Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30260/paZRiaju0f86j-CdaBgaq6qtjB4.roa
File:                     paZRiaju0f86j-CdaBgaq6qtjB4.roa (raw, json)
Hash identifier:          8Amrujqlqt7mXfYUVXG9HUdnjA1vbd58bCQkBuKPQqs=
Subject key identifier:   A5:A6:51:89:A8:EE:D1:FF:3A:8F:E0:9D:68:18:1A:AB:AA:AD:8C:1E
Certificate issuer:       /CN=97F2B4B8FE25A0C0C7F4D6FD4FA1BA7CAE612A12
Certificate serial:       25
Authority key identifier: 97:F2:B4:B8:FE:25:A0:C0:C7:F4:D6:FD:4F:A1:BA:7C:AE:61:2A:12
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/l_K0uP4loMDH9Nb9T6G6fK5hKhI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/paZRiaju0f86j-CdaBgaq6qtjB4.roa
Signing time:             Thu 01 Dec 2022 01:28:50 +0000
ROA not before:           Thu 01 Dec 2022 01:28:50 +0000
ROA not after:            Wed 15 Nov 2023 01:30:02 +0000
asID:                     7514
IP address blocks:        2001:2f0::/32 maxlen: 128

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97F2B4B8FE25A0C0C7F4D6FD4FA1BA7CAE612A12
        Validity
            Not Before: Dec  1 01:28:50 2022 GMT
            Not After : Nov 15 01:30:02 2023 GMT
        Subject: CN=A5A65189A8EED1FF3A8FE09D68181AABAAAD8C1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4e:0f:d6:7a:06:84:f1:4d:0b:ae:ce:3c:48:
                    31:12:a6:d2:59:9a:24:45:fb:2c:33:e2:02:61:08:
                    c9:59:f3:51:17:56:18:d5:76:fe:7b:b4:de:8c:5e:
                    d3:fa:87:7b:d5:e2:64:58:10:27:df:eb:5c:ff:c5:
                    4b:f4:3e:6a:27:5b:2e:a1:11:6f:16:c2:15:67:85:
                    7c:f5:65:68:cb:78:62:3d:0e:12:3f:bf:9b:fd:72:
                    75:61:ab:32:65:6d:a5:f3:e2:64:69:d2:27:6d:19:
                    49:39:12:cc:30:41:59:06:21:2e:d8:4a:88:84:a9:
                    07:11:4d:b1:fe:22:00:6c:3c:59:71:d2:ad:5f:70:
                    22:09:8c:a2:c7:1f:35:e7:ba:8a:36:de:de:4c:2f:
                    f8:a8:bd:11:e7:69:ed:29:db:a7:a2:b6:01:30:9c:
                    62:56:32:66:24:32:92:54:0f:fd:cf:da:69:27:3b:
                    5d:fa:04:28:ee:4e:ea:c6:65:68:b6:21:44:95:01:
                    af:72:c2:d1:1f:ce:43:9a:cb:95:53:01:ba:c9:a2:
                    6e:a3:41:4b:7f:c0:71:0d:ab:30:24:fb:65:ce:b0:
                    82:01:d3:34:68:e5:be:85:84:45:7d:52:07:0d:7a:
                    f4:1d:cd:8d:c3:ce:7a:ab:e4:8f:6c:b7:e4:c9:18:
                    40:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A6:51:89:A8:EE:D1:FF:3A:8F:E0:9D:68:18:1A:AB:AA:AD:8C:1E
            X509v3 Authority Key Identifier:
                keyid:97:F2:B4:B8:FE:25:A0:C0:C7:F4:D6:FD:4F:A1:BA:7C:AE:61:2A:12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/l_K0uP4loMDH9Nb9T6G6fK5hKhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/l_K0uP4loMDH9Nb9T6G6fK5hKhI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/paZRiaju0f86j-CdaBgaq6qtjB4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:2f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:79:f3:5a:29:a8:8e:67:85:14:c9:dc:27:f5:9e:fe:2b:46:
         0a:ac:24:08:14:53:2c:7a:ea:40:65:1a:de:e8:6c:df:63:17:
         83:41:7e:85:c9:46:88:5b:e8:7d:20:fc:d7:24:3e:2b:f3:1f:
         57:56:bc:b1:cc:e4:5d:c3:ce:ab:72:36:21:ef:d6:3b:1b:7a:
         0a:35:36:2d:94:aa:c7:3b:d2:30:f2:3d:62:fa:4e:2b:90:a1:
         70:bc:36:84:9e:cf:83:9c:29:91:49:a4:52:a0:d5:9e:d0:88:
         e9:3a:dd:06:62:a6:c5:f3:4d:e1:02:42:50:a0:14:20:ee:0d:
         9b:b1:d6:38:e9:da:00:95:40:96:b7:74:ea:9d:e0:1b:8d:3e:
         ec:c7:82:05:47:cd:1d:93:f9:be:ea:f8:3e:fe:5d:f3:7b:1d:
         b6:2f:17:37:33:4e:61:4f:68:9b:e3:e3:84:77:e2:11:e1:39:
         31:3a:0a:59:b4:46:f8:76:53:f2:46:ea:09:fe:15:53:f5:d9:
         41:de:fc:e9:df:e9:b1:54:aa:0d:84:e4:9b:0b:7f:cc:17:74:
         f6:0b:ae:26:a3:f3:fe:86:bb:dd:6a:74:90:a9:bc:eb:95:e0:
         c9:81:fb:0e:c6:5f:5c:a6:17:63:b8:b8:9d:7c:65:28:b0:6d:
         f4:29:90:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:00 2024 by rpki-client on console-ams.rpki-client.org