Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30400/yd0sLfwMTANtSXXwktqRUQoeYyQ.roa
File:                     yd0sLfwMTANtSXXwktqRUQoeYyQ.roa (raw, json)
Hash identifier:          7MWJK2JbGF9zKHqPYltGikhZN8jIPiId8WNjO1J8Qrs=
Subject key identifier:   C9:DD:2C:2D:FC:0C:4C:03:6D:49:75:F0:92:DA:91:51:0A:1E:63:24
Certificate issuer:       /CN=0DEDB24B5E5CDA80EA9BD8D00BE27AA0804EA808
Certificate serial:       13
Authority key identifier: 0D:ED:B2:4B:5E:5C:DA:80:EA:9B:D8:D0:0B:E2:7A:A0:80:4E:A8:08
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/De2yS15c2oDqm9jQC-J6oIBOqAg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30400/yd0sLfwMTANtSXXwktqRUQoeYyQ.roa
Signing time:             Fri 17 Mar 2023 08:43:02 +0000
ROA not before:           Fri 17 Mar 2023 08:43:02 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     63784
IP address blocks:        2406:ab40::/28 maxlen: 28

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DEDB24B5E5CDA80EA9BD8D00BE27AA0804EA808
        Validity
            Not Before: Mar 17 08:43:02 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=C9DD2C2DFC0C4C036D4975F092DA91510A1E6324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:81:88:01:e2:c4:80:7b:8d:ef:81:e5:0f:67:
                    0f:19:56:d8:26:c4:04:71:5f:2c:d9:f2:e4:2e:42:
                    b8:77:16:29:9e:b0:f9:3a:9e:0c:0f:2d:49:79:0c:
                    a6:d1:92:15:ff:d2:60:a0:f8:6f:e0:54:58:c4:74:
                    39:60:81:8e:7b:0e:3a:04:f8:9a:a7:ec:3b:8b:fb:
                    78:f1:92:df:15:d4:97:22:df:f3:ca:79:bd:3d:b7:
                    fd:47:13:c7:79:68:f5:06:f3:d8:59:de:8d:c9:22:
                    fe:ba:c9:74:56:35:dc:37:ba:fa:9d:b0:57:17:90:
                    45:6a:4a:ea:e9:b9:2d:0e:3f:c9:53:3e:4e:84:d8:
                    6a:95:f6:e0:e9:14:22:ff:e9:69:66:8b:a8:7c:fc:
                    28:52:6d:a6:a6:a9:8a:8b:13:ae:8a:93:f4:cc:a4:
                    6a:81:8a:91:ce:00:0e:44:da:da:19:8e:1a:74:e7:
                    b2:11:94:48:4b:84:d6:d3:e7:53:97:9b:3d:db:6f:
                    6c:4a:cb:f7:39:67:f3:f0:80:30:f9:33:03:7a:a9:
                    c7:0c:08:7d:0a:c4:9c:90:b4:85:ab:9d:bf:e6:a6:
                    14:0f:7b:21:a6:dd:e9:75:fe:a4:61:61:21:60:6a:
                    65:de:2c:7e:d6:ac:16:87:5f:cf:5e:89:a4:0e:e8:
                    67:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:DD:2C:2D:FC:0C:4C:03:6D:49:75:F0:92:DA:91:51:0A:1E:63:24
            X509v3 Authority Key Identifier:
                keyid:0D:ED:B2:4B:5E:5C:DA:80:EA:9B:D8:D0:0B:E2:7A:A0:80:4E:A8:08

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30400/De2yS15c2oDqm9jQC-J6oIBOqAg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/De2yS15c2oDqm9jQC-J6oIBOqAg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30400/yd0sLfwMTANtSXXwktqRUQoeYyQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:ab40::/28

    Signature Algorithm: sha256WithRSAEncryption
         41:ea:40:6a:6d:3f:f8:5b:75:c6:03:33:38:47:bc:ef:20:f8:
         77:ed:71:dc:f0:1f:05:bf:87:02:5f:7a:44:dc:19:85:51:8b:
         d4:5b:90:df:0b:a8:31:76:83:90:7a:ad:7c:f4:1f:4e:ff:94:
         e5:17:0b:3e:b7:69:7b:31:ec:fe:8a:ee:be:53:5d:10:fe:20:
         b1:7f:a2:8d:81:28:18:66:fd:0f:9e:a4:1a:c8:4b:49:de:23:
         8a:4e:e0:e5:ea:b1:7a:23:a4:1c:a8:0b:69:03:8f:f1:f4:c6:
         aa:85:69:1c:5a:26:00:e5:ec:5c:77:44:0c:53:de:4c:f3:61:
         e3:2e:c4:e9:51:44:d1:ed:45:45:1f:65:bb:53:77:44:df:ab:
         18:a9:4e:3d:48:02:69:eb:29:e2:00:e8:3f:85:2a:06:d8:7c:
         e1:dd:d1:f6:38:6c:3a:4a:eb:72:2f:9b:3e:de:7b:ee:95:89:
         1c:f5:62:3b:44:e1:53:e4:47:77:cc:89:b6:26:ab:53:58:e1:
         40:85:a1:d5:cd:b0:65:a0:69:7f:01:3c:ce:4b:f9:64:24:ea:
         23:2e:0c:4a:28:75:fb:25:56:fc:a9:2d:ed:97:83:b7:30:b4:
         af:dd:63:29:84:b3:3a:b9:a3:d7:f3:17:7a:bf:f9:f2:86:fa:
         4e:31:63:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org