Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30228/DUdk6e0v0N_pkdErR7M49U62OUc.roa
File:                     DUdk6e0v0N_pkdErR7M49U62OUc.roa (raw, json)
Hash identifier:          DR5nIZbgRRCiLo3Hf8aBms6Q4fd14L5AZwb9Hoq1Dy4=
Subject key identifier:   0D:47:64:E9:ED:2F:D0:DF:E9:91:D1:2B:47:B3:38:F5:4E:B6:39:47
Certificate issuer:       /CN=D10D886582BDDF48B041851C38C0B632115F5C21
Certificate serial:       42
Authority key identifier: D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/DUdk6e0v0N_pkdErR7M49U62OUc.roa
Signing time:             Sun 01 May 2022 01:30:01 +0000
ROA not before:           Sun 01 May 2022 01:30:01 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        2403:7800::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D10D886582BDDF48B041851C38C0B632115F5C21
        Validity
            Not Before: May  1 01:30:01 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=0D4764E9ED2FD0DFE991D12B47B338F54EB63947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a7:7c:8f:46:6e:28:b2:00:e2:a0:c7:21:1d:
                    ea:f2:a5:66:f9:4e:e4:e5:7a:a3:5f:03:3d:27:7d:
                    26:dd:88:cb:fe:96:fc:16:21:50:6d:42:05:37:cc:
                    e0:d1:02:5e:fb:c6:d4:8e:e1:2c:42:49:cc:5d:ba:
                    8a:de:ba:63:37:32:7d:79:d1:3d:09:44:42:42:46:
                    af:ae:9e:02:37:b1:79:5c:cf:26:18:ac:e4:1c:f3:
                    46:a1:f2:7d:bf:d6:9f:fa:93:2a:70:7b:ee:44:c4:
                    57:c8:6f:82:3c:42:f4:cb:e6:52:d7:bf:d3:73:76:
                    96:98:71:5c:a7:29:d5:c6:9d:4d:2c:f8:f0:cb:65:
                    44:41:d3:e9:c0:32:73:7b:82:ff:4f:d5:52:57:0a:
                    cf:07:12:fb:ad:ad:2f:45:12:7d:b2:24:26:98:48:
                    90:2a:cd:06:e4:7c:2e:88:17:e7:98:73:85:f8:19:
                    48:6a:b0:4c:a6:6e:8e:d8:16:ea:49:29:70:be:e2:
                    51:1c:eb:47:a8:57:3e:79:12:aa:e0:a5:99:1d:e8:
                    e1:68:f4:ea:ac:f3:01:a0:27:01:76:51:f9:d2:e2:
                    17:25:62:12:c4:99:fd:65:e1:c2:a7:38:1c:f3:4f:
                    96:51:1f:8c:98:e3:93:13:15:86:b5:1c:bf:e8:b8:
                    e5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:47:64:E9:ED:2F:D0:DF:E9:91:D1:2B:47:B3:38:F5:4E:B6:39:47
            X509v3 Authority Key Identifier:
                keyid:D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/DUdk6e0v0N_pkdErR7M49U62OUc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:7800::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:c0:83:26:19:8e:2d:30:92:3b:fe:c5:c3:46:b2:a7:70:2d:
         30:6f:b0:cf:42:4f:14:eb:87:16:ca:92:a0:68:fa:a7:32:ba:
         93:c0:c5:9e:8f:04:bc:42:81:2e:04:c4:6d:f1:4f:ec:8c:c5:
         2f:aa:66:bc:26:be:c5:b8:f1:a6:7e:9e:b3:e8:fb:23:bf:19:
         d4:9c:ee:2f:eb:cc:ff:06:ba:e0:85:a8:bf:a0:d5:9b:a1:9b:
         cf:d4:0b:7f:fd:b4:53:33:a4:9d:b9:e5:ca:75:24:40:1d:15:
         89:e2:08:d3:81:c3:35:db:55:20:8d:c2:13:24:1d:06:f3:70:
         a9:af:93:d5:70:56:0b:eb:d5:6e:46:74:98:9b:28:b2:c6:db:
         33:50:7e:71:b4:f6:89:93:6f:8a:b9:16:be:8b:8b:86:09:39:
         eb:8d:f5:49:6d:0d:41:2c:5b:73:80:1c:60:7a:84:c3:ac:dc:
         26:e3:3b:86:38:9d:59:a3:4e:4d:7a:95:f2:78:cd:e1:2c:97:
         73:3d:2f:8a:54:8d:4a:25:42:9c:c0:60:f4:1a:eb:30:c9:1a:
         e4:5a:37:79:4d:ff:93:f6:a0:cc:cd:1f:c5:9a:aa:38:66:66:
         79:27:33:c8:ce:55:02:25:0f:39:9d:70:9e:e7:d2:69:45:6c:
         4f:37:15:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:08 2023 by rpki-client on console-fra.rpki-client.org