Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30391/JjKbmwc5q0jfb4gXtCQxdduXzbs.roa
File:                     JjKbmwc5q0jfb4gXtCQxdduXzbs.roa (raw, json)
Hash identifier:          NjQXvPV0sitq/1lH9L76+53L+qnTWCThTx5QD1ncZsc=
Subject key identifier:   26:32:9B:9B:07:39:AB:48:DF:6F:88:17:B4:24:31:75:DB:97:CD:BB
Certificate issuer:       /CN=4C5C52540813E5D1C736CE3F57A4C9F32699591F
Certificate serial:       03
Authority key identifier: 4C:5C:52:54:08:13:E5:D1:C7:36:CE:3F:57:A4:C9:F3:26:99:59:1F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/TFxSVAgT5dHHNs4_V6TJ8yaZWR8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30391/JjKbmwc5q0jfb4gXtCQxdduXzbs.roa
Signing time:             Mon 15 Aug 2022 04:24:34 +0000
ROA not before:           Mon 15 Aug 2022 04:24:34 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     146974
IP address blocks:        2400:1920::/32 maxlen: 128

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C5C52540813E5D1C736CE3F57A4C9F32699591F
        Validity
            Not Before: Aug 15 04:24:34 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=26329B9B0739AB48DF6F8817B4243175DB97CDBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:dd:7d:44:7a:e7:9f:78:dc:33:c5:db:8c:49:
                    21:39:6d:b0:bc:a1:d9:25:bf:f8:fc:b5:8d:e1:63:
                    a9:72:73:f2:db:67:c0:c7:f0:82:29:e0:40:98:fa:
                    2d:95:ac:e2:66:cf:4b:39:c2:14:47:3a:fd:4c:c0:
                    00:d2:71:08:11:59:df:f1:a7:3c:61:b3:ec:df:89:
                    be:73:1b:e0:8e:75:53:44:2d:18:4a:16:d6:61:73:
                    16:60:74:d2:20:92:97:24:81:4f:f3:69:94:1a:a6:
                    fb:6b:f7:2b:20:82:ab:70:14:c3:0c:28:c9:21:38:
                    b7:0b:ec:a9:36:aa:5d:5b:7d:0b:6d:53:93:04:47:
                    eb:86:5c:28:22:46:fd:36:00:72:9f:6f:f4:8f:67:
                    6a:19:04:c1:06:ae:51:91:f3:ff:b6:45:27:fc:3d:
                    72:7b:13:09:c8:00:ff:57:dc:7e:55:f7:4b:ec:8c:
                    7e:6b:26:80:3c:36:d0:7e:a8:06:ae:eb:7e:bb:bf:
                    94:5c:e5:7c:f4:6f:91:93:2f:29:7b:92:87:21:7f:
                    ed:29:d4:45:87:a8:2e:05:f6:5a:ac:3e:b8:79:4b:
                    70:07:0c:c9:d4:48:97:b7:52:2f:8b:7e:22:b7:c1:
                    3f:99:c7:04:d0:b6:f4:0d:1e:8a:00:75:0d:bb:7a:
                    4b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:32:9B:9B:07:39:AB:48:DF:6F:88:17:B4:24:31:75:DB:97:CD:BB
            X509v3 Authority Key Identifier:
                keyid:4C:5C:52:54:08:13:E5:D1:C7:36:CE:3F:57:A4:C9:F3:26:99:59:1F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30391/TFxSVAgT5dHHNs4_V6TJ8yaZWR8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/TFxSVAgT5dHHNs4_V6TJ8yaZWR8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30391/JjKbmwc5q0jfb4gXtCQxdduXzbs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:1920::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:9e:12:25:c8:2e:cb:be:92:a8:da:d2:a8:9d:e1:2d:7f:f6:
         3c:a7:af:28:c3:57:e3:c1:bc:4c:47:d4:ff:07:31:ec:3c:75:
         1f:03:69:d2:13:06:bd:df:74:05:6d:d4:02:06:c7:13:18:72:
         1f:aa:f7:14:80:8d:e5:6e:65:da:a5:e9:37:10:6e:e0:48:ee:
         4f:9a:32:38:bb:1d:27:46:80:e0:e2:ba:bf:85:14:0d:f2:ed:
         a2:8e:24:78:8c:f4:18:2e:b6:29:84:4f:8d:ec:11:37:28:5f:
         2c:72:4c:10:aa:4d:50:77:8f:99:52:f7:12:23:f9:4d:a7:97:
         78:f3:ee:a5:72:85:b6:f6:c0:22:5e:aa:59:f2:4e:90:e8:4b:
         3b:5f:ca:58:7f:b9:ac:50:44:40:0b:01:38:6b:d6:3d:e6:80:
         ce:86:3c:b3:46:ef:ca:7c:25:97:0a:e6:69:29:7b:1b:a3:f0:
         29:b4:8f:34:66:35:f1:bb:4a:39:7e:3b:50:64:a8:51:1c:a2:
         76:63:72:cb:ba:5d:3d:7e:fd:c2:2a:47:3a:c2:66:64:a5:80:
         71:e7:ed:a4:12:34:85:9d:7e:5b:09:be:63:70:70:6d:18:93:
         0e:8a:b7:eb:b2:12:bf:4d:e7:2e:e2:6e:b5:f4:57:89:92:81:
         6f:a0:2f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org