Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3Wam_GrnrJAVFCzVH8QdxJiVdro.roa
File:                     3Wam_GrnrJAVFCzVH8QdxJiVdro.roa (raw, json)
Hash identifier:          CDjnEMzrzpe2L1ZltFil4WFmMFZqeKbKFu7bH0ab6NE=
Subject key identifier:   DD:66:A6:FC:6A:E7:AC:90:15:14:2C:D5:1F:C4:1D:C4:98:95:76:BA
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       014B
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3Wam_GrnrJAVFCzVH8QdxJiVdro.roa
Signing time:             Tue 30 May 2023 17:32:24 +0000
ROA not before:           Tue 30 May 2023 17:32:24 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:2c00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 331 (0x14b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:32:24 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=DD66A6FC6AE7AC9015142CD51FC41DC4989576BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:99:f8:c6:b3:c4:28:06:23:6e:06:11:61:36:
                    fc:c2:36:5c:1e:34:29:b0:f9:85:31:4f:f6:e0:39:
                    28:19:5e:48:96:de:d4:29:e0:3e:3a:33:77:2a:43:
                    41:f6:36:b1:99:0a:c2:62:9d:e2:4e:12:e4:bd:0c:
                    de:9f:00:f3:73:ee:c3:62:da:76:cd:2f:07:7a:62:
                    1e:60:95:b4:ac:1d:52:a6:64:71:30:5d:ae:d0:cf:
                    85:16:42:d9:7e:cd:15:67:ae:c8:c2:2b:e9:54:5e:
                    df:9e:46:77:4b:17:95:60:d8:c2:bd:16:29:90:f7:
                    3d:e7:2d:c3:d1:75:83:b1:7e:cc:5e:92:10:ca:3d:
                    cc:68:d9:24:e7:73:81:0a:0f:af:c8:59:cc:48:2a:
                    db:bc:a8:77:a8:48:78:f7:56:9a:42:14:6d:4a:37:
                    b1:4d:4a:02:8e:4e:10:43:d1:67:be:46:fd:53:7a:
                    47:68:43:b8:78:ba:6a:fb:63:c2:ac:c8:a2:a8:28:
                    1d:7a:5a:3b:1c:0f:d4:f7:78:70:6a:37:b4:3d:b0:
                    a6:21:11:a4:79:11:c3:55:d9:a9:23:28:7a:57:eb:
                    44:aa:a9:5b:39:23:bc:a0:a2:df:5b:85:77:cb:5e:
                    c4:6d:67:85:7e:36:9a:08:0b:a9:11:b3:19:94:03:
                    d5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:66:A6:FC:6A:E7:AC:90:15:14:2C:D5:1F:C4:1D:C4:98:95:76:BA
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3Wam_GrnrJAVFCzVH8QdxJiVdro.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:2c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         c8:17:b4:3c:36:5f:8b:5c:7b:05:dd:4b:9b:a3:13:19:63:2d:
         76:d9:37:4a:a2:c0:4a:26:86:89:b7:ed:3e:4d:a5:bd:52:cc:
         54:fa:38:bd:29:39:5e:68:80:61:85:ba:ac:a2:2f:c3:ce:d6:
         40:36:4e:e1:f6:c0:a8:9e:d4:9f:e7:71:3c:7a:60:7b:42:59:
         24:78:60:2b:c0:de:e8:5c:9c:9b:e3:5f:33:a4:ed:07:a4:ec:
         ac:33:92:c2:00:c1:0d:0f:da:55:e6:08:68:2b:6f:77:6d:e9:
         8e:c8:09:29:1e:73:51:e0:7e:d6:fd:69:15:bf:09:e7:bd:be:
         58:a8:6d:f7:fd:a1:58:3d:ab:9c:16:01:2e:41:d1:6a:11:2a:
         cf:f0:e2:e0:6d:e4:89:d5:c5:2c:10:fa:3f:3c:f0:93:c7:b9:
         16:db:66:76:d1:30:f9:e7:c7:d1:11:7d:2e:4f:a8:33:19:a4:
         74:58:5a:fd:e3:f7:34:aa:83:c4:15:c3:42:df:18:9a:4e:d1:
         1e:50:e3:f1:82:ef:21:f5:52:7e:bd:31:23:71:a4:9b:de:9d:
         0d:bd:ae:b7:a0:25:a3:8f:f2:d2:64:ea:31:67:88:1a:dc:43:
         a0:28:05:8d:2b:77:61:3e:11:9b:c1:34:de:ab:aa:81:dd:36:
         fe:5a:1e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org