Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30414/_QQ57M9bmyY3_ieuz0st7SuTEiI.roa
File:                     _QQ57M9bmyY3_ieuz0st7SuTEiI.roa (raw, json)
Hash identifier:          UeuuQ0TfEY240GWvhKCfW0FMFq1pL/b0PjgSfYtY1RU=
Subject key identifier:   FD:04:39:EC:CF:5B:9B:26:37:FE:27:AE:CF:4B:2D:ED:2B:93:12:22
Certificate issuer:       /CN=F5350E57EF95120131B2371ECBCA5971DE119AF3
Certificate serial:       02
Authority key identifier: F5:35:0E:57:EF:95:12:01:31:B2:37:1E:CB:CA:59:71:DE:11:9A:F3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9TUOV--VEgExsjcey8pZcd4RmvM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30414/_QQ57M9bmyY3_ieuz0st7SuTEiI.roa
Signing time:             Wed 08 Feb 2023 11:29:26 +0000
ROA not before:           Wed 08 Feb 2023 11:29:26 +0000
ROA not after:            Thu 08 Feb 2024 11:22:36 +0000
asID:                     55376
IP address blocks:        2400:c8a0::/32 maxlen: 128

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5350E57EF95120131B2371ECBCA5971DE119AF3
        Validity
            Not Before: Feb  8 11:29:26 2023 GMT
            Not After : Feb  8 11:22:36 2024 GMT
        Subject: CN=FD0439ECCF5B9B2637FE27AECF4B2DED2B931222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:60:6c:23:bf:b5:ca:3e:85:53:4c:95:ea:a7:
                    aa:4f:ac:83:00:61:c9:e4:6f:b6:64:cb:6e:cb:b9:
                    08:b4:2a:17:3e:17:92:03:31:1a:55:5d:19:24:ea:
                    38:9b:2d:43:f3:cb:ca:7e:a0:0c:17:79:b2:7c:06:
                    4a:55:54:f2:7c:2a:f5:e0:5b:74:74:ae:fc:09:54:
                    2c:06:93:09:43:0e:5d:91:2a:2f:97:5e:d4:5d:9d:
                    ee:99:80:53:c1:22:79:8f:1e:44:a6:df:80:9d:81:
                    f2:d0:10:8f:18:d6:ff:d7:73:9f:7b:12:7e:b7:05:
                    bb:99:a9:b5:24:8c:19:df:7e:96:48:25:8e:e1:c3:
                    c6:80:d9:be:d7:a4:ff:4b:b9:3f:54:7f:cd:fa:ba:
                    be:a6:46:04:89:68:5e:eb:15:82:22:cb:22:67:85:
                    5e:67:c7:65:4f:d0:17:b0:93:21:c2:e9:74:57:6e:
                    ea:05:5b:55:08:53:8c:c0:bd:8e:21:c4:a7:91:97:
                    e0:be:6e:21:ba:5f:8e:8d:06:2a:e2:ca:34:b3:8e:
                    62:2d:53:bb:f2:c4:a2:59:17:b2:89:a7:de:a6:b1:
                    88:ab:f8:35:cb:29:fb:22:85:3d:ff:f1:f8:81:21:
                    a6:f0:7e:36:f1:bc:52:08:32:92:0d:0d:e0:4c:34:
                    72:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:04:39:EC:CF:5B:9B:26:37:FE:27:AE:CF:4B:2D:ED:2B:93:12:22
            X509v3 Authority Key Identifier:
                keyid:F5:35:0E:57:EF:95:12:01:31:B2:37:1E:CB:CA:59:71:DE:11:9A:F3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30414/9TUOV--VEgExsjcey8pZcd4RmvM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9TUOV--VEgExsjcey8pZcd4RmvM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30414/_QQ57M9bmyY3_ieuz0st7SuTEiI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:c8a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:68:c2:26:1b:c8:fc:90:79:bf:0f:f4:f2:c2:42:02:e6:23:
         68:48:37:c4:5b:6d:6b:71:c2:5c:4b:d2:68:0c:1a:3a:35:a5:
         58:79:87:d8:20:5e:45:e3:be:42:3f:bf:bf:68:ce:3e:d0:b3:
         6e:63:ea:99:01:3d:a3:b0:46:f6:ac:71:cd:cd:20:4e:87:d4:
         53:89:99:65:aa:5b:13:f8:0a:02:a9:ee:f4:2b:35:c7:9b:69:
         f2:64:d7:82:2f:41:02:74:16:8a:6f:d7:4d:aa:ba:6c:df:a7:
         24:ec:4c:b4:c4:35:3c:5f:f0:f2:1b:d8:c4:75:71:8c:48:36:
         fa:32:88:1a:6f:05:85:67:c1:aa:cd:17:08:bd:13:f1:a8:3c:
         39:e8:19:4a:b2:21:40:c1:72:d5:68:39:e8:f9:33:04:63:f2:
         72:dc:87:d3:66:0a:82:2f:77:f4:67:72:b1:4f:68:f2:ea:6c:
         54:55:1e:9c:8f:88:49:b3:f2:dd:9d:47:bc:8b:18:d3:99:ca:
         1b:28:4c:50:cd:b7:11:c3:ab:a9:c4:7f:d8:26:56:47:e5:2e:
         7d:37:46:4a:be:5a:1e:94:eb:39:9c:e4:7f:36:35:f1:0d:45:
         eb:89:cf:a5:b6:ae:36:a8:13:b4:e4:30:a0:76:e5:1d:3a:fb:
         38:31:d2:09
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGNTM1
MEU1N0VGOTUxMjAxMzFCMjM3MUVDQkNBNTk3MURFMTE5QUYzMB4XDTIzMDIwODEx
MjkyNloXDTI0MDIwODExMjIzNlowMzExMC8GA1UEAxMoRkQwNDM5RUNDRjVCOUIy
NjM3RkUyN0FFQ0Y0QjJERUQyQjkzMTIyMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKRgbCO/tco+hVNMleqnqk+sgwBhyeRvtmTLbsu5CLQqFz4XkgMx
GlVdGSTqOJstQ/PLyn6gDBd5snwGSlVU8nwq9eBbdHSu/AlULAaTCUMOXZEqL5de
1F2d7pmAU8EieY8eRKbfgJ2B8tAQjxjW/9dzn3sSfrcFu5mptSSMGd9+lkgljuHD
xoDZvtek/0u5P1R/zfq6vqZGBIloXusVgiLLImeFXmfHZU/QF7CTIcLpdFdu6gVb
VQhTjMC9jiHEp5GX4L5uIbpfjo0GKuLKNLOOYi1Tu/LEolkXsomn3qaxiKv4Ncsp
+yKFPf/x+IEhpvB+NvG8Uggykg0N4Ew0cnUCAwEAAaOCAikwggIlMB0GA1UdDgQW
BBT9BDnsz1ubJjf+J67PSy3tK5MSIjAfBgNVHSMEGDAWgBT1NQ5X75USATGyNx7L
yllx3hGa8zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzA0MTQvOVRVT1YtLVZFZ0V4c2pjZXk4cFpjZDRSbXZNLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvOVRVT1YtLVZFZ0V4c2pjZXk4cFpj
ZDRSbXZNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwNDE0L19RUTU3TTlibXlZM19pZXV6MHN0N1N1VEVpSS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAkAMigMA0GCSqGSIb3DQEBCwUAA4IBAQApaMImG8j8kHm/D/TywkIC
5iNoSDfEW21rccJcS9JoDBo6NaVYeYfYIF5F475CP7+/aM4+0LNuY+qZAT2jsEb2
rHHNzSBOh9RTiZllqlsT+AoCqe70KzXHm2nyZNeCL0ECdBaKb9dNqrps36ck7Ey0
xDU8X/DyG9jEdXGMSDb6MogabwWFZ8GqzRcIvRPxqDw56BlKsiFAwXLVaDno+TME
Y/Jy3IfTZgqCL3f0Z3KxT2jy6mxUVR6cj4hJs/LdnUe8ixjTmcobKExQzbcRw6up
xH/YJlZH5S59N0ZKvloelOs5nOR/NjXxDUXric+ltq42qBO05DCgduUdOvs4MdIJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:00 2024 by rpki-client on console-ams.rpki-client.org