Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/2MIJBtJKrpRvYEzIwwiFJOtFmwE.roa
File:                     2MIJBtJKrpRvYEzIwwiFJOtFmwE.roa (raw, json)
Hash identifier:          CrvolfrJzY2+sz1xZfoin0vbH79Q5dLlK7DMsLp5UW0=
Subject key identifier:   D8:C2:09:06:D2:4A:AE:94:6F:60:4C:C8:C3:08:85:24:EB:45:9B:01
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0249
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/2MIJBtJKrpRvYEzIwwiFJOtFmwE.roa
Signing time:             Thu 01 Jun 2023 16:42:52 +0000
ROA not before:           Thu 01 Jun 2023 16:42:52 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:40:4000::/35 maxlen: 35

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 585 (0x249)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Jun  1 16:42:52 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=D8C20906D24AAE946F604CC8C3088524EB459B01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b0:8e:da:fc:32:48:88:ae:37:2f:46:55:57:
                    80:42:2a:b9:86:6d:04:e0:3d:d3:1b:bc:a0:80:f6:
                    ec:00:21:14:0c:66:ae:91:dc:e5:b2:93:95:5c:24:
                    02:07:fd:c9:5a:ec:ff:19:0a:be:e6:ce:68:a3:44:
                    f9:06:a8:fe:7f:67:4f:8a:45:2e:9e:ba:7f:ed:26:
                    42:ff:c6:f3:b7:11:73:eb:19:1d:54:82:6a:7a:e4:
                    9c:18:e5:da:61:a5:cb:52:e9:03:05:4a:4b:02:84:
                    a6:45:b3:4c:d7:76:64:f9:c2:53:ef:70:9e:0e:62:
                    54:8d:ae:40:66:11:ec:82:bc:d1:ca:29:b5:13:3b:
                    cf:e0:78:c3:8a:e4:7f:a1:55:b3:a0:2e:68:0e:e1:
                    04:e7:66:c0:02:cd:95:a0:66:b9:c3:32:64:95:d3:
                    73:b8:45:77:ba:2b:03:e1:f7:4e:21:54:73:7f:fb:
                    8f:37:46:d8:84:c9:dc:12:76:29:a4:ee:4c:fb:f0:
                    ce:66:ca:c3:57:9b:90:86:fc:51:02:d0:dd:88:30:
                    a2:97:13:2e:d7:6c:98:fa:3c:e3:45:37:67:18:ab:
                    9f:c4:47:57:cb:10:9d:31:2a:98:74:33:35:15:f8:
                    28:00:2e:33:cb:d5:e5:af:f7:a5:3f:6b:34:bc:02:
                    c8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C2:09:06:D2:4A:AE:94:6F:60:4C:C8:C3:08:85:24:EB:45:9B:01
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/2MIJBtJKrpRvYEzIwwiFJOtFmwE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:40:4000::/35

    Signature Algorithm: sha256WithRSAEncryption
         6a:18:7e:e8:35:54:25:a4:f8:9f:b7:a1:07:82:f4:78:9c:4d:
         4a:1e:28:8e:a0:a5:89:e5:94:0a:0a:77:52:22:cd:d9:d8:fb:
         1b:67:e1:46:b7:cd:02:23:aa:90:4b:a6:9d:af:be:e7:a9:c8:
         1c:c5:14:e9:ca:63:12:79:bb:04:49:4a:27:19:81:b6:dd:74:
         47:0d:99:25:aa:8d:54:4a:f5:7f:fe:d1:89:1e:54:a5:cc:c8:
         dc:88:2d:89:e2:90:0d:62:5f:50:4f:ff:d8:28:7d:e5:77:45:
         54:f7:60:b8:cb:2d:d2:89:ec:6d:1a:f1:8d:05:9d:8c:67:4a:
         9b:63:aa:47:78:01:53:90:11:34:27:21:df:91:e1:b1:1b:a2:
         38:78:79:9c:e8:44:bd:d7:64:ed:a7:ec:d7:1f:85:8c:81:53:
         c2:d3:52:07:b2:f6:d5:75:b6:64:1d:9f:0e:3c:1b:ae:b2:c2:
         bf:87:27:bf:ac:45:45:70:5b:f5:ca:3c:65:86:8c:6d:ff:6e:
         ed:f7:10:37:93:f1:46:6f:4a:da:c5:fb:e9:c2:0e:f4:e6:1f:
         6b:ce:98:85:2c:a7:b1:0a:ee:3a:da:73:0d:0a:fe:35:38:ce:
         80:9a:49:fe:fc:d6:a3:47:ba:ba:a1:63:34:7a:af:5c:f8:e0:
         1d:54:2e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org