Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30404/YEGoC-XMTot9vQIyYsIYMHPe6VQ.roa
File:                     YEGoC-XMTot9vQIyYsIYMHPe6VQ.roa (raw, json)
Hash identifier:          LyQmX+cHIs77+bHkDL427R1DHKwYs+OoHITFNw5cVhk=
Subject key identifier:   60:41:A8:0B:E5:CC:4E:8B:7D:BD:02:32:62:C2:18:30:73:DE:E9:54
Certificate issuer:       /CN=100C42066C88299B48A96AFDD4B5AF6B599DB1FA
Certificate serial:       02
Authority key identifier: 10:0C:42:06:6C:88:29:9B:48:A9:6A:FD:D4:B5:AF:6B:59:9D:B1:FA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EAxCBmyIKZtIqWr91LWva1mdsfo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30404/YEGoC-XMTot9vQIyYsIYMHPe6VQ.roa
Signing time:             Fri 14 Oct 2022 01:31:06 +0000
ROA not before:           Fri 14 Oct 2022 01:31:06 +0000
ROA not after:            Sat 14 Oct 2023 01:20:19 +0000
asID:                     37908
IP address blocks:        2400:8320::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=100C42066C88299B48A96AFDD4B5AF6B599DB1FA
        Validity
            Not Before: Oct 14 01:31:06 2022 GMT
            Not After : Oct 14 01:20:19 2023 GMT
        Subject: CN=6041A80BE5CC4E8B7DBD023262C2183073DEE954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3d:f8:97:82:f9:95:d3:04:15:4a:ec:08:9b:
                    bf:c4:d4:b0:e2:8b:03:f8:9e:3b:66:6e:d0:54:63:
                    24:57:da:7f:fb:47:2f:e4:dd:e9:3b:56:af:24:2d:
                    02:de:5f:b2:19:b9:82:75:30:4f:58:d0:b3:74:47:
                    11:57:41:57:f5:63:39:ca:95:ad:d0:5e:0d:c5:04:
                    36:b0:56:3e:c1:a6:9c:90:55:66:e3:a4:8b:22:0f:
                    75:6e:ac:db:2d:9c:a8:a1:30:19:4d:65:58:56:50:
                    e6:cc:2d:e4:71:f5:db:62:45:75:51:b0:5f:20:e6:
                    f2:37:02:af:17:f7:6d:f1:56:98:67:cf:5b:54:33:
                    da:88:7e:2c:f1:18:1d:05:d7:bb:8b:32:40:96:d0:
                    eb:d9:c9:32:15:2f:66:a5:cb:39:09:ff:26:cc:6f:
                    8b:73:c4:68:c4:58:35:2f:59:a1:ea:a2:4a:63:60:
                    06:d9:2a:b4:f4:46:f8:25:ca:54:ca:cc:ea:0a:73:
                    d1:12:d4:96:63:ad:3a:bc:e4:15:61:ed:19:5c:b3:
                    7a:94:5d:05:04:64:55:34:55:ad:67:a2:fa:94:1c:
                    66:67:21:87:39:6e:61:5e:6a:49:26:e3:35:b3:c5:
                    13:7d:f1:fa:f0:1d:e7:3b:8a:4b:34:53:78:92:c5:
                    b4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:41:A8:0B:E5:CC:4E:8B:7D:BD:02:32:62:C2:18:30:73:DE:E9:54
            X509v3 Authority Key Identifier:
                keyid:10:0C:42:06:6C:88:29:9B:48:A9:6A:FD:D4:B5:AF:6B:59:9D:B1:FA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30404/EAxCBmyIKZtIqWr91LWva1mdsfo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EAxCBmyIKZtIqWr91LWva1mdsfo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30404/YEGoC-XMTot9vQIyYsIYMHPe6VQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8320::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:bc:42:72:08:27:f4:25:0d:f7:a9:09:26:5b:dd:11:5f:86:
         4a:21:f0:ba:77:70:b2:f0:bb:ab:98:02:dd:6c:cd:2e:e5:8a:
         6a:a3:05:3f:55:34:68:86:c4:97:f7:96:f0:09:08:fb:ef:20:
         70:f2:62:71:52:5b:06:a4:91:a0:65:6d:f9:6e:b6:69:a0:66:
         e0:e2:4d:5c:22:29:7b:c2:56:6a:76:52:c4:d7:34:59:ea:11:
         42:e2:9a:1a:7c:eb:ed:20:eb:2b:11:06:3a:31:71:20:04:a8:
         a6:1e:e5:af:de:70:db:9f:9f:1c:05:6e:51:39:e1:12:cf:0c:
         2e:e7:8c:f9:0b:f9:93:17:96:c8:04:14:ec:ac:cc:47:3e:cc:
         8c:23:76:b6:ab:ce:96:92:5b:47:c3:60:8d:dd:a4:ea:c8:36:
         98:e0:f4:47:f3:18:40:74:71:8b:8c:80:ce:81:01:55:55:46:
         d0:67:73:16:28:1b:a8:a3:88:f4:87:51:2b:0f:b2:91:45:8d:
         b3:d0:84:bc:f1:48:a0:40:61:0b:c6:41:cf:8c:af:1d:0b:fb:
         de:79:d0:90:cc:34:90:53:6b:c3:e9:30:b6:a1:3f:c0:51:9e:
         4c:fd:a6:d6:55:f7:5a:13:e0:98:33:c8:fa:db:65:61:9a:36:
         a4:ec:83:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:50 2024 by rpki-client on console-fra.rpki-client.org