Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/-f80S0qsqD0jGLmEc2WDkhYHLpM.roa
File:                     -f80S0qsqD0jGLmEc2WDkhYHLpM.roa (raw, json)
Hash identifier:          yfdC3OfVtBLgNZJv67rEkb4Wt0hNml8ZAy7N929TxK4=
Subject key identifier:   F9:FF:34:4B:4A:AC:A8:3D:23:18:B9:84:73:65:83:92:16:07:2E:93
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0214
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/-f80S0qsqD0jGLmEc2WDkhYHLpM.roa
Signing time:             Tue 30 May 2023 17:40:28 +0000
ROA not before:           Tue 30 May 2023 17:40:28 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:1d00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 532 (0x214)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:40:28 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=F9FF344B4AACA83D2318B9847365839216072E93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3e:51:55:69:ef:50:f7:f2:11:27:68:c0:67:
                    9e:c9:01:81:2d:7d:8d:b0:2a:7e:fe:07:7f:14:78:
                    cf:fa:fb:88:fe:dc:51:0b:8f:31:83:7f:2d:5d:48:
                    4d:ae:f1:bc:f3:7b:a2:65:27:2a:a0:74:da:c3:70:
                    69:4b:1c:4d:7a:ac:ee:e5:84:b9:cf:1f:d8:ad:16:
                    eb:c9:da:e7:72:f7:d2:5c:3f:04:36:15:c5:54:4b:
                    38:65:10:e9:2a:d8:12:31:41:97:78:59:97:2b:0c:
                    84:1c:74:80:bb:08:5f:8d:28:73:ac:4b:23:3d:9e:
                    a5:b4:ab:16:60:f7:70:d2:76:49:23:e9:4b:f8:4f:
                    85:2d:19:fc:13:b5:59:61:12:f6:f7:ef:76:94:d2:
                    7a:6d:11:1b:b9:00:88:0e:bd:df:2e:58:92:af:91:
                    f5:f2:22:ff:05:d2:28:2b:8e:fb:a1:a2:88:1f:76:
                    7f:e0:34:34:fc:bd:e2:ee:11:00:4d:46:6d:00:c6:
                    08:30:9f:2d:f6:a7:a6:c4:82:40:7f:59:4c:c2:2a:
                    ab:a2:7f:c3:ea:49:45:3b:1e:e0:fe:f8:78:2d:5c:
                    67:23:fc:79:bb:f5:25:fb:7d:28:ae:74:f5:0f:72:
                    82:49:51:f0:14:de:a3:c1:e7:97:4f:7e:f1:03:66:
                    eb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:FF:34:4B:4A:AC:A8:3D:23:18:B9:84:73:65:83:92:16:07:2E:93
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/-f80S0qsqD0jGLmEc2WDkhYHLpM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:1d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         05:6c:8d:42:3f:89:e1:18:98:b1:e4:e0:ac:4a:71:06:5b:c5:
         f2:df:ef:4b:e1:c0:01:c5:0b:69:f2:2f:70:32:9d:d3:df:63:
         96:8f:99:ee:19:e8:3f:82:c7:7c:37:b3:a8:59:08:77:fb:0f:
         1a:74:05:75:95:de:e4:6c:09:d6:e3:2e:c4:4a:47:e5:91:05:
         5c:57:eb:ca:00:b5:e4:48:7f:5d:43:2b:45:37:46:19:f5:95:
         3f:04:fe:10:81:fc:84:24:ef:83:c5:11:72:b8:7a:9d:ba:69:
         0d:7f:d2:fa:92:1e:14:9b:9f:59:23:fe:12:12:97:d5:d6:a9:
         f8:68:7d:59:dd:fd:fa:fe:c7:78:3d:89:c8:73:1c:ce:31:d2:
         a6:41:e8:d4:06:b3:c8:ec:1e:52:62:bd:b2:b4:27:f2:2e:b7:
         88:02:0d:02:f4:94:ab:4c:cf:4b:bb:5f:2b:8c:f6:56:09:ee:
         7a:4f:61:39:c5:f6:90:94:2c:81:0b:fe:2b:50:ca:b3:61:45:
         86:9a:37:db:e7:38:2f:69:2e:70:84:79:ae:33:01:2c:9a:60:
         13:11:c6:70:1a:cc:ac:d7:00:15:94:e2:fe:a1:7f:e8:b7:92:
         e1:94:ea:89:43:63:f5:a7:69:60:85:3e:66:43:b8:71:ca:9f:
         f6:99:c5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org