF3CC2yECI.roa
File:                     7OW2wrV_7dGXTuvh4xF3CC2yECI.roa (raw, json)
Hash identifier:          +dFACdDktci1vZkd0xlYllUTJVHJpmzd+dxCFFzrUbk=
Subject key identifier:   EC:E5:B6:C2:B5:7F:ED:D1:97:4E:EB:E1:E3:11:77:08:2D:B2:10:22
Certificate issuer:       /CN=D10D886582BDDF48B041851C38C0B632115F5C21
Certificate serial:       43
Authority key identifier: D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/7OW2wrV_7dGXTuvh4xF3CC2yECI.roa
Signing time:             Sun 01 May 2022 01:30:02 +0000
ROA not before:           Sun 01 May 2022 01:30:02 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        2406:bb00::/30 maxlen: 30

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D10D886582BDDF48B041851C38C0B632115F5C21
        Validity
            Not Before: May  1 01:30:02 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=ECE5B6C2B57FEDD1974EEBE1E31177082DB21022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b2:b9:e0:14:c4:17:0d:63:ca:41:0e:17:b7:
                    12:db:75:79:64:65:de:cb:81:1e:3c:0b:dd:a0:79:
                    99:d7:d7:82:e2:1a:47:2d:fb:2b:4f:be:94:df:eb:
                    2c:5d:89:40:37:31:0d:fe:48:52:5b:19:f6:18:96:
                    37:02:4b:71:46:4f:b3:0c:a3:ec:d8:d8:5a:bd:cd:
                    e2:fc:b7:29:00:9f:33:74:fc:8b:b0:b2:01:16:58:
                    7c:c9:9e:52:b4:90:dd:f0:0c:9e:2c:f1:76:e3:2e:
                    35:2f:bf:f6:d8:9e:bf:d9:47:8d:14:87:2a:34:7f:
                    0c:e0:0b:52:4e:f0:dc:c2:1d:60:f5:5b:93:b0:22:
                    43:5d:a2:51:e4:b9:1e:17:98:81:08:f6:67:c7:61:
                    92:d7:a9:d8:f6:74:a3:d8:9e:48:29:77:81:30:c5:
                    c7:d0:b9:bc:0d:68:b1:8a:75:aa:5f:18:65:fa:18:
                    ca:01:cb:26:a7:2c:ca:c1:5b:1c:56:c1:9e:5d:3b:
                    d1:ca:0f:16:aa:5c:42:d4:18:75:06:f3:04:ac:29:
                    b2:4b:9f:34:2d:0c:df:dd:55:33:74:ca:4b:79:f8:
                    3d:08:ba:da:7c:e1:bd:19:d8:a1:a7:c7:a8:85:36:
                    e1:ee:91:92:46:16:91:e9:11:ee:19:a7:39:e7:ce:
                    28:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E5:B6:C2:B5:7F:ED:D1:97:4E:EB:E1:E3:11:77:08:2D:B2:10:22
            X509v3 Authority Key Identifier:
                keyid:D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/7OW2wrV_7dGXTuvh4xF3CC2yECI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:bb00::/30

    Signature Algorithm: sha256WithRSAEncryption
         3d:9d:49:4f:41:dd:be:34:85:35:7f:68:91:07:c0:72:c8:60:
         9f:2f:89:f7:ac:c2:2d:2a:c5:cb:b1:6b:aa:dd:39:80:44:dd:
         1b:cd:57:d9:52:4f:0b:5b:f7:1b:2e:f2:54:5b:0b:6f:66:93:
         50:cd:97:d3:f0:da:f9:7f:90:15:f6:90:c4:c9:22:a1:fd:7f:
         b0:e3:98:6a:dd:7d:bc:4a:29:49:88:4d:a4:6b:ba:44:fa:0b:
         d0:c1:17:a3:22:84:be:44:c0:03:6e:17:cb:d5:4d:d3:b0:ad:
         73:97:d9:12:8e:35:3d:9e:2b:fe:0a:4e:1e:bd:6d:3e:b9:ef:
         14:01:37:11:82:c2:26:e6:7e:32:e8:13:49:bb:19:7e:69:bb:
         d8:ef:20:e3:42:15:74:c0:89:d5:72:ab:bb:be:0b:99:2c:03:
         fc:12:55:88:c4:dd:0a:db:d9:76:fa:6b:05:0d:59:79:75:3b:
         9c:ef:4e:07:1b:90:6e:04:18:54:92:da:c6:67:bb:0b:13:36:
         68:92:2f:92:0d:a1:72:82:d0:9e:25:03:64:6e:ee:62:a6:15:
         95:a8:92:ac:1e:cb:f4:b4:7a:b7:f8:97:cf:b1:ed:8b:8a:ea:
         a1:46:d8:ce:1e:ce:cb:76:f2:4e:3c:48:30:48:1a:ee:fc:16:
         ab:55:cb:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org