Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/2bwFCE56qs4d2F0N9aXN4v17FhQ.roa
File:                     2bwFCE56qs4d2F0N9aXN4v17FhQ.roa (raw, json)
Hash identifier:          icD5Ut58fwqwFt51RPmhKiXBtOCMC6xKVC/RlHy6eUg=
Subject key identifier:   D9:BC:05:08:4E:7A:AA:CE:1D:D8:5D:0D:F5:A5:CD:E2:FD:7B:16:14
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0173
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/2bwFCE56qs4d2F0N9aXN4v17FhQ.roa
Signing time:             Tue 30 May 2023 17:34:19 +0000
ROA not before:           Tue 30 May 2023 17:34:19 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:9700::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 371 (0x173)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:34:19 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=D9BC05084E7AAACE1DD85D0DF5A5CDE2FD7B1614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:62:c2:f6:40:2c:b5:d0:37:eb:92:88:88:9f:
                    a0:e9:02:7c:73:b0:cf:ff:4a:14:de:ab:ee:f2:19:
                    41:6e:24:8e:d8:f8:11:ad:6e:75:e9:78:71:0a:b9:
                    49:a4:e5:83:f4:1b:45:11:06:b5:6f:d9:bc:3c:3f:
                    dc:60:bf:f2:8a:7a:b9:09:c2:26:e9:43:79:6b:dd:
                    55:e9:d7:7d:bf:67:33:13:0b:02:04:65:d5:7b:3e:
                    6b:a9:1f:3f:2d:62:5a:5d:e3:93:fb:e5:69:0b:36:
                    c4:0a:c5:9b:45:a2:c6:e0:da:03:0f:84:df:44:4a:
                    36:f1:63:ec:13:59:ea:57:24:99:db:fa:49:09:96:
                    8f:00:0d:64:4b:89:ca:73:a3:fd:c0:e7:f8:41:a6:
                    70:4d:eb:aa:17:65:34:38:27:90:bc:82:6f:06:a0:
                    cf:97:34:a2:4a:55:d3:dc:b2:fb:c2:f5:6f:d5:63:
                    e3:7d:fd:44:8a:e0:20:cf:ad:de:0d:05:10:8d:90:
                    06:5a:51:d7:30:ed:81:47:36:99:d1:73:04:1c:5d:
                    9b:37:2f:53:59:d0:68:af:7a:bb:62:d1:72:78:a2:
                    9a:71:45:8d:b8:da:bf:ad:39:a9:17:83:f1:56:f1:
                    3a:1c:19:d5:fb:37:d6:c8:c1:f4:d1:72:33:a1:b0:
                    aa:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:BC:05:08:4E:7A:AA:CE:1D:D8:5D:0D:F5:A5:CD:E2:FD:7B:16:14
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/2bwFCE56qs4d2F0N9aXN4v17FhQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:9700::/40

    Signature Algorithm: sha256WithRSAEncryption
         87:1e:1a:85:1d:e2:61:ec:bb:dd:a9:de:f9:70:0b:61:bc:ef:
         90:e4:35:70:c5:69:d3:6c:dc:46:3d:eb:ae:6e:93:2d:1c:8f:
         22:fe:55:89:5f:7e:63:3a:2c:41:4f:0a:31:a0:27:28:4d:ae:
         71:05:b5:b3:5e:c0:69:25:91:52:6b:99:cc:a6:c2:ee:40:be:
         d9:f7:76:88:0c:be:7a:e5:bd:e7:2b:72:f0:f6:77:1c:13:71:
         56:01:fd:2e:a5:85:01:aa:b8:ae:77:ed:a6:84:8f:26:e7:d6:
         79:cb:bf:a7:18:a0:6f:65:4d:01:67:6b:4e:79:85:ee:23:ad:
         1e:54:52:f8:0f:9b:10:3a:03:04:21:25:85:42:81:73:3d:e2:
         c0:2c:46:35:62:3f:07:51:d0:66:b3:ad:44:b1:37:4d:f0:58:
         34:a7:fa:dc:71:61:5e:55:29:c8:ab:73:e8:eb:d3:ed:8c:e5:
         fd:bc:03:b2:50:3e:f9:89:8a:ec:78:81:17:ad:a1:69:dd:3a:
         f8:36:0e:d0:1f:77:b2:47:6d:ee:35:8e:ec:91:73:85:54:1f:
         85:bd:8c:3f:28:70:2d:dc:ab:28:8c:87:1b:ba:8d:ef:77:95:
         45:f0:5f:a9:6a:20:84:ab:d7:f5:7c:f3:5a:4f:2f:9f:8b:a3:
         b8:3d:d8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org