Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30299/D_bBHKpnhOv67Ew222cdFV3Ap0M.roa
File:                     D_bBHKpnhOv67Ew222cdFV3Ap0M.roa (raw, json)
Hash identifier:          t7iRWBj5NYtZRbBSfm1BRlwYsLgPuPxsGfh3+Wh+CKk=
Subject key identifier:   0F:F6:C1:1C:AA:67:84:EB:FA:EC:4C:36:DB:67:1D:15:5D:C0:A7:43
Certificate issuer:       /CN=C441193AC56882F9FD638B6CA5F07811C61F16E0
Certificate serial:       02
Authority key identifier: C4:41:19:3A:C5:68:82:F9:FD:63:8B:6C:A5:F0:78:11:C6:1F:16:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xEEZOsVogvn9Y4tspfB4EcYfFuA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30299/D_bBHKpnhOv67Ew222cdFV3Ap0M.roa
Signing time:             Sun 29 Jan 2023 05:27:17 +0000
ROA not before:           Sun 29 Jan 2023 05:27:17 +0000
ROA not after:            Mon 29 Jan 2024 05:15:56 +0000
asID:                     131923
IP address blocks:        2401:5ac0::/32 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C441193AC56882F9FD638B6CA5F07811C61F16E0
        Validity
            Not Before: Jan 29 05:27:17 2023 GMT
            Not After : Jan 29 05:15:56 2024 GMT
        Subject: CN=0FF6C11CAA6784EBFAEC4C36DB671D155DC0A743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:04:24:6a:5b:7c:00:06:8e:5d:19:b1:d5:bb:
                    7f:03:8b:ab:70:cf:fb:35:27:82:31:58:65:f4:ed:
                    f8:eb:f2:74:9a:60:a0:ae:d4:b7:e0:64:6c:d8:e7:
                    29:c8:d5:ea:e0:b0:2d:be:df:73:a9:88:98:14:19:
                    44:43:53:f5:6c:05:21:cc:13:dd:6c:7d:21:50:2c:
                    72:87:7c:44:7a:f6:b8:93:ab:d8:7f:e2:17:e2:b9:
                    b8:c3:94:6a:4e:ee:ec:e2:34:78:98:01:9c:6b:13:
                    58:aa:a2:39:b4:03:8e:3a:25:5d:80:73:c3:f9:36:
                    f3:2c:dc:e9:8e:54:e4:17:82:f7:68:cf:32:cf:dc:
                    75:b1:26:d2:22:81:b4:4b:74:08:9a:93:86:bb:0d:
                    1b:8f:78:15:c8:ff:d7:bf:53:ca:09:a9:d8:28:6b:
                    7e:0e:0a:cf:55:01:02:20:bd:e7:85:21:74:29:c1:
                    d0:88:7f:be:af:0c:38:3f:23:9f:48:06:9d:bb:2a:
                    1a:0c:4a:5b:bc:33:4d:e2:03:01:05:ab:c2:20:1e:
                    12:d1:44:5c:02:b1:3d:7d:f7:e9:f5:6b:ae:37:5f:
                    a7:47:a7:65:1d:df:63:bb:94:1b:a9:3d:d2:84:f3:
                    a9:5b:74:db:14:53:ac:b3:d5:b2:43:2d:9f:b4:bc:
                    96:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F6:C1:1C:AA:67:84:EB:FA:EC:4C:36:DB:67:1D:15:5D:C0:A7:43
            X509v3 Authority Key Identifier:
                keyid:C4:41:19:3A:C5:68:82:F9:FD:63:8B:6C:A5:F0:78:11:C6:1F:16:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30299/xEEZOsVogvn9Y4tspfB4EcYfFuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xEEZOsVogvn9Y4tspfB4EcYfFuA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30299/D_bBHKpnhOv67Ew222cdFV3Ap0M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:5ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:92:9c:10:18:57:17:fa:8d:0d:a9:79:9e:d2:22:d7:3e:4e:
         8e:e3:fe:67:ec:7b:b6:fe:a1:09:6b:49:ae:6a:7c:69:bb:2c:
         cd:65:79:db:ed:16:6d:32:cb:2e:b6:5f:05:a6:22:31:71:47:
         b3:3c:19:b6:e9:7c:67:e3:b6:7c:75:3d:87:b1:6b:43:bb:27:
         89:7e:28:fd:c7:d9:d8:18:6b:68:f0:60:43:88:d2:d1:07:4f:
         4e:f5:bb:43:37:19:af:7e:d0:d2:84:5b:af:4a:01:b9:0c:89:
         44:9f:c4:5a:f5:f5:36:61:57:87:4c:78:c8:30:0e:6e:ac:ed:
         a5:bc:4d:2e:3c:48:d5:1a:86:df:8c:9f:ee:7d:8d:7d:39:6a:
         85:08:a6:36:d3:d3:68:f3:b6:50:69:b9:fa:e2:97:d9:84:3a:
         72:06:b6:f4:1a:fa:6a:f0:30:18:6f:94:3a:f8:62:45:d4:55:
         93:bf:fb:b9:0e:7f:74:d5:a2:ac:41:6e:33:29:5b:b5:61:45:
         ea:ba:95:e0:4d:18:10:77:f9:b3:b0:17:16:e0:ef:98:b5:4a:
         0c:fe:02:bf:4a:b4:c7:94:bf:bd:1e:85:d6:ad:a7:2d:17:76:
         5a:5a:fa:84:f7:56:d2:7b:3d:ed:40:6f:00:dd:92:f8:9b:a9:
         65:1b:6e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:00 2024 by rpki-client on console-ams.rpki-client.org