Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/-A1CbRlU_Uow4Li09Z5dStTsvrs.roa
File:                     -A1CbRlU_Uow4Li09Z5dStTsvrs.roa (raw, json)
Hash identifier:          F7An1QvJ1pvtbE5/w1k6ektox2PWZa7OQK011cVkwKc=
Subject key identifier:   F8:0D:42:6D:19:54:FD:4A:30:E0:B8:B4:F5:9E:5D:4A:D4:EC:BE:BB
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0104
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/-A1CbRlU_Uow4Li09Z5dStTsvrs.roa
Signing time:             Tue 30 May 2023 16:12:32 +0000
ROA not before:           Tue 30 May 2023 16:12:32 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:d900::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 260 (0x104)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:12:32 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=F80D426D1954FD4A30E0B8B4F59E5D4AD4ECBEBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2d:32:4b:0a:1f:6e:6e:0a:13:97:17:3f:39:
                    71:49:3a:d7:a7:ba:69:4d:bc:a1:cc:be:f8:81:57:
                    56:dd:28:a4:ae:bb:74:a3:7a:a0:15:61:fe:24:06:
                    1c:6b:7f:4a:bf:b5:23:bd:90:29:9d:5e:6f:09:36:
                    b7:d1:63:ae:41:01:52:ea:e8:98:b9:ab:dd:bd:e6:
                    40:7c:60:6e:d3:b2:a2:c6:7e:d1:da:2e:0c:8a:a7:
                    60:99:43:56:41:46:57:bc:dd:70:07:60:77:a3:78:
                    b0:f0:0e:10:fa:d3:ff:75:8f:7f:ea:b1:0c:ca:3e:
                    fc:ca:6a:eb:43:10:c9:4b:4d:60:96:ac:38:aa:8d:
                    a1:8b:91:39:61:84:03:85:80:f9:c1:96:29:87:f9:
                    91:77:7d:59:78:d0:f3:03:78:da:b4:22:91:50:07:
                    71:13:77:66:90:fd:e8:77:9f:ab:a7:fb:6e:56:08:
                    c6:7d:db:24:b4:fa:a3:5a:f9:a1:6a:a4:1d:60:7e:
                    e2:ac:b0:96:1e:a1:17:90:ab:c9:ca:6a:3d:43:9e:
                    9f:a5:c2:7c:2b:31:bd:f8:dc:c0:c8:0d:aa:59:3b:
                    f3:48:d9:71:48:08:dc:6c:d9:66:00:c8:83:44:51:
                    48:7a:92:79:a8:37:a7:60:67:ab:10:a6:5e:83:bf:
                    15:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:0D:42:6D:19:54:FD:4A:30:E0:B8:B4:F5:9E:5D:4A:D4:EC:BE:BB
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/-A1CbRlU_Uow4Li09Z5dStTsvrs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:d900::/40

    Signature Algorithm: sha256WithRSAEncryption
         a5:97:dc:1c:31:9a:5c:24:a4:ec:18:9e:9c:d7:6e:cc:fb:76:
         ed:80:34:41:fc:22:6c:9e:3f:ca:19:0f:58:12:fe:3a:b2:10:
         82:2d:66:9f:05:ff:69:02:ec:78:0b:b1:75:73:b0:16:26:50:
         ed:ad:08:57:ae:80:80:c3:67:51:b2:50:c2:31:45:01:c4:3f:
         45:50:df:9d:90:20:ab:af:ff:e8:27:67:18:c8:1a:a1:78:f1:
         1d:a3:23:ae:34:a9:af:61:79:6d:17:d1:36:ac:8e:3a:7c:cc:
         92:a7:0e:ad:d3:3a:52:ec:cd:be:c8:8e:13:c2:f2:23:a3:d1:
         6b:da:c4:32:51:dd:bd:8b:7b:e9:ec:1f:4a:09:34:49:03:dc:
         dd:5f:ad:b3:d4:1b:59:0d:d6:20:59:0b:1c:45:5e:14:2b:d0:
         4d:d8:de:18:4b:62:d4:d6:a2:23:03:a8:ad:85:38:6d:d7:b0:
         db:20:74:83:c5:b7:f1:80:8d:28:41:b0:bc:0f:1c:bc:47:6c:
         29:6c:6a:a5:35:21:cc:5c:39:32:3e:a7:a8:ef:38:c8:26:35:
         a0:d5:71:1e:dc:38:4e:9a:3a:7d:64:8e:73:e7:40:ff:59:b8:
         b7:b3:86:27:db:a2:77:4b:ee:dd:bc:65:78:b6:27:df:c0:d3:
         08:c1:0b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org