Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30327/-Jcl8AQ0FvmMH2uhLNlra0vG1TQ.roa
File:                     -Jcl8AQ0FvmMH2uhLNlra0vG1TQ.roa (raw, json)
Hash identifier:          p9d7tONWbuZzac8xzqW9OApz6Bs8m+/UGbGigqmFTTM=
Subject key identifier:   F8:97:25:F0:04:34:16:F9:8C:1F:6B:A1:2C:D9:6B:6B:4B:C6:D5:34
Certificate issuer:       /CN=62221DAD8F905C6293B90261FE5FECBC989F7FA7
Certificate serial:       2C
Authority key identifier: 62:22:1D:AD:8F:90:5C:62:93:B9:02:61:FE:5F:EC:BC:98:9F:7F:A7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YiIdrY-QXGKTuQJh_l_svJiff6c.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30327/-Jcl8AQ0FvmMH2uhLNlra0vG1TQ.roa
Signing time:             Thu 13 Apr 2023 09:50:51 +0000
ROA not before:           Thu 13 Apr 2023 09:50:51 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     63776
IP address blocks:        2403:a640::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62221DAD8F905C6293B90261FE5FECBC989F7FA7
        Validity
            Not Before: Apr 13 09:50:51 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=F89725F0043416F98C1F6BA12CD96B6B4BC6D534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:32:f4:b0:88:e5:fb:cb:ca:5a:5b:52:da:e7:
                    fd:78:a2:de:0e:a2:fe:e0:b0:22:90:80:20:bf:29:
                    63:4d:bf:41:55:68:13:b8:0b:2e:f7:27:81:70:95:
                    e9:d2:7f:a3:8f:5c:e8:41:79:af:91:4d:81:3e:1f:
                    56:fd:17:bc:7d:0e:3f:8e:17:ca:55:51:be:c4:d7:
                    9f:a7:c5:d5:1e:c0:e0:f4:a9:24:89:38:d3:29:4a:
                    ce:1a:f9:98:6a:56:d7:47:d2:5f:96:ca:e3:d7:b1:
                    41:98:c0:88:8e:70:b8:85:a2:07:e2:9a:98:dc:d3:
                    f7:5c:8d:86:b1:e0:48:e5:c9:0c:ce:ce:80:c0:be:
                    b3:be:ae:70:79:a1:0b:28:70:20:5b:b1:79:86:c3:
                    91:de:97:5f:b7:04:16:fc:1f:be:fa:21:9f:b9:f9:
                    0a:ca:2e:d3:12:33:3c:e9:d7:d9:b9:4d:97:97:78:
                    40:da:5b:06:8b:8d:3f:29:30:cb:59:6d:20:32:9f:
                    ef:38:90:a0:13:ee:66:1c:a8:eb:43:1e:e7:3e:7e:
                    90:08:fd:3a:de:9d:83:23:f7:c2:3c:a4:ca:17:a8:
                    0f:5d:cb:4f:54:2e:0e:79:22:90:e2:93:98:49:d1:
                    45:8e:82:06:55:5e:ce:b0:60:d9:62:ae:02:ae:a1:
                    58:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:97:25:F0:04:34:16:F9:8C:1F:6B:A1:2C:D9:6B:6B:4B:C6:D5:34
            X509v3 Authority Key Identifier:
                keyid:62:22:1D:AD:8F:90:5C:62:93:B9:02:61:FE:5F:EC:BC:98:9F:7F:A7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30327/YiIdrY-QXGKTuQJh_l_svJiff6c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YiIdrY-QXGKTuQJh_l_svJiff6c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30327/-Jcl8AQ0FvmMH2uhLNlra0vG1TQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:a640::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:a5:3b:b3:ab:97:54:78:b2:66:56:c6:92:98:46:b0:9e:9a:
         cb:2d:8c:24:16:a2:7d:89:dc:c5:a0:a1:90:cf:51:6c:ac:93:
         5a:93:9f:18:af:c3:7b:2a:69:c6:11:45:a8:9e:13:a8:1c:d1:
         62:04:00:08:f4:9f:e2:9e:80:62:00:ff:2d:5e:99:67:c6:2a:
         39:a0:64:20:17:fe:5e:60:bf:f1:08:fb:4a:4d:d7:7b:5e:89:
         57:46:d0:8c:c3:be:ed:44:a9:24:c5:25:d8:ee:c1:5f:3f:e6:
         f1:95:55:df:57:b9:d5:84:ed:82:2e:fe:a6:f4:44:70:1d:c4:
         9b:50:1a:bc:00:2c:6d:05:c9:6d:74:af:ae:2c:ae:18:1e:06:
         27:94:49:33:d9:c6:80:ab:93:95:ac:a5:72:ba:0c:64:03:a0:
         cb:01:b1:b9:e4:f2:52:f7:6a:04:f2:21:c3:3c:d0:99:7e:00:
         1b:5b:7d:f6:c1:6a:8f:cc:9d:b9:35:b5:c7:08:b4:b2:a6:97:
         6a:f8:e1:99:84:1a:2e:92:49:c6:0f:d9:f7:1f:27:a5:fb:6c:
         51:b8:5d:b6:8f:00:97:e9:de:b7:7a:b0:90:76:44:cb:62:d4:
         e8:bf:85:41:93:3e:f5:d4:08:af:ab:ec:28:80:83:df:48:5e:
         81:e9:33:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org