Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/0gAEcWlYiA9sr9A99Ij5HT91jdU.roa
File:                     0gAEcWlYiA9sr9A99Ij5HT91jdU.roa (raw, json)
Hash identifier:          7lpERoGg4PmiEHZNu7/lzxql33TruNOeQJDv0yHmLVQ=
Subject key identifier:   D2:00:04:71:69:58:88:0F:6C:AF:D0:3D:F4:88:F9:1D:3F:75:8D:D5
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       40
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/0gAEcWlYiA9sr9A99Ij5HT91jdU.roa
Signing time:             Tue 30 May 2023 16:04:15 +0000
ROA not before:           Tue 30 May 2023 16:04:15 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:4b00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:04:15 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=D20004716958880F6CAFD03DF488F91D3F758DD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:97:ca:63:3b:e0:c0:0f:49:8a:b2:5c:7f:b0:
                    43:a3:9e:ea:00:7a:49:b1:2c:64:e5:05:83:50:2f:
                    68:57:c5:f9:d8:2b:ae:e2:f0:cb:8e:b5:3c:89:85:
                    c3:6e:e4:dd:da:6a:09:80:2f:81:a6:85:fe:52:77:
                    cd:41:b0:08:28:3e:56:87:16:77:6d:ba:7f:d9:31:
                    6f:2f:5a:b7:08:0b:5d:1b:14:c7:9e:3d:26:47:5d:
                    c4:6b:93:d5:f5:59:73:6e:21:02:06:44:2d:a3:0a:
                    19:58:83:c0:a4:c4:2a:11:05:0f:80:95:55:a8:3b:
                    7a:b0:6e:04:70:c6:ef:27:33:e7:80:d5:8f:67:65:
                    cf:a7:cc:23:fe:9e:1f:8a:20:79:87:bb:4d:09:b3:
                    dc:01:14:dd:d2:e6:64:b8:68:eb:36:40:7e:ea:15:
                    12:fa:9a:df:b8:dc:40:37:e4:ce:c9:26:49:a3:51:
                    ef:13:01:e0:f7:ab:7c:11:35:d4:2b:35:39:64:20:
                    63:92:05:52:4e:62:c2:1c:82:db:29:8f:18:6a:3a:
                    13:d1:ce:84:a3:1a:6e:5b:51:7b:5e:41:b5:22:10:
                    b6:d8:25:ef:0b:0e:25:a8:6c:f8:79:00:54:85:63:
                    f1:12:b0:c1:e3:24:3c:21:e2:32:27:71:aa:d0:77:
                    14:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:00:04:71:69:58:88:0F:6C:AF:D0:3D:F4:88:F9:1D:3F:75:8D:D5
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/0gAEcWlYiA9sr9A99Ij5HT91jdU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:4b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         7a:c1:6c:29:6c:09:17:b7:3f:f4:49:14:f6:03:5e:c8:5e:e1:
         25:b6:ad:2c:d6:32:7d:df:54:c0:00:fb:40:89:6b:38:4f:14:
         cd:b4:9d:0d:31:44:41:f6:d2:66:1d:09:c9:e1:fb:b5:43:b7:
         84:b5:00:88:fc:dc:a6:46:b5:9f:7e:48:0c:ae:33:69:08:71:
         bf:9c:72:43:03:79:e0:c2:5c:94:04:0b:6a:db:47:6a:8f:bd:
         a1:41:2f:33:99:c7:e7:82:e8:c8:b9:20:54:74:81:20:86:b6:
         a1:99:d8:c2:c1:88:cf:0a:14:bc:66:73:7b:05:0b:80:6f:64:
         5d:3b:91:46:9a:09:29:08:d4:16:f3:bf:ae:21:a0:a3:48:3c:
         ae:9d:91:50:2c:84:a9:86:c5:f4:d6:06:1b:cb:0b:a3:56:0e:
         3b:f0:1f:bf:04:c0:a7:7c:c3:c6:9b:a3:76:09:3a:c4:2c:40:
         df:a4:1d:04:c7:a4:3f:88:83:df:cd:60:bb:c0:62:9e:8d:2b:
         49:a1:4b:d4:0c:55:45:dc:e2:08:c4:7c:27:02:e2:fc:36:dd:
         ee:63:b2:b6:8c:36:a9:5b:9a:0c:31:51:f9:bb:21:1f:9b:db:
         84:7a:8b:c4:8b:10:2e:18:22:4a:ce:fa:82:f5:8e:14:22:eb:
         8f:e0:46:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org