Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30228/pWN6v5Ed-nst4TURYGpJXBxuMho.roa
File:                     pWN6v5Ed-nst4TURYGpJXBxuMho.roa (raw, json)
Hash identifier:          cRORqUxGiuaI0+Cy0kZj4uJYiPM0QTu3KUcSuQBNCQU=
Subject key identifier:   A5:63:7A:BF:91:1D:FA:7B:2D:E1:35:11:60:6A:49:5C:1C:6E:32:1A
Certificate issuer:       /CN=D10D886582BDDF48B041851C38C0B632115F5C21
Certificate serial:       54
Authority key identifier: D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/pWN6v5Ed-nst4TURYGpJXBxuMho.roa
Signing time:             Thu 13 Apr 2023 09:52:45 +0000
ROA not before:           Thu 13 Apr 2023 09:52:45 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        2406:bb00::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D10D886582BDDF48B041851C38C0B632115F5C21
        Validity
            Not Before: Apr 13 09:52:45 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=A5637ABF911DFA7B2DE13511606A495C1C6E321A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:61:cd:51:d6:d2:f9:e4:c5:45:b3:4a:d8:66:
                    cd:b1:97:4b:ea:4b:59:5f:58:65:be:56:7a:10:2a:
                    cc:df:65:cb:58:cf:9d:2a:02:f6:e9:c0:4d:db:02:
                    24:10:fa:2e:12:42:09:ec:94:be:00:80:13:17:f4:
                    5d:89:ae:f1:88:1a:ee:91:ec:a0:34:39:8d:78:20:
                    10:9b:7c:e7:1b:ef:da:40:61:50:63:c0:08:78:16:
                    5c:da:b0:3a:8b:13:9b:4b:3d:1f:18:f5:d6:68:58:
                    e2:60:70:d2:90:4a:04:c2:e8:51:0e:e4:17:70:7a:
                    86:15:7a:0a:0a:a4:71:70:d3:8a:37:e6:6e:65:52:
                    b2:e6:a1:9a:6e:be:76:78:87:36:7c:78:75:f9:b8:
                    05:55:09:fc:ca:d4:db:96:3f:e3:02:82:d9:54:93:
                    7a:62:f1:06:67:5a:98:83:60:98:94:0c:2a:a4:e0:
                    9f:56:44:fd:53:eb:24:b5:34:b8:52:b9:aa:57:fd:
                    9b:17:f4:a1:93:9e:5a:76:02:d9:5a:34:d2:8b:64:
                    0b:f9:ac:f6:9c:d4:dd:66:24:75:92:44:70:ae:47:
                    fe:7b:60:01:91:56:a3:7f:4e:d0:9e:34:5c:e7:d3:
                    d3:38:d7:e8:72:3d:5f:e4:a9:0c:97:d4:64:47:63:
                    d4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:63:7A:BF:91:1D:FA:7B:2D:E1:35:11:60:6A:49:5C:1C:6E:32:1A
            X509v3 Authority Key Identifier:
                keyid:D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/pWN6v5Ed-nst4TURYGpJXBxuMho.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:bb00::/29

    Signature Algorithm: sha256WithRSAEncryption
         37:51:a8:c8:44:d6:76:6e:36:fd:76:c7:2f:a5:fd:cd:48:a1:
         e2:c3:b2:51:5c:f1:59:b6:49:31:66:e5:91:fa:a6:4a:de:ed:
         6b:27:ec:30:c8:b2:b9:f7:3b:5b:ed:7a:3d:a2:9a:8c:b9:46:
         13:b7:1a:86:3f:93:31:64:52:d4:3f:27:2a:74:3a:b0:58:d7:
         a4:b8:e5:ed:c2:22:c5:8c:9f:13:dd:c1:37:15:11:97:8a:dd:
         6e:33:91:4e:24:2e:d8:61:13:b6:53:0f:d7:49:b7:06:9e:9f:
         a2:ac:3b:8b:de:e3:41:97:0a:d2:09:30:fd:46:28:93:9d:5d:
         0d:fb:be:9c:b8:8c:7a:ab:d0:17:5a:21:37:cb:d2:b7:2c:f5:
         84:80:56:32:e1:39:94:02:b8:55:50:85:af:0e:08:d0:9d:4b:
         4f:00:07:9c:f9:6b:17:8e:2c:11:37:55:2b:e4:5d:46:a6:9d:
         ef:05:8f:c1:55:6d:8c:d2:fc:d8:53:28:04:03:ac:9a:54:b6:
         85:1f:d4:4c:45:f6:1b:ac:58:02:a5:c7:51:38:7d:1a:0f:e2:
         80:35:3f:93:c3:9f:ed:59:03:04:50:be:5f:41:1b:a6:b5:c3:
         62:fc:d7:74:bb:97:8c:86:b6:a7:01:b6:fa:07:7e:e9:4e:35:
         1d:5c:29:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org