Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30247/axw4jni-OWeJlYseL-D2eRbei-U.roa
File:                     axw4jni-OWeJlYseL-D2eRbei-U.roa (raw, json)
Hash identifier:          zEUPZLYyKVrWAvVYXsK4b4L0mugQu+ZPQtJTjC2twHQ=
Subject key identifier:   6B:1C:38:8E:78:BE:39:67:89:95:8B:1E:2F:E0:F6:79:16:DE:8B:E5
Certificate issuer:       /CN=D441672C555CFF0A58A8CF9AEEE7803264BF2D28
Certificate serial:       3E
Authority key identifier: D4:41:67:2C:55:5C:FF:0A:58:A8:CF:9A:EE:E7:80:32:64:BF:2D:28
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1EFnLFVc_wpYqM-a7ueAMmS_LSg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/axw4jni-OWeJlYseL-D2eRbei-U.roa
Signing time:             Tue 18 Apr 2023 23:09:03 +0000
ROA not before:           Tue 18 Apr 2023 23:09:03 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     59099
IP address blocks:        2405:f000:150::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D441672C555CFF0A58A8CF9AEEE7803264BF2D28
        Validity
            Not Before: Apr 18 23:09:03 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=6B1C388E78BE396789958B1E2FE0F67916DE8BE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d9:01:da:c3:5d:5c:54:58:4f:47:54:5c:ab:
                    65:1e:a5:21:e1:4b:8e:06:9e:5e:58:18:e6:a1:04:
                    0e:0c:9a:77:56:72:72:5b:12:1b:a5:20:45:7e:0e:
                    c6:2f:31:db:f0:92:b4:ad:c0:2b:1b:fa:5e:67:01:
                    d8:21:53:39:b7:d8:75:db:f2:99:2e:10:db:c2:4d:
                    e8:50:85:9e:82:ab:0f:a0:65:12:84:d2:2b:6c:89:
                    29:41:06:e8:35:55:66:27:6a:69:a9:dc:39:ef:a2:
                    f8:f9:9c:1e:9a:21:8e:aa:da:a8:3a:cf:67:18:d8:
                    10:4d:10:f9:f7:01:1d:f6:42:78:58:b5:2c:b6:32:
                    a6:5c:aa:f3:cb:03:f1:26:c0:a8:b0:c4:60:24:89:
                    c1:a9:66:fa:02:77:c2:7a:15:1e:09:2e:10:e4:92:
                    b0:be:24:3a:5c:1d:35:b7:fd:72:88:e8:82:85:e1:
                    78:3a:75:03:a7:4b:34:0b:04:b4:38:fe:ba:6e:94:
                    5f:a4:7f:c4:c3:8c:0b:15:9e:2c:b7:df:00:0d:23:
                    f2:78:b7:20:b6:ef:90:5a:38:5e:06:e2:f0:9c:0e:
                    16:9f:36:ed:8e:71:ee:28:3b:55:fd:3f:1b:25:56:
                    95:92:84:a3:8d:fd:2c:db:55:a0:64:3f:25:b1:18:
                    53:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:1C:38:8E:78:BE:39:67:89:95:8B:1E:2F:E0:F6:79:16:DE:8B:E5
            X509v3 Authority Key Identifier:
                keyid:D4:41:67:2C:55:5C:FF:0A:58:A8:CF:9A:EE:E7:80:32:64:BF:2D:28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/1EFnLFVc_wpYqM-a7ueAMmS_LSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1EFnLFVc_wpYqM-a7ueAMmS_LSg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/axw4jni-OWeJlYseL-D2eRbei-U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:f000:150::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:01:1c:aa:4c:e3:84:dc:52:bc:b2:08:b9:77:54:f8:4f:38:
         53:ea:e0:2d:c4:fb:0e:f3:48:bf:42:24:e9:9c:a6:37:d4:7a:
         c9:bd:5a:09:be:49:b7:97:c2:03:9f:62:e7:5e:1c:e4:90:d4:
         fc:98:ea:19:97:67:06:09:d6:ed:51:b8:f3:28:b8:a0:4a:da:
         09:b3:0d:56:3b:e7:02:fb:28:b2:c4:ce:ed:21:1c:fb:7b:6e:
         4a:a1:45:db:57:ab:fd:20:44:b2:cf:b0:34:d7:9c:3f:8c:e6:
         23:9c:89:44:bb:ad:6a:ae:c9:7f:57:33:0f:9f:4a:9b:60:89:
         ee:5b:98:2b:d2:d1:64:26:81:61:f9:cc:63:80:ba:ef:6d:b5:
         4e:f6:e9:5c:7f:b5:c0:51:45:d4:ab:c8:18:26:a2:d1:40:d9:
         5e:c1:df:db:75:85:e3:df:29:54:7c:c4:21:1e:44:02:37:ed:
         cb:2a:71:0b:59:8b:95:9f:84:d7:a0:8a:3e:4c:52:19:31:75:
         2e:1f:fe:e7:1b:d4:0b:84:f2:2b:83:d3:ec:2d:5e:a0:65:95:
         c0:89:90:5c:32:8f:40:d4:1d:ce:ab:58:4f:62:f7:7c:b2:09:
         07:0a:b5:ef:10:17:6b:34:0d:d1:66:d6:10:c5:b7:75:cf:9b:
         58:48:2c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org