Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30304/Xo6yqekmqG73tcEjcb8OB77UT4U.roa
File:                     Xo6yqekmqG73tcEjcb8OB77UT4U.roa (raw, json)
Hash identifier:          7qUXztTywdW3kbWb9akmz5RRUm2VkTeKsxBbLTtlamg=
Subject key identifier:   5E:8E:B2:A9:E9:26:A8:6E:F7:B5:C1:23:71:BF:0E:07:BE:D4:4F:85
Certificate issuer:       /CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
Certificate serial:       03
Authority key identifier: 6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/Xo6yqekmqG73tcEjcb8OB77UT4U.roa
Signing time:             Thu 11 May 2023 08:29:24 +0000
ROA not before:           Thu 11 May 2023 08:29:24 +0000
ROA not after:            Fri 10 May 2024 08:19:05 +0000
asID:                     59127
IP address blocks:        2401:7ec0:1000::/36 maxlen: 36

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
        Validity
            Not Before: May 11 08:29:24 2023 GMT
            Not After : May 10 08:19:05 2024 GMT
        Subject: CN=5E8EB2A9E926A86EF7B5C12371BF0E07BED44F85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2d:5e:63:e6:3f:ca:fe:22:61:f0:ed:db:fb:
                    c5:e3:6f:1c:1d:22:1c:5f:c8:c6:a0:27:76:bf:2f:
                    d4:2a:30:93:7f:00:8f:76:6b:f1:2f:e0:94:61:6c:
                    34:e6:c8:22:f4:01:e0:e4:6b:6d:e9:05:38:5a:da:
                    47:4b:24:11:36:b4:81:12:ae:ac:f3:63:92:78:6a:
                    9e:24:60:fe:37:2f:6c:b8:92:95:3f:1f:81:14:93:
                    1e:2e:7f:ac:b3:df:5c:bd:03:d9:58:6e:47:3a:63:
                    79:a0:68:36:51:82:c5:cc:64:63:80:fd:1b:1f:b0:
                    54:43:a0:2c:6a:85:9d:ba:cd:63:8c:dc:15:ec:08:
                    ee:bd:17:a6:ad:99:86:da:15:67:80:8c:ac:75:a4:
                    04:c7:4f:26:da:81:99:44:bc:95:c9:a9:19:f1:e4:
                    e5:5c:c6:12:4b:b0:43:6e:30:d3:32:e0:08:0a:8d:
                    91:88:7a:e2:5a:4f:84:a4:f3:bb:89:4d:ee:b2:b7:
                    c3:18:e9:99:2c:68:d4:c6:ff:86:af:55:56:b2:a6:
                    26:c2:a7:bf:42:c1:21:39:32:46:a6:40:72:39:e3:
                    ee:8c:6a:ce:0c:c0:a3:40:3f:1e:43:8b:46:be:b8:
                    2a:de:ab:2d:01:ac:52:01:6b:88:2f:af:4c:7c:96:
                    fa:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:8E:B2:A9:E9:26:A8:6E:F7:B5:C1:23:71:BF:0E:07:BE:D4:4F:85
            X509v3 Authority Key Identifier:
                keyid:6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/Xo6yqekmqG73tcEjcb8OB77UT4U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7ec0:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3a:73:ab:61:63:68:61:3a:7f:80:6e:80:27:cd:d6:33:38:f7:
         7b:70:63:06:84:43:c5:6d:77:9f:c8:0a:85:89:78:f6:08:d6:
         83:e7:03:06:58:d9:74:1c:41:ac:51:77:b3:7f:c7:3c:f7:df:
         eb:6d:6e:63:83:fe:a2:8b:c2:3a:1a:ca:f5:bf:94:e4:22:52:
         c4:21:4f:a0:90:09:d7:45:7b:a8:49:c9:8a:dd:81:93:51:f2:
         68:70:ed:1a:5c:bd:e4:ef:d5:63:5e:f1:91:12:d3:b1:b3:70:
         39:32:a3:be:7d:f5:68:d4:16:89:78:ac:2e:c1:a1:d2:fa:64:
         d7:70:14:b1:e5:93:ee:57:f1:27:12:4f:a9:b6:14:a5:b6:67:
         4c:75:94:e6:e0:e1:b3:a5:c9:79:fb:c0:de:02:b3:77:06:8a:
         80:ea:50:77:0f:96:9a:d4:76:24:85:29:2b:a1:26:85:34:c0:
         fb:79:43:fb:d4:1a:83:9b:19:08:4e:bf:9f:dd:4b:03:3f:2c:
         c0:10:1d:e9:29:70:e9:b5:28:48:84:78:00:e8:11:af:19:6c:
         ca:c0:c6:9e:f2:d3:58:a4:ff:45:c8:84:7b:4f:2d:2d:a3:54:
         01:52:65:32:69:e1:29:f0:94:91:ea:8c:a8:9e:8e:f9:17:96:
         9e:a1:f9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:00 2024 by rpki-client on console-ams.rpki-client.org