Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3OIi965Fa2wr876Bweu2skxQiVo.roa
File:                     3OIi965Fa2wr876Bweu2skxQiVo.roa (raw, json)
Hash identifier:          yt7BKRY/VvRoL/t1N/Ac5GDCNSXgGN79divuPe/KW7s=
Subject key identifier:   DC:E2:22:F7:AE:45:6B:6C:2B:F3:BE:81:C1:EB:B6:B2:4C:50:89:5A
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0172
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3OIi965Fa2wr876Bweu2skxQiVo.roa
Signing time:             Tue 30 May 2023 17:34:18 +0000
ROA not before:           Tue 30 May 2023 17:34:18 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:3d00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 370 (0x172)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:34:18 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=DCE222F7AE456B6C2BF3BE81C1EBB6B24C50895A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:eb:f8:a6:18:77:64:43:5b:99:25:46:c6:4a:
                    40:79:aa:41:9b:af:18:d0:53:5c:26:04:cb:73:1b:
                    b7:38:59:2e:dd:82:8f:c2:6c:20:ce:c9:82:de:4e:
                    24:ac:6c:a9:e3:10:82:88:57:57:83:b5:67:f8:7d:
                    7f:88:ad:64:b4:ae:d3:08:83:00:2d:32:6e:e5:6d:
                    9d:f9:23:97:cb:21:32:82:bf:58:24:34:d6:93:1c:
                    37:dc:4e:d9:dd:07:98:60:b6:98:b0:f9:95:4b:6c:
                    b6:61:47:2d:23:fd:14:e0:b4:ee:d6:1b:8a:ce:a9:
                    b4:55:fd:8f:7b:60:e4:02:7e:12:c7:ac:16:9a:39:
                    b8:b0:fb:e6:66:0f:2a:72:9d:cf:0f:5f:ed:c3:6a:
                    ba:d1:a1:8f:60:d0:40:0b:28:78:de:02:f7:95:31:
                    4e:cc:e2:12:ac:b1:03:3b:32:94:6c:fd:b5:a1:64:
                    f2:9e:4c:a1:7e:88:f3:54:5f:7f:bb:5f:e4:db:41:
                    2b:b5:90:c0:b3:25:a5:c6:1e:70:11:d2:82:1b:90:
                    2c:24:f7:21:f2:c9:27:37:ee:62:b7:ed:00:43:fb:
                    ad:f5:13:55:4f:39:25:d0:3a:7b:79:c3:1f:1b:60:
                    65:e5:cf:80:a8:1a:3e:87:3c:7a:d9:82:fd:f0:de:
                    76:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E2:22:F7:AE:45:6B:6C:2B:F3:BE:81:C1:EB:B6:B2:4C:50:89:5A
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3OIi965Fa2wr876Bweu2skxQiVo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:3d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         62:5a:62:2f:f6:48:e7:62:f5:d6:66:ab:34:2f:23:76:23:a0:
         d3:31:f9:6e:ed:9a:fb:86:52:4f:e6:4a:33:1b:b7:3d:b8:a6:
         87:1e:56:05:17:3b:05:0d:37:3d:6c:2e:ae:b5:bf:99:35:b1:
         2d:8d:f5:c9:9a:7c:22:e6:de:6a:a7:31:54:16:3a:4b:b7:0c:
         41:ea:b6:8d:46:48:81:83:33:3b:b6:a6:21:63:45:c0:8b:02:
         1d:c1:d8:72:a9:ba:1e:c4:91:f8:d1:d4:7c:c7:0d:e3:a0:51:
         ac:15:0f:ca:c2:e7:f1:52:4f:8f:e7:6c:60:07:ff:cc:e1:14:
         a3:52:d4:94:8c:9d:71:12:a5:8d:a8:0d:50:10:19:38:2d:49:
         29:12:57:fd:22:9e:79:f2:fb:09:89:ef:02:88:2c:82:6b:e4:
         5f:bd:70:64:66:49:f1:28:02:4d:ab:12:23:9c:c8:f1:cd:a4:
         66:f4:ce:88:f1:62:9b:12:10:9a:9f:2c:57:55:0c:db:89:d5:
         0b:28:e0:05:57:b9:59:df:d9:fe:d1:4c:77:cb:86:a1:76:5f:
         c4:10:e7:9d:59:a8:58:3d:af:b0:e6:04:e1:cc:04:61:ce:99:
         8c:6e:45:e1:c1:a5:b2:10:4a:6a:be:fe:81:03:33:63:3f:a0:
         0f:f7:df:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org