Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30228/w4EH1yr5bfrPWB-84wPEqmJWQoU.roa
File:                     w4EH1yr5bfrPWB-84wPEqmJWQoU.roa (raw, json)
Hash identifier:          BKdsbcFQ8WjfadNelen1XKvEO7pj5Z/Z3766Z+gF5cA=
Subject key identifier:   C3:81:07:D7:2A:F9:6D:FA:CF:58:1F:BC:E3:03:C4:AA:62:56:42:85
Certificate issuer:       /CN=D10D886582BDDF48B041851C38C0B632115F5C21
Certificate serial:       41
Authority key identifier: D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/w4EH1yr5bfrPWB-84wPEqmJWQoU.roa
Signing time:             Sun 01 May 2022 01:30:01 +0000
ROA not before:           Sun 01 May 2022 01:30:01 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     10010
IP address blocks:        2406:bb00::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D10D886582BDDF48B041851C38C0B632115F5C21
        Validity
            Not Before: May  1 01:30:01 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=C38107D72AF96DFACF581FBCE303C4AA62564285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:69:8b:24:98:9f:66:ad:40:41:b8:00:d1:52:
                    a7:ea:91:69:8f:af:84:25:e1:19:09:9e:80:63:a3:
                    f5:38:58:87:49:fa:65:8c:14:ef:98:b4:9e:5a:06:
                    a6:18:f1:a1:ea:07:fb:80:50:12:18:8d:6d:3e:49:
                    6e:f2:9a:ef:e5:52:68:05:ea:23:67:f3:e8:82:2e:
                    14:03:5f:41:e9:1a:6e:92:7e:a1:fc:76:fd:46:a8:
                    1a:9d:f5:96:f4:7d:84:34:99:ef:34:cf:ad:a7:12:
                    73:63:ad:10:95:bf:e5:89:aa:5e:05:c5:ef:49:0d:
                    45:86:29:58:19:a9:1c:90:ee:ec:f2:2a:c2:f7:c3:
                    a7:10:23:aa:d7:34:f8:93:0c:00:f7:ad:11:53:d7:
                    6c:92:34:ad:66:4b:d3:46:d5:4e:92:cb:af:35:a8:
                    5f:67:fd:94:36:58:75:66:5a:21:43:f4:a3:6a:b4:
                    42:c1:ce:a9:7b:04:b1:d1:28:f1:bb:ca:ab:03:48:
                    a8:12:f8:d4:d4:6a:86:63:89:fa:dc:0f:f9:5a:20:
                    8c:32:67:e8:19:14:55:e6:d4:a6:0a:6b:4b:4a:d7:
                    5f:95:61:91:59:ef:81:b2:ce:49:93:83:1a:b3:46:
                    3e:34:9b:8e:da:11:9f:00:1b:d8:36:60:82:ba:56:
                    53:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:81:07:D7:2A:F9:6D:FA:CF:58:1F:BC:E3:03:C4:AA:62:56:42:85
            X509v3 Authority Key Identifier:
                keyid:D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/w4EH1yr5bfrPWB-84wPEqmJWQoU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:bb00::/29

    Signature Algorithm: sha256WithRSAEncryption
         71:eb:e9:5d:55:71:db:55:39:b1:0d:02:4b:b4:e5:26:ad:4d:
         51:1b:c5:b7:5f:c1:e9:20:15:69:66:c9:1b:ae:c8:6d:f0:42:
         67:0e:bd:97:4f:78:3e:35:9d:4d:09:b7:33:df:91:ae:ad:cc:
         1e:50:5e:ed:44:85:d8:6e:e2:79:5d:ef:da:57:f8:75:8d:10:
         05:2b:73:04:b4:e2:68:0f:f0:ea:92:01:69:5a:7e:51:90:20:
         f0:9c:a1:f2:cd:f7:9b:8a:71:d5:5e:ce:db:98:18:0d:87:fc:
         d3:c4:e0:c2:37:62:00:f3:4e:28:a9:1e:75:79:39:56:44:b1:
         0c:d4:cc:7a:99:2a:14:51:98:1a:b6:7f:1a:b8:8d:1d:b3:58:
         8d:d5:cb:94:1a:6a:84:ef:ef:36:f7:ad:ca:45:7f:fc:8a:35:
         06:91:4c:83:6a:30:19:c0:8b:05:67:e3:ed:31:fb:77:8e:51:
         95:89:b9:3c:cf:fd:fd:3b:f7:29:ef:b1:ab:a8:95:28:59:63:
         6d:f8:98:c3:13:69:13:a5:60:b5:a8:44:a6:97:5c:a8:02:77:
         7d:b9:84:62:a5:36:72:47:b0:42:93:1b:42:44:11:dd:16:88:
         e4:e6:fd:2e:bf:ad:fa:72:3e:d2:a7:8c:5f:15:c4:ba:dd:ba:
         63:f2:9b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org