Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30304/YoHV49Bb5A6yR7NNa45rBFD0Jtw.roa
File:                     YoHV49Bb5A6yR7NNa45rBFD0Jtw.roa (raw, json)
Hash identifier:          r1ZSIh1TXE2uDyQf3hSuD+zpqoxa9UurXU6tFUlj9Cs=
Subject key identifier:   62:81:D5:E3:D0:5B:E4:0E:B2:47:B3:4D:6B:8E:6B:04:50:F4:26:DC
Certificate issuer:       /CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
Certificate serial:       08
Authority key identifier: 6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/YoHV49Bb5A6yR7NNa45rBFD0Jtw.roa
Signing time:             Thu 11 May 2023 08:41:34 +0000
ROA not before:           Thu 11 May 2023 08:41:34 +0000
ROA not after:            Fri 10 May 2024 08:19:05 +0000
asID:                     59127
IP address blocks:        2401:7ec0:7000::/36 maxlen: 36

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
        Validity
            Not Before: May 11 08:41:34 2023 GMT
            Not After : May 10 08:19:05 2024 GMT
        Subject: CN=6281D5E3D05BE40EB247B34D6B8E6B0450F426DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f5:cc:91:8b:63:d5:38:4f:d8:6d:30:0a:c5:
                    df:d9:26:6e:4d:a5:d8:53:40:8b:e7:4a:20:b0:32:
                    d8:12:87:9b:c3:20:62:8a:88:09:6e:06:f4:23:73:
                    37:35:18:10:6a:4a:22:b5:43:d3:bd:fa:5f:dc:1a:
                    cd:03:7a:1e:11:31:41:5c:a6:f6:57:67:61:53:0a:
                    8b:7c:9c:e6:59:e4:90:ee:cd:d7:b1:4c:a5:ad:ca:
                    5b:63:35:a9:7d:86:80:76:25:86:2a:9d:e3:00:c9:
                    1d:f8:ca:15:bd:4c:f3:05:cf:fb:a9:1c:c5:95:b1:
                    19:9e:77:e3:8f:3e:82:33:54:83:f5:dd:90:2a:33:
                    7b:be:78:f2:36:66:52:e7:42:c4:b7:a3:83:bb:a0:
                    ae:3e:ec:d8:de:b7:e2:f4:c4:c1:b5:91:d9:ed:d0:
                    50:ab:2e:16:6e:ad:86:4c:d5:f5:31:95:fb:d7:74:
                    94:6a:b5:bf:e5:79:4b:67:27:bc:71:e2:af:2c:59:
                    e2:ef:71:d8:d9:ae:7d:05:89:ba:79:0b:68:22:a6:
                    c2:c3:29:af:14:5f:11:89:fb:6c:b4:bc:02:0f:b0:
                    ef:84:12:9a:12:5f:b1:0f:04:53:e1:62:ff:4e:27:
                    44:be:ff:03:45:f2:cb:b9:dd:b2:ee:bb:3f:69:d8:
                    e8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:81:D5:E3:D0:5B:E4:0E:B2:47:B3:4D:6B:8E:6B:04:50:F4:26:DC
            X509v3 Authority Key Identifier:
                keyid:6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/YoHV49Bb5A6yR7NNa45rBFD0Jtw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7ec0:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         63:77:ae:4c:49:d7:2d:de:93:da:51:a2:50:2f:78:69:6f:a9:
         92:52:48:56:af:b3:f4:92:58:c5:5d:e5:24:06:03:79:e6:fb:
         e0:60:20:69:98:27:13:18:ab:9d:22:52:d3:a7:6b:25:07:c0:
         a8:ff:79:33:a4:eb:ad:cb:a6:22:96:09:69:4f:34:4d:ac:f8:
         05:97:aa:79:50:17:d6:a1:c5:c9:01:cc:84:94:89:a6:af:cd:
         d0:5a:16:45:31:46:8a:00:fb:95:84:16:82:21:a1:b0:1b:70:
         e1:1d:93:95:af:40:05:5c:37:17:5c:28:d2:0a:98:f9:5c:e5:
         1d:4c:a2:54:03:cb:e3:1b:00:a9:7e:d2:2b:43:5f:96:72:b0:
         cd:eb:4e:83:b5:c2:56:81:ab:4d:57:12:54:bb:e6:a8:e9:35:
         cc:da:bf:73:08:94:50:69:e2:00:aa:1a:ff:bf:21:c1:ff:4a:
         1b:5c:f2:60:b7:df:92:cb:ee:9b:dd:99:ab:77:76:42:ad:1d:
         0e:86:bc:8b:19:01:c2:a5:3e:73:24:45:c3:d6:87:98:c5:8a:
         f3:dc:cc:19:13:b3:1a:8a:67:92:c1:9c:54:d9:34:25:db:84:
         91:f2:31:43:48:f3:e6:4c:b6:86:a4:86:0b:2b:be:53:b8:02:
         ad:50:3b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:00 2024 by rpki-client on console-ams.rpki-client.org