Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30233/zObaysow4j9fuazQeke7Ns8HkZw.roa
File:                     zObaysow4j9fuazQeke7Ns8HkZw.roa (raw, json)
Hash identifier:          JzplnAt96PVlNS971MS1RBPbGgZZrhqiWRvqQvWk7BU=
Subject key identifier:   CC:E6:DA:CA:CA:30:E2:3F:5F:B9:AC:D0:7A:47:BB:36:CF:07:91:9C
Certificate issuer:       /CN=4475F65D96CA68DCD8E730AB79BF21388EE48AD1
Certificate serial:       02
Authority key identifier: 44:75:F6:5D:96:CA:68:DC:D8:E7:30:AB:79:BF:21:38:8E:E4:8A:D1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RHX2XZbKaNzY5zCreb8hOI7kitE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30233/zObaysow4j9fuazQeke7Ns8HkZw.roa
Signing time:             Tue 13 Sep 2022 06:46:02 +0000
ROA not before:           Tue 13 Sep 2022 06:46:02 +0000
ROA not after:            Wed 13 Sep 2023 06:31:37 +0000
asID:                     55900
IP address blocks:        2404:2d00::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4475F65D96CA68DCD8E730AB79BF21388EE48AD1
        Validity
            Not Before: Sep 13 06:46:02 2022 GMT
            Not After : Sep 13 06:31:37 2023 GMT
        Subject: CN=CCE6DACACA30E23F5FB9ACD07A47BB36CF07919C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c5:c3:34:28:d0:c1:d3:94:ad:e7:c3:0d:59:
                    6a:8c:60:c7:3b:de:47:10:7e:63:f9:8a:49:fc:ed:
                    3f:28:c8:65:e0:3f:a6:19:d5:d6:19:23:d4:78:e7:
                    07:bd:50:ba:36:2f:21:b2:7e:b2:1a:3d:35:de:cc:
                    88:b2:2d:08:f7:b7:c3:42:53:a3:52:c0:0c:d6:40:
                    7f:15:c7:62:78:03:d8:cb:4a:c1:d9:dc:c3:2b:1c:
                    87:eb:f4:dd:61:fd:7d:86:0f:82:a1:03:9e:6b:28:
                    7b:0b:85:d8:23:58:32:24:44:56:3a:6e:a0:ef:0c:
                    07:cc:d0:9a:b8:52:9f:48:17:32:52:3d:19:6e:65:
                    41:3e:cb:e2:83:0d:de:13:95:ff:f0:2e:58:86:5e:
                    08:67:d3:75:72:2d:0e:40:90:dd:63:26:0e:61:59:
                    c3:e3:89:55:1c:44:c0:77:57:58:69:eb:10:72:c1:
                    ea:8f:fe:58:89:2e:7d:c8:be:32:79:70:e5:03:b3:
                    89:48:f1:0f:c6:32:dd:3b:b9:bf:36:6f:46:7a:81:
                    32:08:d2:21:ad:a2:c5:5c:f7:f6:6b:29:c2:00:77:
                    16:33:e7:7c:10:f0:c8:48:d6:88:58:b4:bb:a8:59:
                    89:b2:3a:31:8e:e8:1c:9a:9a:17:78:9f:b4:e8:55:
                    8d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E6:DA:CA:CA:30:E2:3F:5F:B9:AC:D0:7A:47:BB:36:CF:07:91:9C
            X509v3 Authority Key Identifier:
                keyid:44:75:F6:5D:96:CA:68:DC:D8:E7:30:AB:79:BF:21:38:8E:E4:8A:D1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30233/RHX2XZbKaNzY5zCreb8hOI7kitE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RHX2XZbKaNzY5zCreb8hOI7kitE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30233/zObaysow4j9fuazQeke7Ns8HkZw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:2d00::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:1e:32:17:b1:97:16:5d:f8:a2:c5:49:a6:ff:09:83:1e:6e:
         ad:3b:77:24:4f:83:bf:f8:31:a7:04:d9:34:35:6c:3c:a4:71:
         bf:e1:70:0a:78:4d:85:e1:c7:b3:e5:fb:a7:05:c2:fe:5d:d7:
         76:c2:e6:15:a8:4a:bd:04:97:90:89:46:9a:13:0d:ed:00:de:
         61:d0:94:6c:b5:0a:db:c6:e0:ee:52:0a:7a:60:8b:09:02:ba:
         f0:08:79:b9:a9:b1:c8:15:0f:27:79:5d:38:76:a9:ff:6d:3e:
         60:c1:b3:e1:89:9e:49:66:a6:1e:3f:4b:b9:dc:db:48:e4:ca:
         c4:22:56:e4:dc:23:f4:0a:5c:71:52:7b:24:20:5f:84:8d:49:
         d3:10:cb:ff:53:c8:ef:f6:4f:6e:8d:e6:81:f7:b7:bf:9d:af:
         c4:bf:02:c9:74:f6:3c:7c:29:3f:90:36:48:ed:9e:26:fc:0d:
         64:2a:6a:46:5b:95:d4:1e:e4:b8:85:74:ce:19:a6:5f:62:79:
         6c:dc:7f:10:d7:97:cb:1e:bd:d8:25:55:d5:21:9f:45:f3:5d:
         ee:d6:2d:42:9e:ac:4a:41:d4:ca:bc:0e:75:c6:ac:ff:26:7f:
         af:8d:f0:4e:88:16:52:49:c0:f2:f6:d1:52:c3:3e:92:c2:b3:
         c9:bf:76:1d
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0NDc1
RjY1RDk2Q0E2OERDRDhFNzMwQUI3OUJGMjEzODhFRTQ4QUQxMB4XDTIyMDkxMzA2
NDYwMloXDTIzMDkxMzA2MzEzN1owMzExMC8GA1UEAxMoQ0NFNkRBQ0FDQTMwRTIz
RjVGQjlBQ0QwN0E0N0JCMzZDRjA3OTE5QzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKPFwzQo0MHTlK3nww1ZaoxgxzveRxB+Y/mKSfztPyjIZeA/phnV
1hkj1HjnB71QujYvIbJ+sho9Nd7MiLItCPe3w0JTo1LADNZAfxXHYngD2MtKwdnc
wysch+v03WH9fYYPgqEDnmsoewuF2CNYMiREVjpuoO8MB8zQmrhSn0gXMlI9GW5l
QT7L4oMN3hOV//AuWIZeCGfTdXItDkCQ3WMmDmFZw+OJVRxEwHdXWGnrEHLB6o/+
WIkufci+Mnlw5QOziUjxD8Yy3Tu5vzZvRnqBMgjSIa2ixVz39mspwgB3FjPnfBDw
yEjWiFi0u6hZibI6MY7oHJqaF3iftOhVjZ0CAwEAAaOCAikwggIlMB0GA1UdDgQW
BBTM5trKyjDiP1+5rNB6R7s2zweRnDAfBgNVHSMEGDAWgBREdfZdlspo3NjnMKt5
vyE4juSK0TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAyMzMvUkhYMlhaYkthTnpZNXpDcmViOGhPSTdraXRFLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvUkhYMlhaYkthTnpZNXpDcmViOGhP
STdraXRFLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMjMzL3pPYmF5c293NGo5ZnVhelFla2U3TnM4SGtady5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAkBC0AMA0GCSqGSIb3DQEBCwUAA4IBAQAPHjIXsZcWXfiixUmm/wmD
Hm6tO3ckT4O/+DGnBNk0NWw8pHG/4XAKeE2F4cez5funBcL+Xdd2wuYVqEq9BJeQ
iUaaEw3tAN5h0JRstQrbxuDuUgp6YIsJArrwCHm5qbHIFQ8neV04dqn/bT5gwbPh
iZ5JZqYeP0u53NtI5MrEIlbk3CP0ClxxUnskIF+EjUnTEMv/U8jv9k9ujeaB97e/
na/EvwLJdPY8fCk/kDZI7Z4m/A1kKmpGW5XUHuS4hXTOGaZfYnls3H8Q15fLHr3Y
JVXVIZ9F813u1i1CnqxKQdTKvA51xqz/Jn+vjfBOiBZSScDy9tFSwz6SwrPJv3Yd
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org