Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30357/eMPSyJhpcYK4l1l8LDSf6OfUzBM.roa
File:                     eMPSyJhpcYK4l1l8LDSf6OfUzBM.roa (raw, json)
Hash identifier:          g3jf84V0Y98Qyfv/5riYmofd2aK+W1s8mQNZHDA4Iqk=
Subject key identifier:   78:C3:D2:C8:98:69:71:82:B8:97:59:7C:2C:34:9F:E8:E7:D4:CC:13
Certificate issuer:       /CN=A147363993399A2355D9A8BC90FB61382A2E8C38
Certificate serial:       02
Authority key identifier: A1:47:36:39:93:39:9A:23:55:D9:A8:BC:90:FB:61:38:2A:2E:8C:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/oUc2OZM5miNV2ai8kPthOCoujDg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30357/eMPSyJhpcYK4l1l8LDSf6OfUzBM.roa
Signing time:             Mon 25 Jul 2022 03:58:07 +0000
ROA not before:           Mon 25 Jul 2022 03:58:07 +0000
ROA not after:            Tue 25 Jul 2023 03:53:58 +0000
asID:                     23816
IP address blocks:        2404:a600::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A147363993399A2355D9A8BC90FB61382A2E8C38
        Validity
            Not Before: Jul 25 03:58:07 2022 GMT
            Not After : Jul 25 03:53:58 2023 GMT
        Subject: CN=78C3D2C898697182B897597C2C349FE8E7D4CC13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:36:d2:08:1e:04:47:5b:2b:c9:1f:d4:e3:dd:
                    7c:ca:a1:57:b0:02:74:28:e5:62:92:fd:fa:c0:dd:
                    4d:31:42:23:d7:fe:f8:e9:ca:76:0a:6b:69:81:e3:
                    21:55:36:7d:13:e1:c0:cc:e5:14:c2:34:18:22:8d:
                    88:d3:c0:ba:aa:db:3d:bd:c1:8a:6c:94:85:e6:c2:
                    a6:bb:f9:48:3c:6a:28:27:67:16:a5:22:65:d7:1f:
                    f6:9f:da:69:21:e7:ab:21:df:49:fa:08:28:9c:ee:
                    1c:2c:9d:83:d2:08:98:1b:8f:84:23:88:70:7c:9f:
                    cf:35:42:29:9b:3e:2d:c6:a2:11:dd:d5:ae:32:62:
                    21:16:4b:5c:8e:c4:c4:eb:80:dc:ad:fd:fb:0f:13:
                    cd:2d:05:68:b7:2b:16:f1:c7:aa:a8:2d:51:0b:a5:
                    e9:a5:b2:2e:0f:9a:81:bc:9e:a4:9f:59:e8:e6:1c:
                    5f:f1:bf:6c:b4:72:1d:13:c4:b2:c3:0d:95:90:77:
                    7f:3a:3e:b1:be:88:79:b3:1b:d3:8b:09:5b:c6:53:
                    fd:a3:d4:9c:68:f1:28:f8:99:21:b9:ad:42:ad:22:
                    7f:fb:e7:3f:41:d0:cf:da:19:a3:c9:f0:4e:63:60:
                    e9:35:2a:4b:28:99:5d:ac:10:96:3d:1d:19:e6:a0:
                    55:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C3:D2:C8:98:69:71:82:B8:97:59:7C:2C:34:9F:E8:E7:D4:CC:13
            X509v3 Authority Key Identifier:
                keyid:A1:47:36:39:93:39:9A:23:55:D9:A8:BC:90:FB:61:38:2A:2E:8C:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30357/oUc2OZM5miNV2ai8kPthOCoujDg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/oUc2OZM5miNV2ai8kPthOCoujDg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30357/eMPSyJhpcYK4l1l8LDSf6OfUzBM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:a600::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:44:44:0c:b8:76:cf:45:fc:23:16:5c:fb:27:88:70:2a:64:
         78:a5:7e:1e:79:06:77:a6:47:94:ff:94:e4:0b:f1:36:64:7e:
         16:4b:19:0c:cf:07:23:55:4a:11:9c:a3:4e:1e:dc:68:87:81:
         e7:3b:bd:26:a9:1c:bf:8c:c1:bf:7e:66:b0:f9:4f:9b:0d:f3:
         f1:79:3d:a9:97:13:0f:e2:ec:1d:b5:4b:4e:3c:ff:b0:1d:32:
         0f:35:40:49:7f:1c:13:b3:90:25:ce:87:b9:7d:c9:91:bd:da:
         a3:89:7f:b8:5e:2f:81:f8:12:d5:07:f5:6d:c7:84:b6:2c:45:
         c3:05:dc:11:37:9d:7c:7a:e7:4b:64:d7:96:7c:be:37:2d:35:
         32:e6:bd:1f:b0:91:ac:c5:97:f9:52:e2:a9:ba:32:d3:b5:ae:
         43:0a:4a:b4:4d:6f:ce:43:be:79:cf:86:e1:74:dc:ce:79:b7:
         09:10:6a:1b:fc:85:6c:78:ae:aa:2f:58:07:9c:0f:d0:ff:a5:
         24:da:e3:53:dc:79:78:7e:62:70:7e:e7:d6:f6:d9:b4:a5:e1:
         0b:75:3d:d9:2d:b2:2e:e2:96:3f:fa:54:6b:54:29:1a:d9:cb:
         c9:3a:f2:83:38:2c:c0:84:be:f2:b4:54:9c:ce:0a:d2:9f:e6:
         0f:b9:ce:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org