Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/-saiPXwJ1W8d0ZqoWXoUyoY--nY.roa
File:                     -saiPXwJ1W8d0ZqoWXoUyoY--nY.roa (raw, json)
Hash identifier:          1DYnnQSPfmPaorawN/h1X3+G9FOJxtQ46HN6lK2I7yw=
Subject key identifier:   FA:C6:A2:3D:7C:09:D5:6F:1D:D1:9A:A8:59:7A:14:CA:86:3E:FA:76
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0145
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/-saiPXwJ1W8d0ZqoWXoUyoY--nY.roa
Signing time:             Tue 30 May 2023 17:32:22 +0000
ROA not before:           Tue 30 May 2023 17:32:22 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:9600::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 325 (0x145)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:32:22 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=FAC6A23D7C09D56F1DD19AA8597A14CA863EFA76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:92:eb:7f:8d:9d:5c:04:34:d5:43:5e:c2:b9:
                    37:2e:19:e9:ae:76:32:68:81:01:00:90:36:30:e3:
                    20:be:14:28:33:82:28:71:44:66:98:e0:07:fd:30:
                    5f:72:df:1e:c1:c9:86:4d:56:7d:1d:ba:3c:5b:09:
                    df:60:64:7e:10:8d:a6:bc:d5:95:2b:84:b1:3c:98:
                    6a:87:d3:05:6e:5f:6f:39:f3:39:80:e5:c2:c5:37:
                    7d:bf:6a:4d:fe:bc:66:4d:9c:16:cc:23:0c:28:0f:
                    ad:09:b6:f2:ae:b6:27:05:eb:c6:d5:a1:a2:58:72:
                    03:2b:43:11:10:fd:51:a6:f3:42:00:7b:c4:da:d4:
                    9b:69:c7:48:ee:4d:d2:94:37:0f:f8:c6:79:a5:40:
                    4b:ad:94:7f:fc:18:4c:ed:d3:a2:12:c0:cc:b2:2f:
                    29:19:5c:c3:6f:27:a8:a9:e4:18:e3:dd:a3:df:c8:
                    4a:eb:b1:9e:35:cb:23:b0:22:b9:09:4f:50:ee:d2:
                    00:ac:a9:08:43:68:0f:ba:b5:a5:18:39:a1:8b:22:
                    2f:e3:48:06:fd:a8:3a:b0:bd:f7:f1:60:f2:4a:df:
                    f1:1c:28:38:f4:f4:a6:cc:dc:a6:5f:e1:45:bc:3a:
                    f7:e9:50:08:9c:5d:87:42:dd:05:9e:f2:04:3a:81:
                    d5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C6:A2:3D:7C:09:D5:6F:1D:D1:9A:A8:59:7A:14:CA:86:3E:FA:76
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/-saiPXwJ1W8d0ZqoWXoUyoY--nY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:9600::/40

    Signature Algorithm: sha256WithRSAEncryption
         9d:99:53:98:5c:dd:1c:7e:29:2c:52:ba:17:62:57:a8:5b:92:
         bf:4f:75:52:00:7a:04:95:da:97:5d:58:43:10:8d:e9:9b:dc:
         6d:b9:be:ce:d5:d7:bb:53:9c:50:d0:87:d0:a8:8e:dd:52:f0:
         99:50:3f:fa:49:8f:89:ab:62:61:3e:09:f6:ef:b7:fa:68:6f:
         67:44:4c:b0:55:bc:ab:b9:cd:0e:59:f9:46:92:e4:a8:4d:04:
         bf:5b:6e:76:54:03:25:d2:cb:35:a0:8b:e5:42:80:e7:5f:00:
         c3:22:59:1b:24:a2:82:12:27:6b:db:24:33:26:e3:6d:32:23:
         2e:46:0e:51:c3:b3:b3:5b:f9:da:cf:5d:e1:50:5b:7e:b2:4c:
         47:16:37:53:4d:76:c6:51:d0:7e:84:b7:55:69:e9:8b:44:24:
         07:b7:79:ac:4b:51:f6:3d:f4:3a:ec:4b:a3:b1:a8:f9:e8:b5:
         6a:a5:37:eb:60:7a:4b:cb:7c:00:a5:21:39:75:30:a9:57:33:
         67:cd:56:ab:4e:f9:c4:f3:09:77:d1:f2:fe:0a:e4:f9:4e:32:
         64:02:29:a6:b1:2d:da:8a:32:9f:a2:b8:59:4a:57:0a:85:6a:
         4b:56:06:45:8f:e7:0f:79:e4:42:39:e9:4d:d0:05:ca:7b:d5:
         13:0f:e2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org