Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30279/ufJN6JOnAtWXJC9ZVkgNWen05Ic.roa
File:                     ufJN6JOnAtWXJC9ZVkgNWen05Ic.roa (raw, json)
Hash identifier:          dEzJ0OvuxFbamONIPZaaRpO1mckM6cfoeGa6SiQvgbE=
Subject key identifier:   B9:F2:4D:E8:93:A7:02:D5:97:24:2F:59:56:48:0D:59:E9:F4:E4:87
Certificate issuer:       /CN=1666AC184C9FEE6089751DCC75BD39FD6A652AEE
Certificate serial:       32
Authority key identifier: 16:66:AC:18:4C:9F:EE:60:89:75:1D:CC:75:BD:39:FD:6A:65:2A:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FmasGEyf7mCJdR3Mdb05_WplKu4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30279/ufJN6JOnAtWXJC9ZVkgNWen05Ic.roa
Signing time:             Mon 17 Oct 2022 13:42:11 +0000
ROA not before:           Mon 17 Oct 2022 13:42:11 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     59105
IP address blocks:        2403:bd80::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1666AC184C9FEE6089751DCC75BD39FD6A652AEE
        Validity
            Not Before: Oct 17 13:42:11 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=B9F24DE893A702D597242F5956480D59E9F4E487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2d:9f:ea:90:99:eb:0e:ba:6c:3f:1c:0d:b1:
                    66:9d:71:45:bc:18:52:2c:47:e0:48:ae:07:e5:64:
                    7b:c3:d8:e5:ea:62:b3:0f:d4:a4:14:0d:a6:f6:1d:
                    41:3e:88:0d:a1:5d:1c:a0:6c:0a:47:2b:13:36:7c:
                    49:6a:70:e7:2e:78:3d:12:2b:b9:92:38:04:03:d0:
                    d2:97:66:86:4c:be:f1:e1:e4:8e:9a:61:98:14:ea:
                    35:cb:74:87:01:ee:5e:f7:13:ee:a6:95:6a:65:8e:
                    4a:92:4f:ab:96:e9:8e:09:c4:a0:c6:23:dc:93:6b:
                    32:ff:d6:51:81:76:b6:37:37:b5:7f:67:17:79:27:
                    cf:22:05:93:b3:e6:3b:66:9a:62:79:b1:a0:ab:ca:
                    ee:c0:c3:bb:14:5d:c6:23:8a:c4:48:d2:72:9a:26:
                    c2:fa:df:c6:f2:36:4c:51:70:b3:27:0c:52:ac:c9:
                    10:08:f4:3f:32:a1:5b:f3:10:4e:99:8f:10:9e:d3:
                    04:00:f2:09:59:6a:5f:28:12:30:49:7d:7a:c2:7b:
                    91:ce:05:42:ae:74:2e:27:c7:9b:7d:25:b0:4f:38:
                    b8:28:4f:d2:44:1b:46:a2:12:8d:2c:71:94:68:dd:
                    69:35:7e:34:dd:36:cc:f0:3e:14:85:56:eb:8f:f5:
                    91:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F2:4D:E8:93:A7:02:D5:97:24:2F:59:56:48:0D:59:E9:F4:E4:87
            X509v3 Authority Key Identifier:
                keyid:16:66:AC:18:4C:9F:EE:60:89:75:1D:CC:75:BD:39:FD:6A:65:2A:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30279/FmasGEyf7mCJdR3Mdb05_WplKu4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FmasGEyf7mCJdR3Mdb05_WplKu4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30279/ufJN6JOnAtWXJC9ZVkgNWen05Ic.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:bd80::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:b8:2f:60:96:70:56:7e:34:23:b2:cb:a9:0b:0b:e3:88:e6:
         23:25:70:99:21:20:a8:ce:18:6a:31:96:ba:07:e7:24:14:87:
         0e:4f:d4:99:ae:d3:f0:ae:0e:09:bc:3b:28:72:06:e6:b7:56:
         80:54:45:e7:2e:ec:74:b7:3c:ee:e4:28:37:aa:0b:a4:b3:2a:
         05:12:ea:a2:4d:76:d5:7f:4b:63:36:64:d5:6d:87:2e:92:6c:
         d2:85:f7:02:da:1f:e8:ba:e6:f4:2d:9c:bd:9c:4f:7e:4e:7e:
         bd:62:40:d8:04:98:ef:86:c4:2e:e6:bc:05:a5:85:eb:ed:99:
         6b:67:9f:c5:e7:83:df:87:f1:f4:d2:dc:da:69:22:56:47:af:
         3d:95:6c:e2:36:56:c8:b3:71:85:64:0d:63:f8:34:41:96:d4:
         93:cc:c4:40:0e:9c:41:6e:ec:82:e8:12:1b:29:09:dc:89:5b:
         d7:1a:3b:29:22:be:d5:5c:55:6d:f3:9a:bf:c7:fd:7a:16:57:
         26:69:8b:97:3c:25:0c:5d:ac:8e:f7:6d:ee:c4:e3:39:5f:0a:
         e0:11:64:0b:1d:38:cf:e1:df:03:05:b1:d3:a4:ba:31:63:94:
         2d:e4:e9:52:c2:76:c2:1e:35:58:fb:35:20:af:ae:29:0a:76:
         a3:d0:9b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:00 2024 by rpki-client on console-ams.rpki-client.org