Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30228/VipjiUn2-K7XbP6uDnIeFS5ocpw.roa
File:                     VipjiUn2-K7XbP6uDnIeFS5ocpw.roa (raw, json)
Hash identifier:          vkBZAvIc1+cO7wlVe5q6VXcU8QwAb/pca+vmWPySAHI=
Subject key identifier:   56:2A:63:89:49:F6:F8:AE:D7:6C:FE:AE:0E:72:1E:15:2E:68:72:9C
Certificate issuer:       /CN=D10D886582BDDF48B041851C38C0B632115F5C21
Certificate serial:       40
Authority key identifier: D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/VipjiUn2-K7XbP6uDnIeFS5ocpw.roa
Signing time:             Sun 01 May 2022 01:30:00 +0000
ROA not before:           Sun 01 May 2022 01:30:00 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        2406:bb04::/30 maxlen: 30

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D10D886582BDDF48B041851C38C0B632115F5C21
        Validity
            Not Before: May  1 01:30:00 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=562A638949F6F8AED76CFEAE0E721E152E68729C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e5:84:53:7f:79:8a:a9:33:af:b6:65:a6:85:
                    b0:4b:f6:0b:d8:7d:6c:a4:b7:31:b5:8a:a7:bf:12:
                    24:95:79:d4:94:97:35:8c:53:d9:92:cb:c1:ec:16:
                    93:5d:0d:47:e0:79:31:a5:fc:26:dc:6a:21:fc:4c:
                    64:e6:11:2a:bf:f5:91:44:0c:22:84:cb:39:6d:3f:
                    09:c4:8a:f0:0d:c8:0c:9e:4d:77:bf:79:1a:ae:82:
                    44:16:85:48:7f:19:c0:39:31:66:2c:0d:1b:fe:01:
                    08:87:5f:0b:d3:46:8b:c3:a8:b6:b9:10:34:7a:37:
                    4d:ca:df:7d:b4:bc:26:81:cc:97:55:35:e5:8c:28:
                    4d:ed:d2:fd:af:48:0a:71:2a:3f:fa:9f:fb:72:f3:
                    35:45:ce:90:98:4c:fe:5a:20:3a:7c:d7:9a:cc:99:
                    48:de:a5:33:ca:cf:a1:46:04:64:a8:e4:76:95:7f:
                    fb:7d:4f:4e:5e:55:d7:f4:72:6a:78:ce:23:7f:f2:
                    48:fb:b2:bf:2d:a2:4c:66:df:b5:aa:e0:9a:28:bb:
                    b9:3d:91:4c:1a:66:96:5a:7e:01:56:75:f7:9b:f5:
                    68:c7:17:c4:3b:6b:6a:7c:45:85:78:fd:ec:16:65:
                    c3:ed:9c:ed:e9:3e:05:02:d7:f8:9e:5f:ed:62:5d:
                    52:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:2A:63:89:49:F6:F8:AE:D7:6C:FE:AE:0E:72:1E:15:2E:68:72:9C
            X509v3 Authority Key Identifier:
                keyid:D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/VipjiUn2-K7XbP6uDnIeFS5ocpw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:bb04::/30

    Signature Algorithm: sha256WithRSAEncryption
         7d:91:ff:e0:ed:6c:e2:70:07:6e:90:e0:12:7d:ad:c1:1d:dc:
         86:dc:32:65:00:5f:cc:0d:c0:f5:2d:33:b5:e6:5e:d3:75:51:
         b6:6b:ab:6e:f7:e7:05:c7:3c:13:a6:0c:ac:94:0e:50:82:68:
         fa:59:cd:1a:b9:f2:e2:93:f7:34:d3:b1:89:4b:e2:fc:47:6a:
         91:09:4f:e1:e1:70:73:55:0c:34:4a:27:af:7a:c0:89:6d:3e:
         f3:71:20:1f:7f:68:b0:00:fc:36:99:4d:97:b0:77:ea:5c:2f:
         d2:b6:d8:55:9b:26:56:8d:0d:65:53:98:aa:e5:56:cc:3c:fc:
         de:25:79:3f:7d:26:6d:87:63:25:95:fa:6d:a5:89:9b:3d:bb:
         06:ae:84:9f:7d:62:c9:90:c0:dc:48:6b:66:a3:6f:bc:08:37:
         24:27:55:5c:77:2a:d0:f1:ca:01:1a:9b:17:01:8e:55:8d:6d:
         e3:6f:f5:21:67:a7:1d:5d:39:be:1b:35:e4:be:75:7a:dd:08:
         82:67:0a:7c:d8:f7:e0:56:3b:7b:81:95:72:7e:0f:86:f2:72:
         c7:e1:c1:2a:3f:ef:47:59:fb:51:1a:0f:08:55:20:a9:76:c1:
         c2:ea:57:43:32:54:2c:00:95:1e:b9:8a:b4:0e:8e:63:63:09:
         5a:71:f2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:00 2024 by rpki-client on console-ams.rpki-client.org