Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/1jtgW5qvsUEayXkcDcas0BU05Tk.roa
File:                     1jtgW5qvsUEayXkcDcas0BU05Tk.roa (raw, json)
Hash identifier:          rBkgTjBiAQreDVdbRsn+OWlsVXrLCtwgHxaFszBGoLA=
Subject key identifier:   D6:3B:60:5B:9A:AF:B1:41:1A:C9:79:1C:0D:C6:AC:D0:15:34:E5:39
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       BD
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/1jtgW5qvsUEayXkcDcas0BU05Tk.roa
Signing time:             Tue 30 May 2023 16:10:12 +0000
ROA not before:           Tue 30 May 2023 16:10:12 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:6300::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 189 (0xbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:10:12 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=D63B605B9AAFB1411AC9791C0DC6ACD01534E539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:63:cc:87:ab:49:a4:29:1e:b8:83:12:90:8c:
                    c1:5a:93:0e:32:6c:0a:27:bb:cb:06:a9:c4:f3:fc:
                    69:14:7a:2a:bd:af:8d:c9:39:e1:fe:c8:23:ee:e1:
                    55:56:e6:57:e0:e9:98:d7:91:97:d4:82:7f:72:8c:
                    a9:3b:f1:a7:bb:c6:99:5c:21:23:0e:a4:50:57:82:
                    85:3f:7c:fa:6d:cd:9e:ad:0a:d0:04:8a:c0:8d:c1:
                    ff:6f:e6:d6:fb:3c:0c:91:d3:b7:30:8c:79:bf:f8:
                    a3:27:ce:16:35:86:60:ff:0a:12:da:78:9f:95:17:
                    89:4e:36:91:62:1a:f7:43:14:e9:26:12:f1:0f:ce:
                    56:6e:f9:bb:6b:3f:52:79:80:98:33:c1:96:0a:e6:
                    1b:62:79:26:8e:fa:77:52:b1:30:09:41:b3:53:65:
                    2b:c3:9f:5d:3e:7f:c7:ed:2d:fe:38:62:93:e7:1b:
                    50:db:9e:bf:76:5e:1d:a1:7c:c5:48:c5:a9:08:16:
                    fd:f5:f7:06:7d:20:da:1c:b9:98:65:ea:2e:bc:f7:
                    b8:2e:0b:f2:9e:35:63:44:32:fd:10:16:06:61:4f:
                    9c:17:fb:13:1f:f5:dc:68:eb:61:a2:62:a9:68:7b:
                    67:f0:11:4d:39:18:56:6d:13:4c:bb:ef:fb:ed:f3:
                    38:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:3B:60:5B:9A:AF:B1:41:1A:C9:79:1C:0D:C6:AC:D0:15:34:E5:39
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/1jtgW5qvsUEayXkcDcas0BU05Tk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:6300::/40

    Signature Algorithm: sha256WithRSAEncryption
         3d:f0:c6:11:50:8c:ed:17:83:9b:19:dc:4b:05:bf:3e:07:b9:
         71:d4:d7:09:90:a6:36:c7:0a:6f:83:f5:f0:bb:eb:44:45:48:
         44:95:f9:f0:1d:b7:21:5d:6b:64:ef:cd:29:1c:34:79:6b:e3:
         73:25:84:57:e3:d3:9e:dc:0f:2a:72:51:f6:1c:18:8f:14:b8:
         ff:1a:3b:46:e0:cf:36:d6:6a:78:d5:36:cc:ac:bb:f9:95:2c:
         84:36:d8:9f:e2:93:d1:ff:3e:e9:1c:43:91:45:e0:c3:9e:ad:
         2f:4a:9c:f5:68:77:75:25:73:e1:73:f7:7c:9b:ae:ef:d8:4d:
         3f:f7:0f:b8:15:19:86:8e:d8:dc:f9:77:cb:7c:f9:48:48:d5:
         f4:06:16:76:31:b0:87:5d:32:ec:f4:77:58:6d:dc:e0:10:7d:
         19:08:2d:0b:4f:0b:98:10:ad:a7:8d:d9:64:46:98:cf:91:1e:
         87:7a:43:b4:22:48:85:97:2d:e2:2a:b1:de:fa:6c:8a:b2:97:
         9d:7c:a9:47:9d:b6:c3:8a:d5:10:aa:7f:ab:6a:c6:30:48:cc:
         c7:60:1d:7b:1c:74:97:be:77:d1:7a:2f:45:c3:da:81:9a:03:
         18:4e:d5:2c:dc:70:0b:5d:ec:85:0e:c8:f4:0a:98:7f:1c:e8:
         81:8d:1f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org