Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/39061/pHLsOL5phpzXmxYYe4IjJQQgtMk.roa
File:                     pHLsOL5phpzXmxYYe4IjJQQgtMk.roa (raw, json)
Hash identifier:          fj/q7jqTc8QRbEfixg25e7HhjQoGhMZ7sxDsYqlLgrE=
Subject key identifier:   A4:72:EC:38:BE:69:86:9C:D7:9B:16:18:7B:82:23:25:04:20:B4:C9
Certificate issuer:       /CN=F1627C3C233E79637AC9DC035CDF50B789FC67AF
Certificate serial:       0E
Authority key identifier: F1:62:7C:3C:23:3E:79:63:7A:C9:DC:03:5C:DF:50:B7:89:FC:67:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8WJ8PCM-eWN6ydwDXN9Qt4n8Z68.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39061/pHLsOL5phpzXmxYYe4IjJQQgtMk.roa
Signing time:             Tue 06 Jun 2023 03:04:39 +0000
ROA not before:           Tue 06 Jun 2023 03:04:39 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     131948
IP address blocks:        2001:df0:2440::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1627C3C233E79637AC9DC035CDF50B789FC67AF
        Validity
            Not Before: Jun  6 03:04:39 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=A472EC38BE69869CD79B16187B8223250420B4C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:88:75:13:59:a3:0e:81:a0:3b:00:13:e4:94:
                    6b:43:06:62:42:fa:97:e3:2a:53:11:5a:25:87:d9:
                    9d:94:e1:d6:07:b1:ad:8e:35:47:47:f6:13:dd:17:
                    c7:67:2b:07:ec:de:6a:18:a8:fe:a9:7f:22:36:d9:
                    0d:2c:88:0a:a4:98:b2:a6:ae:f1:e2:12:6f:a2:b1:
                    1a:23:27:67:33:6a:4b:67:6a:e1:13:4a:dd:f0:ae:
                    69:c2:cb:22:6e:6d:63:86:02:8e:c8:29:d2:af:5e:
                    65:ea:4e:80:80:d5:87:5c:98:99:8e:7f:be:50:c8:
                    df:7f:0e:90:5e:43:dc:7f:b8:36:38:8b:81:35:fa:
                    3a:ec:d5:f6:19:d2:55:05:3c:41:6c:34:f8:16:93:
                    43:6c:c4:34:fc:4d:f2:1a:4b:17:67:c6:a8:05:15:
                    88:de:89:71:a4:54:8a:68:77:a3:24:bc:f7:9c:7a:
                    99:20:59:07:95:50:a0:23:98:d7:be:9e:2e:d2:e4:
                    5d:a1:cd:2e:33:e5:a9:01:7a:92:5c:7a:bc:90:0e:
                    11:c0:a6:07:e4:73:5f:38:82:0d:f8:d8:f8:c7:61:
                    09:2a:19:c7:73:50:76:6d:ec:dd:15:14:47:8d:43:
                    42:50:a3:08:db:c8:e8:2c:36:33:1d:16:3c:b1:5e:
                    08:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:72:EC:38:BE:69:86:9C:D7:9B:16:18:7B:82:23:25:04:20:B4:C9
            X509v3 Authority Key Identifier:
                keyid:F1:62:7C:3C:23:3E:79:63:7A:C9:DC:03:5C:DF:50:B7:89:FC:67:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39061/8WJ8PCM-eWN6ydwDXN9Qt4n8Z68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8WJ8PCM-eWN6ydwDXN9Qt4n8Z68.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39061/pHLsOL5phpzXmxYYe4IjJQQgtMk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:2440::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:79:25:b1:7b:dd:82:42:1d:b1:b3:d4:89:0b:77:67:e4:d9:
         e3:11:ef:dd:8b:fb:fc:e7:c9:76:7e:98:77:4f:d9:f5:f1:77:
         05:4a:09:ef:85:b5:5a:ae:80:de:00:a3:b5:95:07:ef:72:44:
         e2:e9:ab:f1:b4:b9:c5:27:23:94:27:16:29:94:bd:a5:08:ed:
         e0:b3:8d:31:ec:29:f8:6b:bc:83:b5:a8:4a:55:e3:da:bb:f7:
         0a:65:5b:27:83:a5:c1:77:8b:d3:39:df:48:ea:d2:38:e6:de:
         e5:90:e9:2e:d5:17:8a:87:18:e4:ad:11:c1:74:1a:fa:cc:00:
         e4:47:09:fd:8a:51:00:e7:06:9f:f2:17:06:0a:23:08:43:0e:
         3b:75:7f:34:4c:4d:5c:62:ac:83:da:4a:63:44:0d:84:70:c0:
         9a:f2:84:f0:21:32:0a:6a:af:09:7b:df:75:07:8f:98:43:68:
         d8:d1:d6:59:76:aa:de:58:e3:5e:55:12:1b:c3:07:c3:c9:31:
         42:a5:40:12:19:aa:e2:de:d1:5b:9b:59:2f:d7:66:9f:be:0d:
         8a:ed:dd:de:8b:c1:b1:73:2f:ff:4f:29:d6:35:32:cd:35:15:
         9d:f2:89:38:08:c4:db:fd:e8:e5:1f:ce:65:0b:1b:d4:8a:73:
         03:3f:d3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:52 2024 by rpki-client on console-fra.rpki-client.org