Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30358/zgolnJh-cuI0XBE00i-2r3pckDg.roa
File:                     zgolnJh-cuI0XBE00i-2r3pckDg.roa (raw, json)
Hash identifier:          w0+SUZpsFnMNyu44wgffrQfecdfIHq0r+5KqT6Zz/N4=
Subject key identifier:   CE:0A:25:9C:98:7E:72:E2:34:5C:11:34:D2:2F:B6:AF:7A:5C:90:38
Certificate issuer:       /CN=6BAC2A0E3E5791799D19FB3BE007F1E84D869796
Certificate serial:       1F
Authority key identifier: 6B:AC:2A:0E:3E:57:91:79:9D:19:FB:3B:E0:07:F1:E8:4D:86:97:96
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/a6wqDj5XkXmdGfs74Afx6E2Gl5Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30358/zgolnJh-cuI0XBE00i-2r3pckDg.roa
Signing time:             Thu 01 Sep 2022 01:28:51 +0000
ROA not before:           Thu 01 Sep 2022 01:28:51 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     131898
IP address blocks:        2400:48c0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BAC2A0E3E5791799D19FB3BE007F1E84D869796
        Validity
            Not Before: Sep  1 01:28:51 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=CE0A259C987E72E2345C1134D22FB6AF7A5C9038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:76:c6:c2:6f:65:5f:c4:d4:fb:2d:6f:91:27:
                    6b:fc:2d:f8:2b:e7:86:fa:7a:a0:30:b4:52:8c:78:
                    b2:57:b3:41:c9:ff:41:99:29:c7:9f:1a:18:b2:8e:
                    49:cb:99:e0:1e:eb:ec:e6:7a:62:72:23:a1:b9:3a:
                    d0:1c:08:b7:01:f7:2e:be:88:b8:20:f1:6f:6c:7d:
                    1a:24:52:02:a5:4c:ef:00:f0:a9:17:0b:7c:20:dc:
                    d9:df:1f:7a:7e:7c:14:be:3e:96:59:c2:c0:5f:0d:
                    46:65:f9:21:83:d5:c6:c7:08:51:a5:20:6f:98:82:
                    68:ed:35:e2:cb:8b:2f:03:63:43:49:af:c6:5e:73:
                    20:0b:37:66:b1:bd:fb:7a:88:d6:f8:88:2b:18:2b:
                    f7:4c:79:d6:ac:a0:6d:8d:a8:33:dc:29:dd:98:58:
                    69:0d:39:d5:26:da:fd:ea:51:12:c6:91:5a:8e:bb:
                    a8:40:af:3a:eb:05:fe:12:8f:91:b0:c8:12:d7:a1:
                    33:e3:24:f2:d5:ce:10:6d:3a:90:64:03:45:19:68:
                    99:c8:06:44:61:a7:85:53:f6:57:85:c2:94:8a:6a:
                    9e:f5:a0:4e:b2:24:ed:cb:b3:32:ee:17:49:8c:95:
                    30:30:13:11:1c:94:42:cb:50:ae:90:cd:04:ad:5b:
                    b4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:0A:25:9C:98:7E:72:E2:34:5C:11:34:D2:2F:B6:AF:7A:5C:90:38
            X509v3 Authority Key Identifier:
                keyid:6B:AC:2A:0E:3E:57:91:79:9D:19:FB:3B:E0:07:F1:E8:4D:86:97:96

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30358/a6wqDj5XkXmdGfs74Afx6E2Gl5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/a6wqDj5XkXmdGfs74Afx6E2Gl5Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30358/zgolnJh-cuI0XBE00i-2r3pckDg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:48c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:31:b7:b2:e2:3d:55:cf:85:1f:96:b0:b6:8d:77:f8:2d:b5:
         a5:ec:82:c8:47:14:72:c8:98:b7:f1:ad:5c:f5:84:7c:21:4e:
         bc:1b:5f:46:ce:64:f0:28:db:a1:26:71:84:f5:b7:dd:33:50:
         b9:cd:88:77:98:d1:02:d7:4e:71:d6:e7:ab:26:dc:0a:5c:bd:
         29:72:f9:5d:20:3b:b6:97:6d:31:46:3e:1e:ab:dd:fb:31:4c:
         41:54:1c:53:6e:f0:88:23:d1:5d:8a:08:ac:69:5d:fd:0b:3f:
         cd:5f:78:c4:bb:b0:ee:4c:0e:39:4c:63:cd:9b:1f:bf:4b:36:
         32:89:4d:35:0c:39:2a:51:ca:66:3e:19:cb:08:b5:70:bc:4e:
         5b:49:e4:40:29:06:7e:07:4a:92:98:91:7d:19:97:8b:5e:b7:
         f9:bb:3c:81:a6:70:82:39:96:88:81:77:07:c0:18:0f:93:65:
         8a:78:b3:aa:b6:db:fd:37:53:da:52:d5:10:e9:d8:92:e6:02:
         22:a8:97:e0:82:00:66:92:81:74:76:a7:58:4a:ac:79:c4:0e:
         5c:24:b0:95:2b:ae:d2:ce:79:dc:6b:bb:1f:71:67:61:b9:a5:
         5f:0e:77:ab:ad:91:24:9a:ae:1d:7d:32:8c:f6:46:ac:a1:56:
         3f:ce:06:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org