Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30321/_0L8_jJJUXZdw66C0FPiDcvOGso.roa
File:                     _0L8_jJJUXZdw66C0FPiDcvOGso.roa (raw, json)
Hash identifier:          grZB08wOXs/9B+gJ9wEMgONhgHkZaOqgajwMmpzQMQg=
Subject key identifier:   FF:42:FC:FE:32:49:51:76:5D:C3:AE:82:D0:53:E2:0D:CB:CE:1A:CA
Certificate issuer:       /CN=5472C40748CDA9E9BC08EAE425C682617E92E4A2
Certificate serial:       2F
Authority key identifier: 54:72:C4:07:48:CD:A9:E9:BC:08:EA:E4:25:C6:82:61:7E:92:E4:A2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VHLEB0jNqem8COrkJcaCYX6S5KI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30321/_0L8_jJJUXZdw66C0FPiDcvOGso.roa
Signing time:             Thu 13 Apr 2023 09:53:57 +0000
ROA not before:           Thu 13 Apr 2023 09:53:57 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     63774
IP address blocks:        2402:b7c0::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5472C40748CDA9E9BC08EAE425C682617E92E4A2
        Validity
            Not Before: Apr 13 09:53:57 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=FF42FCFE324951765DC3AE82D053E20DCBCE1ACA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3d:ec:20:ce:03:15:91:fa:e3:ff:ad:82:af:
                    f2:9f:33:72:1e:20:19:4e:8f:c7:af:94:1f:22:bc:
                    87:5b:00:17:83:0e:cf:58:84:5f:41:19:f9:da:0a:
                    d2:ef:4f:1b:cd:b4:eb:3e:4d:6a:de:4d:b4:c2:3c:
                    82:2b:18:95:7c:82:97:22:f4:1d:59:54:3f:c1:2c:
                    9a:ac:dd:bb:5e:1b:0e:3c:57:40:77:fb:87:19:78:
                    46:d0:37:9f:8d:91:a3:04:e3:93:89:4a:5f:b9:1a:
                    8f:37:c4:97:ac:a1:f9:30:02:5d:8c:64:02:c2:ca:
                    b7:76:23:46:b9:87:24:b0:dc:fe:ae:3e:60:4c:57:
                    e6:be:3d:41:f0:0a:06:e9:cb:94:a0:c8:a9:13:99:
                    43:98:a9:78:b8:96:79:15:4d:be:d9:fd:89:87:57:
                    26:7e:f2:df:d6:50:61:1d:03:d4:1e:0f:b8:50:d3:
                    0e:bd:e8:97:d5:18:7c:29:87:7b:b9:1d:98:3d:94:
                    39:63:f5:cb:fe:c5:d3:80:8f:bb:e4:88:05:18:46:
                    b8:6b:0c:62:d6:03:96:b8:cc:69:85:31:c2:79:03:
                    af:a0:b3:30:0d:b0:e1:bb:21:da:c1:dc:ad:3e:76:
                    5b:83:8d:d2:86:92:b1:9e:9e:63:dd:f4:80:cd:64:
                    2b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:42:FC:FE:32:49:51:76:5D:C3:AE:82:D0:53:E2:0D:CB:CE:1A:CA
            X509v3 Authority Key Identifier:
                keyid:54:72:C4:07:48:CD:A9:E9:BC:08:EA:E4:25:C6:82:61:7E:92:E4:A2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30321/VHLEB0jNqem8COrkJcaCYX6S5KI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VHLEB0jNqem8COrkJcaCYX6S5KI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30321/_0L8_jJJUXZdw66C0FPiDcvOGso.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:b7c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:d3:25:be:a2:c8:a4:05:45:4a:19:2f:a6:9a:6e:12:4d:26:
         1a:2f:f4:ed:0a:dc:c9:b9:31:fa:c1:34:b0:a9:2e:5d:73:d5:
         91:bf:4e:7c:55:88:2f:a1:43:3b:6c:98:7c:f0:fa:64:58:ee:
         b4:bb:4a:0e:3b:68:7c:27:b3:9f:01:a8:28:60:e8:d1:7d:27:
         a0:bb:01:0c:a8:a2:76:82:83:73:15:cf:01:07:e8:a1:66:48:
         16:9a:8d:7f:19:0f:08:3e:3b:24:69:e8:63:62:4e:af:c0:5d:
         de:52:b8:ee:5d:d6:e7:d7:72:d7:f4:35:c5:5a:85:88:d3:c0:
         f9:ef:96:c7:7c:d3:48:23:03:e7:57:38:85:bb:8e:0c:36:e9:
         05:59:27:3c:c8:8b:bd:8f:dd:b2:11:6b:eb:2d:54:8d:4e:ad:
         e8:7d:26:02:3f:65:41:3a:90:44:60:6d:a8:d9:16:47:8e:82:
         71:2c:9c:2e:cc:8d:bf:74:71:46:cf:94:47:95:8f:93:97:af:
         87:88:c1:af:13:04:c4:7d:56:bc:c2:ac:f1:91:69:0a:d7:e9:
         8d:d0:09:0b:89:27:7c:40:17:94:6e:13:a6:45:85:a7:19:e0:
         46:29:f0:52:ea:18:56:ee:48:8f:c6:a6:e4:98:a1:88:e8:42:
         e9:63:65:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org