Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/25ZEjxnmW-XpA_MwYloAiDi-8Xg.roa
File:                     25ZEjxnmW-XpA_MwYloAiDi-8Xg.roa (raw, json)
Hash identifier:          CkaDdpEeNTyXSjYHBblhMeaUWKqcnMfZ77FW4ckoaB8=
Subject key identifier:   DB:96:44:8F:19:E6:5B:E5:E9:03:F3:30:62:5A:00:88:38:BE:F1:78
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       6B
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/25ZEjxnmW-XpA_MwYloAiDi-8Xg.roa
Signing time:             Tue 30 May 2023 16:06:17 +0000
ROA not before:           Tue 30 May 2023 16:06:17 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:8900::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:06:17 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=DB96448F19E65BE5E903F330625A008838BEF178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:97:36:09:f9:e6:14:7b:1c:0e:0f:0c:39:9e:
                    33:9d:1b:45:69:96:77:dd:d9:ce:73:a9:1e:96:9a:
                    6e:6e:0c:fc:af:a2:86:a1:dd:8b:7b:fd:9f:da:94:
                    6b:35:fe:da:d2:e3:bb:48:61:46:49:5e:99:b4:62:
                    15:d9:26:22:73:e6:86:31:04:38:68:97:fe:6f:2f:
                    04:97:e7:37:31:7c:b0:11:67:f4:cc:25:48:c1:5e:
                    f3:46:18:b0:f7:64:e9:8c:31:62:0c:cc:54:14:2d:
                    c5:3f:8d:f7:96:bc:66:5d:41:a9:65:b9:91:d9:fd:
                    9b:54:54:1d:11:7f:f4:12:ce:7f:88:f0:0e:b8:d0:
                    88:18:a3:af:75:14:d8:d1:57:81:67:a0:57:6f:39:
                    e6:c5:ba:5b:df:c1:cd:e6:3b:e1:d8:e2:4c:f4:ed:
                    5e:0f:12:47:69:42:b0:c6:b4:b6:08:ff:82:a4:89:
                    56:68:df:54:f8:fb:20:33:bb:45:42:c6:3d:c5:17:
                    5a:7f:da:b3:ed:a8:fe:8a:cd:67:59:08:74:45:cb:
                    de:be:12:e3:b8:0f:1f:80:56:2a:f5:4a:5b:ca:1c:
                    3b:50:8d:62:29:8e:a5:82:40:e0:8f:ee:0f:21:3d:
                    c6:a5:4a:78:27:47:d6:53:17:b8:f9:bf:bb:27:1f:
                    14:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:96:44:8F:19:E6:5B:E5:E9:03:F3:30:62:5A:00:88:38:BE:F1:78
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/25ZEjxnmW-XpA_MwYloAiDi-8Xg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:8900::/40

    Signature Algorithm: sha256WithRSAEncryption
         91:0f:fd:d6:c5:7e:99:91:ef:3e:cd:1c:ff:ef:a4:b2:01:03:
         14:b4:22:55:0d:0f:98:30:02:89:96:d6:f4:b1:76:1c:2b:29:
         c7:d8:f3:eb:e0:15:46:30:0c:c1:94:e1:8c:db:c2:df:9a:4e:
         0a:47:60:ad:5c:5a:f9:8a:e7:eb:c7:14:2b:fe:ff:3a:60:07:
         21:01:15:75:91:d5:0c:3c:7e:b4:fd:9f:a9:fd:38:8a:7a:4c:
         fb:22:89:ea:9e:7d:2a:97:4e:97:bd:37:d4:68:3e:32:44:4b:
         93:33:37:70:f9:dc:cd:df:30:3f:a7:71:80:e6:4f:9c:ec:95:
         c2:c7:03:11:e5:24:1d:11:b2:38:57:15:bc:f3:dc:04:5f:82:
         84:9a:ca:bf:44:f4:39:71:e0:d5:19:f7:f1:cb:6c:63:45:31:
         8d:1f:05:e6:3c:f0:3e:e7:f2:76:ec:95:90:42:14:e3:8d:fb:
         8f:1d:46:ea:a3:5a:c0:7b:5a:1e:85:3e:9b:7e:06:85:cf:3a:
         0b:b0:e3:d4:8c:f7:05:c9:79:98:88:27:c4:6d:55:b4:49:79:
         89:b9:46:9f:92:34:c7:e4:73:05:95:ba:eb:b3:ce:ae:c7:4a:
         36:ea:40:9c:28:65:16:41:5a:c6:33:60:a6:35:4b:07:db:4c:
         dc:df:f8:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org