Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30228/ezM0gJAqrM5O4X-nCJNzOQvXMAg.roa
File:                     ezM0gJAqrM5O4X-nCJNzOQvXMAg.roa (raw, json)
Hash identifier:          b5SlGw2eb1T+t/tAnJqYHKPWLeS8Usg5dl/HHPgkFKw=
Subject key identifier:   7B:33:34:80:90:2A:AC:CE:4E:E1:7F:A7:08:93:73:39:0B:D7:30:08
Certificate issuer:       /CN=D10D886582BDDF48B041851C38C0B632115F5C21
Certificate serial:       30
Authority key identifier: D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/ezM0gJAqrM5O4X-nCJNzOQvXMAg.roa
Signing time:             Tue 25 May 2021 02:42:09 +0000
ROA not before:           Tue 25 May 2021 02:42:09 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        2406:bb00::/30 maxlen: 30

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D10D886582BDDF48B041851C38C0B632115F5C21
        Validity
            Not Before: May 25 02:42:09 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=7B333480902AACCE4EE17FA7089373390BD73008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ab:ec:03:36:58:81:ef:9c:5b:31:80:a9:e2:
                    97:ae:cd:82:be:7d:3b:1b:8f:04:28:1a:0c:d1:dd:
                    2a:13:77:06:ee:5a:6a:ff:46:17:f3:7f:ba:98:5c:
                    0c:82:77:d6:da:cb:d4:75:88:ae:c9:31:b5:e6:b1:
                    24:ff:a5:db:f9:91:51:3d:e8:9f:bb:25:73:d3:1a:
                    6d:28:5c:57:9c:a3:f5:39:78:39:0c:ac:47:37:a2:
                    6c:84:75:8f:0b:6e:36:e3:2b:d8:f7:49:38:f1:82:
                    3c:1f:3a:fb:d1:a0:0e:ee:2f:54:14:18:cb:ad:be:
                    d9:a0:0a:b1:a5:27:e1:a6:0d:26:bc:16:bb:b7:35:
                    c8:30:42:0a:d8:79:91:bd:41:77:2c:30:fc:a7:c4:
                    69:8b:4f:93:89:16:42:08:81:85:f4:78:a0:70:b5:
                    9d:f7:ee:7c:52:d3:ca:cd:97:63:16:63:89:d5:3b:
                    8a:be:aa:09:1f:7b:56:64:37:0b:96:e8:8a:40:b4:
                    b1:2f:4d:77:7b:6a:da:ac:d0:59:92:3f:5c:0e:ea:
                    34:50:d2:82:5b:4b:11:98:9d:4b:7f:27:3e:12:97:
                    a3:5e:fb:54:be:31:65:09:64:15:b6:49:cb:13:13:
                    18:01:24:66:f4:1e:8b:68:7a:a9:22:ed:98:70:6b:
                    39:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:33:34:80:90:2A:AC:CE:4E:E1:7F:A7:08:93:73:39:0B:D7:30:08
            X509v3 Authority Key Identifier:
                keyid:D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/ezM0gJAqrM5O4X-nCJNzOQvXMAg.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:bb00::/30

    Signature Algorithm: sha256WithRSAEncryption
         22:dd:82:49:37:08:b0:1c:25:69:6e:ec:95:6e:d4:21:06:ad:
         5b:38:97:d4:47:c3:2d:b7:54:e6:7a:6d:6a:c1:49:0b:07:17:
         d2:94:cf:59:f7:15:82:6f:91:87:d6:a6:a0:25:4a:61:27:5d:
         eb:4b:0f:0b:3f:24:4f:4c:d2:75:b4:bb:d0:9f:02:d5:c2:73:
         52:70:d7:a4:0d:bb:7a:68:29:7c:7c:47:ca:42:ee:71:1f:f1:
         42:4b:10:b3:24:ff:38:83:28:99:89:67:f5:2e:71:ef:3e:7c:
         03:e5:27:e6:1f:da:37:23:27:90:7f:e2:49:c4:a8:6f:99:44:
         24:b8:4c:1b:1c:8c:8f:77:d5:0c:45:53:b8:43:b8:89:f8:85:
         19:37:7f:5b:6c:a9:c6:d3:4d:63:39:63:79:33:3b:c1:f0:45:
         d9:8f:2b:b1:90:7b:af:c0:e9:b2:d7:11:bc:91:35:ce:bd:2f:
         2d:19:ba:07:73:19:ca:82:5a:a3:e8:ad:83:f8:d2:d9:53:ac:
         92:4e:ff:3d:18:1c:72:1b:bf:21:08:cc:25:22:2a:f6:cb:44:
         7a:6b:f6:6f:49:54:a5:b5:bb:e4:66:ad:0d:02:f3:af:6d:77:
         b7:9e:d5:5a:43:65:67:21:e7:c2:62:77:6b:e4:9b:d1:1c:61:
         46:81:e3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org