Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30228/VzKWEfNkErGlj1ylUoQNLT_ytGA.roa
File:                     VzKWEfNkErGlj1ylUoQNLT_ytGA.roa (raw, json)
Hash identifier:          wJ36e6Wgw1br48UuPjcsI+cxvhuhWsGyZNDX767dxYk=
Subject key identifier:   57:32:96:11:F3:64:12:B1:A5:8F:5C:A5:52:84:0D:2D:3F:F2:B4:60
Certificate issuer:       /CN=D10D886582BDDF48B041851C38C0B632115F5C21
Certificate serial:       53
Authority key identifier: D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/VzKWEfNkErGlj1ylUoQNLT_ytGA.roa
Signing time:             Thu 13 Apr 2023 09:52:45 +0000
ROA not before:           Thu 13 Apr 2023 09:52:45 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        2406:bb04::/30 maxlen: 30

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D10D886582BDDF48B041851C38C0B632115F5C21
        Validity
            Not Before: Apr 13 09:52:45 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=57329611F36412B1A58F5CA552840D2D3FF2B460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:36:fa:0b:aa:bc:ff:57:83:2f:d4:15:85:16:
                    aa:6d:ed:6f:7e:6a:ea:d8:34:75:d3:86:1d:99:d8:
                    b4:29:e4:93:9f:e9:7f:2b:61:ac:b5:49:f2:cd:dc:
                    63:d7:fb:28:10:3e:91:31:9b:f7:50:bf:4e:e4:96:
                    29:c3:6d:41:c1:fb:11:ae:76:10:b8:18:04:f3:a0:
                    f5:e7:ba:23:55:89:97:da:20:43:f5:37:37:5c:31:
                    66:e1:4f:af:63:92:2d:55:ae:f9:3c:6f:80:7d:40:
                    ba:fc:f6:38:28:7b:9f:38:1e:87:2a:de:59:0b:ef:
                    d0:5a:ac:0a:5e:f9:1d:a3:12:b5:fd:c4:e8:07:2d:
                    7c:e5:e2:17:c1:1d:9b:82:b9:6a:b4:33:a2:8f:1b:
                    7b:af:2c:47:ae:b2:ee:88:48:9e:41:7b:46:dd:db:
                    dd:25:63:23:16:30:c0:7a:bc:b2:b6:48:ac:b8:9d:
                    6a:f8:5c:c1:29:04:11:b7:02:7b:29:94:9a:1b:51:
                    c2:b5:dc:d9:35:8a:fc:ac:fd:a2:c9:49:cc:aa:44:
                    2f:5c:92:37:1a:9a:12:38:30:27:c5:c8:7f:d3:63:
                    88:09:ba:b6:ed:da:f1:b0:f0:f9:56:52:4a:87:f4:
                    37:5d:4a:8b:cc:57:55:47:2f:fc:2a:68:e2:27:e8:
                    e7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:32:96:11:F3:64:12:B1:A5:8F:5C:A5:52:84:0D:2D:3F:F2:B4:60
            X509v3 Authority Key Identifier:
                keyid:D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/VzKWEfNkErGlj1ylUoQNLT_ytGA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:bb04::/30

    Signature Algorithm: sha256WithRSAEncryption
         a5:9f:64:b9:03:f7:72:16:f1:fc:d6:b2:26:9e:c5:89:b5:b4:
         d8:f5:05:0b:f5:63:87:82:4c:2f:f8:bc:4e:9a:7f:0f:a0:8a:
         57:05:d2:85:72:c3:73:70:ea:83:98:e5:2c:a4:f5:bc:d9:3a:
         66:1e:0e:72:d8:65:96:8b:d6:80:d8:21:d0:db:e9:93:ab:62:
         b9:97:9e:f1:e2:16:a0:fe:33:e5:5a:1b:91:1f:ad:41:65:a5:
         95:82:9e:5c:bf:93:a1:e2:07:41:68:87:3b:38:2c:f0:cc:98:
         4f:78:cf:54:3e:c0:12:96:d0:7a:ca:dc:36:32:90:8f:63:5b:
         02:d3:18:76:3d:78:c9:e9:bb:86:e4:18:42:f2:18:00:96:1b:
         0c:94:e1:bb:84:b8:e8:d1:44:ec:0b:14:b1:95:69:25:54:7b:
         90:5d:88:5a:30:87:db:da:50:a8:f2:38:88:f2:d2:84:c1:bc:
         63:f7:cf:9e:23:7d:56:5f:6f:ed:10:2e:73:0e:10:ec:e0:a9:
         d9:49:98:3f:f1:72:40:57:9e:5a:f1:11:92:ae:59:d0:35:a8:
         a9:99:27:8a:2a:dd:8f:d0:98:5c:29:99:1f:b0:4f:6d:d1:c1:
         a7:e1:e9:3e:9e:20:2c:80:b5:0c:17:da:0c:98:f5:53:68:a6:
         0f:0c:ea:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org