Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/0X084d8akE5Ar8R35MrxuM-ZBss.roa
File:                     0X084d8akE5Ar8R35MrxuM-ZBss.roa (raw, json)
Hash identifier:          X7+AautOe0goY16i8jc80Dtkb+56h2AeU6Ayhq69HlQ=
Subject key identifier:   D1:7D:3C:E1:DF:1A:90:4E:40:AF:C4:77:E4:CA:F1:B8:CF:99:06:CB
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       5C
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/0X084d8akE5Ar8R35MrxuM-ZBss.roa
Signing time:             Tue 30 May 2023 16:04:25 +0000
ROA not before:           Tue 30 May 2023 16:04:25 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:d400::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:04:25 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=D17D3CE1DF1A904E40AFC477E4CAF1B8CF9906CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:12:02:26:32:bf:93:e2:e7:15:75:cd:9e:40:
                    c0:be:c6:38:93:b5:16:c1:01:a2:56:b6:1f:40:49:
                    d7:26:3e:5c:b6:c9:66:26:30:3a:50:75:a0:3f:52:
                    a5:6b:8b:4c:47:46:71:dc:65:a4:b0:55:84:df:d9:
                    6d:aa:8f:9c:c9:c1:75:54:64:c4:66:e3:fe:b8:73:
                    c7:2f:91:d4:ec:da:0c:7c:1e:7c:45:6a:0c:af:ea:
                    a8:48:0d:a6:20:37:63:fc:c3:bc:f5:d4:77:9c:d6:
                    37:9c:a9:e9:aa:0a:38:5d:6f:44:54:31:5b:7d:84:
                    a4:41:96:51:21:13:3e:5f:6c:06:d5:c8:9b:f3:b9:
                    28:23:31:a0:ee:b6:4a:e5:f6:ff:82:ce:50:8c:42:
                    1c:74:58:8c:e9:27:48:f0:a2:b5:08:16:e2:f7:92:
                    f3:ee:db:72:1b:2c:c4:9d:8e:10:9a:d2:15:06:6c:
                    8c:a2:85:aa:75:92:2e:8a:51:ea:75:31:24:7a:1c:
                    6c:f0:a3:f9:b2:88:d9:3d:d6:69:30:1a:61:ae:e4:
                    42:da:05:5d:5c:e2:81:bc:ef:f6:79:14:ef:df:4d:
                    57:ed:d5:d4:70:ac:c4:f2:66:81:f2:26:5f:cc:bc:
                    18:10:36:5e:d2:3e:f6:87:55:ff:75:f4:15:e3:48:
                    bf:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:7D:3C:E1:DF:1A:90:4E:40:AF:C4:77:E4:CA:F1:B8:CF:99:06:CB
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/0X084d8akE5Ar8R35MrxuM-ZBss.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:d400::/40

    Signature Algorithm: sha256WithRSAEncryption
         2c:26:84:f3:af:d2:f3:e2:61:b1:9f:74:45:0d:ac:f1:31:86:
         e1:16:da:99:c7:dd:37:3d:7a:f7:54:08:38:a1:70:3b:8c:70:
         41:40:f2:85:42:0f:4d:dd:a2:11:98:83:56:cf:61:14:41:e8:
         1b:06:b8:72:8f:af:f2:66:51:9e:1e:ae:eb:d2:b0:b9:33:bd:
         da:b2:40:e6:52:91:a3:90:e1:00:64:fc:cd:96:f5:ca:c9:81:
         a5:d9:6c:4b:35:22:2a:a0:a7:c2:a6:61:fe:0e:25:46:57:0f:
         21:0e:6f:6c:4d:07:97:0e:cb:b5:f0:33:5c:52:a9:a0:0e:7f:
         3c:d7:07:a0:20:aa:d6:86:90:1a:37:0f:7f:f4:77:22:1a:3d:
         34:a4:03:4a:1a:4c:e3:60:ed:f1:24:df:36:b5:c9:c8:2c:17:
         3d:03:f8:b5:2a:6e:e2:e3:01:eb:05:ea:a6:d0:70:7a:22:75:
         b0:ea:21:ff:95:79:0d:8d:5e:a8:55:03:13:8a:be:9c:79:9f:
         5f:c0:31:bd:0e:a6:e7:e6:0c:de:a5:ce:0a:78:ec:f0:49:45:
         51:b2:45:0e:16:4f:2f:6f:13:ab:ec:81:4b:8c:ad:de:c9:59:
         34:5c:07:71:50:53:3a:6d:ea:fd:6f:88:69:c3:1f:dc:a5:10:
         bc:95:28:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org