Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3yuL0di7sDCwo7wdRsPgtJlmjgQ.roa
File:                     3yuL0di7sDCwo7wdRsPgtJlmjgQ.roa (raw, json)
Hash identifier:          oI7ZHw9jrkT3cj7kFfdKISOPk24t8hw33S3WTcvZb/o=
Subject key identifier:   DF:2B:8B:D1:D8:BB:B0:30:B0:A3:BC:1D:46:C3:E0:B4:99:66:8E:04
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0212
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3yuL0di7sDCwo7wdRsPgtJlmjgQ.roa
Signing time:             Tue 30 May 2023 17:40:28 +0000
ROA not before:           Tue 30 May 2023 17:40:28 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:2400::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 530 (0x212)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:40:28 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=DF2B8BD1D8BBB030B0A3BC1D46C3E0B499668E04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:68:b2:bb:f1:9f:15:f7:a6:7c:d5:96:2c:54:
                    73:67:54:4e:fd:c2:8f:ea:17:aa:88:6c:4f:0b:28:
                    d6:11:11:94:30:69:04:8a:61:dd:1a:db:21:3d:9f:
                    eb:8d:66:cd:63:30:13:6f:99:2b:00:78:3f:08:10:
                    e7:55:cf:7e:68:e7:41:73:68:58:2d:eb:df:8a:68:
                    56:dc:0e:f9:70:4d:cd:cc:3d:bc:3d:20:4e:72:db:
                    d4:3f:51:da:fe:6c:41:03:0b:5f:de:43:68:d5:26:
                    b4:66:b8:92:1d:e5:13:61:38:0a:0c:26:16:fd:fe:
                    2b:c4:45:da:7b:43:73:c3:fe:29:19:52:82:31:e8:
                    ef:f1:ee:e5:83:d3:1f:51:85:b6:32:44:6d:4f:0f:
                    ac:e5:d3:fb:e0:bf:d8:51:21:b2:bf:a8:ba:90:7a:
                    de:dd:06:ac:a8:65:1d:32:65:84:2e:84:b2:06:3f:
                    62:4d:5f:a7:b3:e7:18:2f:4e:8d:9f:5d:66:fb:37:
                    6c:02:95:19:b7:e6:33:c6:14:bd:6a:97:6d:35:76:
                    b8:c1:d0:8b:16:79:f5:f8:d0:96:62:cd:06:31:d4:
                    53:c6:3d:f9:e4:b7:0f:3c:ce:82:92:d9:72:7b:e8:
                    49:42:1e:88:d1:f9:58:d8:42:43:ae:90:4a:1f:ae:
                    2e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:2B:8B:D1:D8:BB:B0:30:B0:A3:BC:1D:46:C3:E0:B4:99:66:8E:04
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3yuL0di7sDCwo7wdRsPgtJlmjgQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:2400::/40

    Signature Algorithm: sha256WithRSAEncryption
         06:50:16:43:46:51:24:f6:3d:8a:c1:bf:ad:40:66:7a:69:8d:
         fe:9e:5a:57:60:5d:76:0c:82:f4:3b:bc:52:b4:1e:a2:8e:98:
         d1:0b:17:87:67:7f:98:03:87:d5:8b:16:89:7e:b1:31:28:07:
         4b:2c:b2:69:ee:bf:61:9b:7f:5f:0c:b0:d5:a6:6f:0c:d3:9f:
         d2:bb:77:2b:be:68:7f:8d:bd:ef:de:04:18:2e:de:29:1b:9b:
         32:9a:59:36:0c:cc:a0:5e:4f:a6:ae:48:68:f9:7c:47:06:41:
         f4:89:66:cf:42:8e:fe:de:a8:4e:13:9c:10:87:8c:42:02:13:
         63:7e:30:8d:f8:78:5c:21:a4:02:74:ae:03:6e:2a:89:32:20:
         df:20:f1:8d:bc:b8:64:02:4c:98:3e:30:29:ee:6f:b8:03:ba:
         84:2b:1b:2e:f8:31:d4:70:62:1c:7a:2b:84:78:3f:c0:48:90:
         b4:d7:f8:d1:99:50:b4:ac:e4:e7:92:03:43:9c:e4:46:ee:5d:
         d5:d8:d7:52:58:b2:83:b5:5f:87:ab:eb:8a:09:9e:09:1c:8b:
         94:e4:cc:aa:eb:1c:a2:3d:f4:d3:1b:4c:54:a1:09:0f:1b:30:
         f1:3a:8b:65:90:38:d2:63:57:be:be:52:98:32:1b:49:31:95:
         82:ab:c2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org