Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30247/nQ4gEd7zL3GcdADHPPaDP2ulCTk.roa
File:                     nQ4gEd7zL3GcdADHPPaDP2ulCTk.roa (raw, json)
Hash identifier:          sT3DtKbwONtwEzbD1WIh/woA8fXrvTtvqwatKPhZ/44=
Subject key identifier:   9D:0E:20:11:DE:F3:2F:71:9C:74:00:C7:3C:F6:83:3F:6B:A5:09:39
Certificate issuer:       /CN=D441672C555CFF0A58A8CF9AEEE7803264BF2D28
Certificate serial:       3D
Authority key identifier: D4:41:67:2C:55:5C:FF:0A:58:A8:CF:9A:EE:E7:80:32:64:BF:2D:28
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1EFnLFVc_wpYqM-a7ueAMmS_LSg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/nQ4gEd7zL3GcdADHPPaDP2ulCTk.roa
Signing time:             Tue 18 Apr 2023 23:03:08 +0000
ROA not before:           Tue 18 Apr 2023 23:03:08 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     7530
IP address blocks:        2405:f000::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D441672C555CFF0A58A8CF9AEEE7803264BF2D28
        Validity
            Not Before: Apr 18 23:03:08 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=9D0E2011DEF32F719C7400C73CF6833F6BA50939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bb:39:19:21:13:9a:c4:d9:99:45:14:8f:25:
                    17:9d:1a:73:3c:5f:1b:b3:c6:2c:fe:5a:23:22:7d:
                    f1:8c:22:31:c6:0c:b6:1d:05:d5:4b:89:24:52:26:
                    3f:ea:a1:ea:af:9a:60:1f:4a:62:4f:87:f6:dc:73:
                    d1:1c:6c:f8:71:97:c6:4c:9f:96:8b:e0:c1:80:ea:
                    fc:58:8d:34:f9:36:45:c3:20:68:b0:c7:b6:15:c3:
                    37:8f:84:06:0b:79:31:09:85:9b:5a:35:b5:42:d3:
                    15:5d:9f:b9:af:14:4f:69:f1:e2:ce:ec:f4:ff:f9:
                    18:e5:2c:47:a9:2d:de:1f:7d:93:df:57:2e:f4:37:
                    77:14:a9:48:e8:3f:14:5f:f5:fc:0a:a3:45:a2:e5:
                    f1:97:f4:f0:f9:b3:da:87:18:62:8b:11:70:68:ff:
                    20:36:57:e3:69:3b:76:55:a0:c5:f1:44:a8:04:d9:
                    16:07:48:33:b6:08:50:97:aa:13:f0:2a:02:86:61:
                    05:70:85:03:2a:a4:7c:f0:ae:2a:58:53:5b:20:d2:
                    ea:06:58:75:66:40:93:e1:32:f2:d0:11:cb:31:9c:
                    20:cb:20:72:f3:12:d1:b2:62:49:51:9b:39:a1:29:
                    e9:48:b7:ac:9c:2b:bc:bf:3d:a8:69:6c:bb:6e:8b:
                    d9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:0E:20:11:DE:F3:2F:71:9C:74:00:C7:3C:F6:83:3F:6B:A5:09:39
            X509v3 Authority Key Identifier:
                keyid:D4:41:67:2C:55:5C:FF:0A:58:A8:CF:9A:EE:E7:80:32:64:BF:2D:28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/1EFnLFVc_wpYqM-a7ueAMmS_LSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1EFnLFVc_wpYqM-a7ueAMmS_LSg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/nQ4gEd7zL3GcdADHPPaDP2ulCTk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:f000::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:d0:ca:35:9d:8a:91:47:0b:e0:62:21:9d:13:73:d2:0a:19:
         56:e6:e7:60:82:87:14:9d:78:94:8a:15:52:5d:00:7c:4c:c0:
         93:73:ce:3b:5a:be:29:39:20:b2:05:f1:db:7c:0c:aa:e0:c4:
         ea:25:5f:97:1e:73:27:46:96:c0:01:e2:4a:7b:72:98:41:58:
         94:19:13:5e:94:ca:77:ce:3e:ec:7a:6d:17:25:1e:8e:c5:e0:
         a9:7e:e5:e9:87:1e:2c:5a:37:c5:aa:fd:b8:61:bb:26:30:ff:
         6d:f5:12:24:dd:a6:d8:cf:c6:cd:fa:88:66:87:6c:14:fe:7b:
         60:9c:38:39:d5:ff:e1:24:77:5e:3a:5d:7c:ce:ca:e6:b8:d4:
         6a:ec:3c:e9:dc:42:88:79:91:05:8b:4e:01:3a:8e:14:d4:47:
         33:7e:0b:d0:38:3a:b2:bb:6e:38:dc:57:23:88:25:71:29:89:
         7b:4f:da:6d:f2:a3:b9:23:0a:8c:8e:fe:8a:ed:78:f8:2c:67:
         88:87:f1:71:1c:2b:a8:66:48:8b:43:d1:48:d8:f2:75:ba:9b:
         af:1c:67:a1:df:1d:27:51:1e:a7:21:5b:d3:f7:35:da:66:dd:
         59:3e:6f:07:cb:b5:6f:c7:00:e5:65:8f:42:cc:bd:3c:b1:74:
         9b:58:bc:03
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBPTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENDQx
NjcyQzU1NUNGRjBBNThBOENGOUFFRUU3ODAzMjY0QkYyRDI4MB4XDTIzMDQxODIz
MDMwOFoXDTI0MDQxNDAxMzAwMlowMzExMC8GA1UEAxMoOUQwRTIwMTFERUYzMkY3
MTlDNzQwMEM3M0NGNjgzM0Y2QkE1MDkzOTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKK7ORkhE5rE2ZlFFI8lF50aczxfG7PGLP5aIyJ98YwiMcYMth0F
1UuJJFImP+qh6q+aYB9KYk+H9txz0Rxs+HGXxkyflovgwYDq/FiNNPk2RcMgaLDH
thXDN4+EBgt5MQmFm1o1tULTFV2fua8UT2nx4s7s9P/5GOUsR6kt3h99k99XLvQ3
dxSpSOg/FF/1/AqjRaLl8Zf08Pmz2ocYYosRcGj/IDZX42k7dlWgxfFEqATZFgdI
M7YIUJeqE/AqAoZhBXCFAyqkfPCuKlhTWyDS6gZYdWZAk+Ey8tARyzGcIMsgcvMS
0bJiSVGbOaEp6Ui3rJwrvL89qGlsu26L2YcCAwEAAaOCAikwggIlMB0GA1UdDgQW
BBSdDiAR3vMvcZx0AMc89oM/a6UJOTAfBgNVHSMEGDAWgBTUQWcsVVz/Clioz5ru
54AyZL8tKDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAyNDcvMUVGbkxGVmNfd3BZcU0tYTd1ZUFNbVNfTFNnLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMUVGbkxGVmNfd3BZcU0tYTd1ZUFN
bVNfTFNnLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMjQ3L25RNGdFZDd6TDNHY2RBREhQUGFEUDJ1bENUay5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAkBfAAMA0GCSqGSIb3DQEBCwUAA4IBAQA30Mo1nYqRRwvgYiGdE3PS
ChlW5udggocUnXiUihVSXQB8TMCTc847Wr4pOSCyBfHbfAyq4MTqJV+XHnMnRpbA
AeJKe3KYQViUGRNelMp3zj7sem0XJR6OxeCpfuXphx4sWjfFqv24YbsmMP9t9RIk
3abYz8bN+ohmh2wU/ntgnDg51f/hJHdeOl18zsrmuNRq7Dzp3EKIeZEFi04BOo4U
1EczfgvQODqyu2443FcjiCVxKYl7T9pt8qO5IwqMjv6K7Xj4LGeIh/FxHCuoZkiL
Q9FI2PJ1upuvHGeh3x0nUR6nIVvT9zXaZt1ZPm8Hy7VvxwDlZY9CzL08sXSbWLwD
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:00 2024 by rpki-client on console-ams.rpki-client.org