Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/-gblbrR4skNN_r4_i846kEwImuk.roa
File:                     -gblbrR4skNN_r4_i846kEwImuk.roa (raw, json)
Hash identifier:          nma1ddmltymQhe+UnHG/CezqZI/WC5JjNjlDkzNCchY=
Subject key identifier:   FA:06:E5:6E:B4:78:B2:43:4D:FE:BE:3F:8B:CE:3A:90:4C:08:9A:E9
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       D3
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/-gblbrR4skNN_r4_i846kEwImuk.roa
Signing time:             Tue 30 May 2023 16:10:21 +0000
ROA not before:           Tue 30 May 2023 16:10:21 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:d100::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 211 (0xd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:10:21 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=FA06E56EB478B2434DFEBE3F8BCE3A904C089AE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a7:3d:37:ef:27:7f:85:5a:48:f2:64:5b:80:
                    6e:64:c8:05:d1:05:ce:6b:4c:f9:92:a7:c0:c5:b3:
                    9d:2d:fe:78:3f:b9:1f:76:fd:7d:1b:e8:98:f2:c8:
                    a7:63:a3:25:e1:ea:2e:bc:06:3e:e1:c9:08:90:38:
                    1b:82:7c:e6:5f:d6:1f:4f:2a:b7:17:4d:eb:b6:57:
                    c9:99:f7:dd:0f:fa:64:d0:3a:ba:88:e4:ad:bd:a7:
                    7f:33:ef:cc:0b:b6:01:9a:1c:54:ed:0e:b2:a2:8f:
                    56:99:26:22:8f:cb:16:96:3c:fd:ab:69:b1:9d:45:
                    44:e5:16:95:8c:89:3b:47:f6:7e:c9:c1:74:82:4c:
                    6a:53:d4:ce:16:03:ec:b6:dd:56:ef:a0:24:48:22:
                    38:d8:fb:15:b2:87:b2:9a:1d:9d:8e:08:2f:ce:a0:
                    d0:fa:ea:e9:7c:28:a5:ea:39:7b:97:92:36:87:2a:
                    9b:5d:6a:40:9e:56:b8:b5:38:4e:82:38:d9:e1:4d:
                    da:2c:29:09:23:c0:96:4e:d7:0c:75:92:f0:02:6a:
                    2c:f6:eb:fc:6e:4b:07:b5:10:e9:6a:e9:eb:91:76:
                    87:11:40:18:9b:d0:4f:7e:71:64:22:a5:73:6e:a6:
                    fc:33:09:35:e8:b0:88:06:a3:c9:81:3c:c5:b2:53:
                    f2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:06:E5:6E:B4:78:B2:43:4D:FE:BE:3F:8B:CE:3A:90:4C:08:9A:E9
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/-gblbrR4skNN_r4_i846kEwImuk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:d100::/40

    Signature Algorithm: sha256WithRSAEncryption
         00:c3:9d:a4:a3:0f:0f:e3:22:70:78:6a:5c:ab:b4:81:a1:42:
         00:9b:c1:2b:cb:92:ad:7c:b2:f3:f6:d0:74:3a:05:c6:ed:dc:
         86:f3:a1:27:c1:bd:be:0a:5a:dc:75:f6:de:cd:56:3a:9f:d5:
         75:d4:37:85:9d:d6:47:05:b4:e6:28:6f:80:dc:13:05:e7:57:
         ad:e2:ec:dd:15:1f:37:6d:39:bb:fe:36:43:67:b8:97:98:c7:
         80:ca:22:d5:35:27:64:34:46:0a:aa:af:4d:a8:7d:7e:e9:59:
         92:aa:61:56:1d:d9:62:71:01:c6:3b:3f:5f:d7:c5:40:0a:3d:
         20:1d:0b:8b:f5:20:7c:b1:46:7c:71:45:ac:72:cf:c0:67:05:
         a2:f3:9d:8b:c1:9d:03:1f:17:d0:e5:3a:e1:63:a6:b1:a8:46:
         0d:3d:90:1c:b4:33:d8:60:f3:ab:65:c4:73:a8:f7:6a:50:41:
         8a:0c:01:9c:b8:cd:e1:a8:ff:45:aa:9e:3a:0c:67:be:2c:d1:
         f4:c1:db:ce:ab:3b:00:24:f6:c9:8f:ec:74:fb:90:55:15:27:
         50:f8:0a:3e:8d:36:59:93:82:5a:70:12:ee:fc:f1:3b:1f:b7:
         0a:38:7e:fc:2d:5b:66:c4:70:a9:dd:f1:87:ce:e8:22:e2:87:
         24:66:97:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org