Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/16imODg_TPM-BBAje6IgDAuZ8Gc.roa
File:                     16imODg_TPM-BBAje6IgDAuZ8Gc.roa (raw, json)
Hash identifier:          72vDcwjJs3A7eIvhHrz7m2xh+VXvftkf2Vgzhxd9BFU=
Subject key identifier:   D7:A8:A6:38:38:3F:4C:F3:3E:04:10:23:7B:A2:20:0C:0B:99:F0:67
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0160
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/16imODg_TPM-BBAje6IgDAuZ8Gc.roa
Signing time:             Tue 30 May 2023 17:32:31 +0000
ROA not before:           Tue 30 May 2023 17:32:31 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:c700::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 352 (0x160)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:32:31 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=D7A8A638383F4CF33E0410237BA2200C0B99F067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:57:36:30:f5:86:0e:85:e8:b7:e0:3a:61:c9:
                    5d:48:8d:12:e8:7d:ea:e9:bd:8c:e8:f0:8b:55:d9:
                    50:68:6b:df:b0:81:06:29:46:1e:7a:ef:91:f9:80:
                    ba:26:ed:5a:95:72:72:34:d6:76:05:e3:a9:41:e7:
                    67:a2:a0:3f:dd:a0:1b:a4:1e:5b:dd:35:eb:94:30:
                    91:4d:e1:11:a2:22:60:29:ad:f8:a3:ce:95:2c:a8:
                    9f:1f:34:41:e7:98:58:67:59:07:64:f5:dd:cc:89:
                    be:b1:a4:96:07:60:c8:a0:a2:9a:d2:66:a8:c6:65:
                    61:eb:11:39:c4:3b:d6:eb:4c:1b:13:03:c5:71:a7:
                    40:ec:67:8d:30:77:94:fa:6b:0f:b1:61:ec:d5:0a:
                    63:38:f4:fd:ab:b7:61:08:45:03:87:6b:6b:54:8e:
                    01:df:9f:41:a7:e2:a8:e7:20:0c:23:a6:e3:85:4f:
                    ea:b7:af:96:42:60:71:6a:d0:dd:18:d4:35:88:92:
                    dd:4c:47:72:8a:3a:2f:31:59:82:f1:4f:30:32:61:
                    c3:8e:ee:82:da:da:78:eb:c1:91:f6:a1:72:7e:fb:
                    1c:22:58:27:32:5d:73:be:33:35:ce:62:83:5d:96:
                    3f:ff:ad:24:30:b1:1f:f0:41:6b:8b:6f:14:6c:8f:
                    4c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A8:A6:38:38:3F:4C:F3:3E:04:10:23:7B:A2:20:0C:0B:99:F0:67
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/16imODg_TPM-BBAje6IgDAuZ8Gc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:c700::/40

    Signature Algorithm: sha256WithRSAEncryption
         b5:7a:15:52:3a:11:38:72:25:a1:34:55:90:3a:30:35:b7:6f:
         1e:2f:8a:14:b2:75:58:66:19:61:3e:ee:18:3e:a0:ce:69:3d:
         a8:5c:9f:cd:98:18:6b:b9:8a:64:b4:ee:ff:c1:13:9d:15:8d:
         84:2b:85:2e:05:5c:52:50:6f:9d:8f:71:d7:eb:24:07:d0:71:
         0e:90:9f:af:e7:9b:da:4e:fe:90:a6:d4:5b:57:d9:91:b2:c5:
         10:06:23:a3:b7:32:2d:2b:e3:7e:f4:75:d0:51:fb:62:52:43:
         5d:5a:36:26:d5:8e:d4:4e:f7:98:c4:97:b9:da:3c:e4:5e:27:
         cb:4e:38:e0:0d:30:f8:64:f3:27:f4:65:cc:3b:ec:e7:c7:7f:
         71:28:c9:4d:b9:c5:9e:69:fe:b4:0c:de:62:71:45:73:d5:15:
         3c:fa:1c:3d:f7:75:37:29:1b:8c:2c:de:63:6a:47:28:6f:67:
         22:f3:d7:91:d5:a3:c1:79:10:7f:a4:7f:95:c9:70:0b:72:3f:
         7b:61:06:f1:5c:5e:98:0c:75:5c:b8:f9:1a:3b:90:a5:c4:14:
         1e:2a:b0:6f:7b:bf:ef:bf:8b:c1:13:81:e1:bc:a7:fd:33:7c:
         fb:32:c0:5c:53:21:b9:34:51:1f:d2:c4:2a:a6:6e:47:f5:90:
         23:8c:6a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org