Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30304/HRSUcqmyuRVfJBacXwif_apweuI.roa
File:                     HRSUcqmyuRVfJBacXwif_apweuI.roa (raw, json)
Hash identifier:          SsO6AVytku+Z/XshgM9o5gi48hdG+VEBkV2igwsPTOs=
Subject key identifier:   1D:14:94:72:A9:B2:B9:15:5F:24:16:9C:5F:08:9F:FD:AA:70:7A:E2
Certificate issuer:       /CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
Certificate serial:       10
Authority key identifier: 6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/HRSUcqmyuRVfJBacXwif_apweuI.roa
Signing time:             Thu 11 May 2023 08:45:39 +0000
ROA not before:           Thu 11 May 2023 08:45:39 +0000
ROA not after:            Fri 10 May 2024 08:19:05 +0000
asID:                     59127
IP address blocks:        2401:7ec0:f000::/36 maxlen: 36

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
        Validity
            Not Before: May 11 08:45:39 2023 GMT
            Not After : May 10 08:19:05 2024 GMT
        Subject: CN=1D149472A9B2B9155F24169C5F089FFDAA707AE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b1:98:e6:8a:51:b1:75:fb:59:24:77:88:0a:
                    6c:b4:84:55:56:19:11:8b:09:1f:52:32:05:4f:7f:
                    8f:fa:5b:f5:d6:30:0d:7b:a1:10:89:ae:6e:af:a1:
                    6f:33:a0:ac:4b:c0:98:37:77:d1:1f:79:64:a9:cc:
                    7f:e4:cf:3f:c6:ca:74:92:a3:36:91:3a:6b:a0:0f:
                    d5:d6:e3:03:f6:1e:d0:27:56:e3:65:90:b9:97:db:
                    87:e7:cb:ab:3a:e7:ba:2a:fe:bc:14:d7:aa:1c:42:
                    71:c7:bf:e6:3a:d3:6c:c4:46:ca:9e:0a:e5:b2:04:
                    4f:60:9f:75:21:e7:66:b7:9d:df:f7:c6:83:26:cb:
                    b9:17:fc:ba:75:67:b7:69:c4:e8:04:b2:db:91:01:
                    ea:fc:5b:fe:86:66:37:6c:16:48:9b:10:47:93:9e:
                    94:2a:1a:4e:98:a8:6e:b2:4d:b0:11:c5:cf:66:57:
                    08:86:61:a1:4d:85:69:82:dc:77:32:26:a5:02:9c:
                    f8:74:c9:1c:e7:60:37:c1:3f:d9:6d:34:10:cb:cb:
                    34:2e:b4:d4:69:23:c6:dd:7a:46:34:6a:55:90:c1:
                    2f:6f:ed:df:47:8a:46:09:09:fd:ee:2c:89:c6:2b:
                    8d:8a:01:85:13:cf:f3:a2:65:8d:49:87:b5:fb:85:
                    89:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:14:94:72:A9:B2:B9:15:5F:24:16:9C:5F:08:9F:FD:AA:70:7A:E2
            X509v3 Authority Key Identifier:
                keyid:6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/HRSUcqmyuRVfJBacXwif_apweuI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7ec0:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5c:8f:b7:ad:b2:1c:68:44:92:b3:b1:ee:63:d8:e8:3e:65:23:
         80:2b:a2:5a:4d:3c:bf:e5:0f:b8:dc:78:81:a9:be:a4:fc:35:
         ea:3d:4e:1b:90:de:42:ea:92:43:bf:eb:23:78:6e:3a:20:16:
         82:d7:07:eb:30:9e:33:ae:78:1a:16:30:f5:a8:4a:a3:f7:ab:
         74:11:15:f9:f8:ba:8e:b2:2e:0b:96:5b:6f:d1:ee:29:5c:f8:
         df:c5:77:92:48:5a:a2:af:7c:81:2b:55:3c:c9:d1:29:0e:64:
         f2:46:34:9e:57:df:5b:75:bd:33:b5:7c:55:52:a1:1b:c1:76:
         7c:14:83:fc:97:cd:c9:ea:c8:cc:17:19:12:93:1c:8a:5f:7a:
         ba:9a:96:9f:07:29:a7:ef:86:b9:ef:4a:33:b0:5b:7b:ed:ff:
         0e:25:97:92:69:ef:e0:08:61:3f:b8:e7:01:33:58:09:a5:b6:
         ee:0f:f3:62:98:5b:53:cf:16:c7:dc:68:fc:60:40:b6:95:d8:
         ec:8c:2d:b1:5c:a9:ad:a4:1b:ed:e8:bb:6f:42:3e:71:6b:6a:
         4a:ee:68:44:f2:28:82:22:19:eb:6c:b9:27:48:db:8a:77:87:
         f5:73:b3:a2:6f:75:c2:a6:56:4d:73:a8:ff:58:6e:50:57:1b:
         22:a9:04:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:00 2024 by rpki-client on console-ams.rpki-client.org