Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30252/hta_GhKvFJqsjBd_eWH75HIkNAI.roa
File:                     hta_GhKvFJqsjBd_eWH75HIkNAI.roa (raw, json)
Hash identifier:          sG5sKYm4tIRSvbaOWnZQA/4j1x4i0ySGKP3WREG0CNk=
Subject key identifier:   86:D6:BF:1A:12:AF:14:9A:AC:8C:17:7F:79:61:FB:E4:72:24:34:02
Certificate issuer:       /CN=B62BD0DF59A5913521DF51D6BDD5D5F5DBD452EA
Certificate serial:       02
Authority key identifier: B6:2B:D0:DF:59:A5:91:35:21:DF:51:D6:BD:D5:D5:F5:DB:D4:52:EA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/tivQ31mlkTUh31HWvdXV9dvUUuo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30252/hta_GhKvFJqsjBd_eWH75HIkNAI.roa
Signing time:             Fri 14 Oct 2022 00:50:54 +0000
ROA not before:           Fri 14 Oct 2022 00:50:54 +0000
ROA not after:            Sat 14 Oct 2023 00:33:35 +0000
asID:                     45677
IP address blocks:        2407:8f00::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62BD0DF59A5913521DF51D6BDD5D5F5DBD452EA
        Validity
            Not Before: Oct 14 00:50:54 2022 GMT
            Not After : Oct 14 00:33:35 2023 GMT
        Subject: CN=86D6BF1A12AF149AAC8C177F7961FBE472243402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:2b:ea:00:86:c2:d2:d1:4e:db:76:c8:bf:9c:
                    60:b8:8d:17:72:00:92:bc:63:88:c4:04:40:eb:ba:
                    d6:aa:e5:82:e9:04:d9:32:6c:44:b1:d1:32:5b:e2:
                    1d:c8:a5:e0:11:72:0f:73:40:cd:a1:e0:6a:f8:a7:
                    5c:62:8c:e5:01:74:06:77:fe:47:82:a0:aa:ba:34:
                    fd:ce:b5:0b:82:ec:48:0d:eb:2b:7f:9c:89:c1:eb:
                    c0:ec:86:b9:0e:62:78:b0:10:23:b8:bc:e2:76:e3:
                    3b:82:98:a0:78:ae:6c:83:ef:57:05:a8:9d:99:1c:
                    09:7c:d2:14:c0:5d:a3:06:01:cd:37:59:3e:06:89:
                    e9:58:de:cf:ef:c0:80:12:f4:a6:97:92:a3:49:7a:
                    40:8f:d4:77:7d:e4:bb:24:b6:fe:58:9e:4a:f5:03:
                    1b:95:59:64:a3:c8:40:82:db:89:8a:55:c0:ad:10:
                    37:85:7c:39:4e:3e:54:95:12:12:c8:c0:1e:af:8d:
                    6f:c3:4f:de:01:69:a5:69:ac:5e:60:25:06:2e:fd:
                    97:c5:f0:81:87:42:70:81:c6:30:48:c9:18:ed:c4:
                    0c:07:6d:94:7f:1c:96:44:cb:9e:28:38:55:65:0c:
                    e6:82:d6:e1:cb:62:52:31:48:d9:a6:96:8e:69:13:
                    da:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D6:BF:1A:12:AF:14:9A:AC:8C:17:7F:79:61:FB:E4:72:24:34:02
            X509v3 Authority Key Identifier:
                keyid:B6:2B:D0:DF:59:A5:91:35:21:DF:51:D6:BD:D5:D5:F5:DB:D4:52:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30252/tivQ31mlkTUh31HWvdXV9dvUUuo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/tivQ31mlkTUh31HWvdXV9dvUUuo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30252/hta_GhKvFJqsjBd_eWH75HIkNAI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:8f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:17:dd:22:9e:01:8c:c2:8d:6b:e0:cc:9b:d8:cf:07:c2:31:
         d4:a3:67:18:82:cf:33:7e:dd:97:a0:98:d6:cd:7c:e5:c8:a9:
         fc:8f:6e:fa:75:87:bf:7f:38:80:68:a1:8f:12:74:c8:a4:81:
         7c:16:d1:e1:eb:69:5e:5f:22:7e:3d:ec:49:43:98:0d:4a:6d:
         f6:ef:d6:a8:70:5a:27:f4:11:85:33:13:71:55:e6:4e:e0:d3:
         8c:3c:cd:fd:9d:00:13:ba:da:2e:75:f5:8a:8b:b1:8a:4b:20:
         56:72:e2:fc:05:b6:9c:7b:1c:2a:d8:22:d2:86:16:77:55:79:
         3d:47:7b:47:f0:14:23:52:bd:32:ff:32:a4:0e:c2:fd:8e:1d:
         d8:67:60:9b:49:c5:33:48:fa:1a:93:62:08:22:0b:bc:1b:2f:
         3e:25:63:6e:58:ed:bc:76:ba:44:dd:f3:99:55:2d:a1:d3:fe:
         23:ed:65:e1:f4:3c:ca:9f:11:31:7f:06:08:3f:b7:f8:57:28:
         a4:64:ee:66:d1:f0:dc:6e:a0:eb:ee:cc:1c:cd:df:ac:c5:d3:
         5c:6a:92:5a:4c:53:66:ef:a8:e0:e2:c4:fb:85:ed:f2:e9:10:
         7c:16:5a:fc:98:57:df:4f:e5:d3:01:0a:67:a2:84:69:8b:6c:
         8b:1d:38:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org