Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/-k6xAlmnm6QvlMoabwWxVaj8b1g.roa
File:                     -k6xAlmnm6QvlMoabwWxVaj8b1g.roa (raw, json)
Hash identifier:          4lGIM9UlxI0a7VsVnXMfB8Tp+1kszXFhj3CHF1zXzCM=
Subject key identifier:   FA:4E:B1:02:59:A7:9B:A4:2F:94:CA:1A:6F:05:B1:55:A8:FC:6F:58
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0106
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/-k6xAlmnm6QvlMoabwWxVaj8b1g.roa
Signing time:             Tue 30 May 2023 16:12:33 +0000
ROA not before:           Tue 30 May 2023 16:12:33 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:3b00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 262 (0x106)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:12:33 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=FA4EB10259A79BA42F94CA1A6F05B155A8FC6F58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:63:72:bd:5c:f2:b0:d1:1d:21:84:07:e5:9a:
                    55:ee:b9:09:26:a0:4d:cf:0e:2c:d3:aa:e9:cf:ae:
                    ce:e2:91:ad:ee:21:a6:78:c3:9f:f5:46:bd:59:fd:
                    71:ce:64:b7:37:df:13:e3:77:cb:cc:96:cc:0f:43:
                    89:b0:33:41:c0:2e:5d:6b:8c:73:e7:0a:19:11:a0:
                    dc:34:da:29:90:c4:9a:f4:5f:df:df:a7:c2:a0:fa:
                    d6:84:e4:2e:bb:a2:79:c6:a8:48:47:0d:6a:88:8d:
                    5a:81:42:c0:85:85:ef:6a:3d:57:b0:61:d3:61:b8:
                    a6:98:8c:25:38:2d:3a:d3:0b:07:17:34:db:53:7f:
                    d5:a5:e0:a1:73:4c:90:4f:09:2a:50:62:a1:71:25:
                    53:ad:c0:41:49:bd:04:7d:c8:3d:39:24:12:02:3d:
                    f6:ba:fc:0c:bd:62:d6:de:15:1e:4f:d2:4e:48:f5:
                    65:4c:25:85:09:7d:30:5c:04:52:c0:62:8e:33:8b:
                    39:fe:79:04:05:f6:3e:17:4a:cf:cf:fa:85:7f:77:
                    1a:9f:8f:e9:88:08:9f:2b:c9:5a:ba:32:41:b3:9d:
                    23:30:f9:a6:cc:5b:0d:17:8a:ff:bc:9e:0d:f7:01:
                    6c:31:19:7a:d5:6f:7b:5b:78:1b:bd:e3:3b:77:25:
                    ff:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:4E:B1:02:59:A7:9B:A4:2F:94:CA:1A:6F:05:B1:55:A8:FC:6F:58
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/-k6xAlmnm6QvlMoabwWxVaj8b1g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:3b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         92:e3:c2:94:f0:b5:53:2c:fb:f9:58:b2:1c:b3:38:af:f9:b0:
         90:25:d7:53:d8:76:99:2e:2f:6a:34:fe:08:28:55:01:fe:5d:
         06:25:99:11:77:d1:54:f7:7b:fe:67:6c:8e:22:6f:02:a4:a9:
         c4:8e:32:54:7a:bd:a5:8e:31:14:0d:e9:0f:53:14:cf:a9:44:
         48:74:77:0c:04:fe:64:57:77:50:12:72:38:2b:b9:5f:dd:e9:
         19:7a:9f:9e:71:1b:a3:48:f8:b9:bd:be:f4:9d:27:27:d8:20:
         a8:57:67:6c:2d:fd:a5:9a:97:9d:84:e3:15:a9:88:bc:df:65:
         d7:66:db:72:63:e6:e4:fd:f7:25:54:84:62:bf:97:3e:fb:a4:
         e5:44:d3:4e:14:93:06:3b:af:af:a3:28:b0:e0:c6:2b:ff:55:
         09:47:f4:ce:2f:34:07:4e:5f:6a:da:eb:fc:e9:bf:6e:a0:08:
         10:0b:60:a9:c6:fb:67:9a:00:3f:a2:4c:1d:85:33:59:db:35:
         b4:8f:49:1b:09:56:c2:40:9c:52:da:f0:b6:21:28:c1:f4:c9:
         ec:25:69:f5:b7:4f:4e:bd:15:c1:f3:bc:3c:ed:92:a7:d8:3c:
         ed:a3:da:54:82:55:32:df:f5:37:bf:0f:77:c5:23:f1:61:7e:
         1d:a2:ba:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org