Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/4MpdxOmYObHCY8OQ7hdaTUQe_sA.roa
File:                     4MpdxOmYObHCY8OQ7hdaTUQe_sA.roa (raw, json)
Hash identifier:          6xAypVkd8LpFovkw5MpqmxbyvfnjHTcfEexcIry4XQw=
Subject key identifier:   E0:CA:5D:C4:E9:98:39:B1:C2:63:C3:90:EE:17:5A:4D:44:1E:FE:C0
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0199
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/4MpdxOmYObHCY8OQ7hdaTUQe_sA.roa
Signing time:             Tue 30 May 2023 17:34:32 +0000
ROA not before:           Tue 30 May 2023 17:34:32 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:3800::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 409 (0x199)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:34:32 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=E0CA5DC4E99839B1C263C390EE175A4D441EFEC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:20:e0:a2:24:35:f4:c7:9b:15:14:96:46:7e:
                    91:1a:43:21:22:96:69:fe:3e:5f:35:9a:00:3b:02:
                    9a:80:92:dc:27:ab:20:d4:a1:71:4a:61:cd:e7:ac:
                    68:b9:5f:79:f0:30:07:fa:e6:89:f8:9a:71:90:ba:
                    3b:96:1c:21:52:6f:ef:d2:cf:c3:77:83:fd:27:8a:
                    e5:4e:a3:0d:2e:ba:c3:0a:c2:32:5b:c5:10:03:2e:
                    1f:da:87:20:f3:11:e5:dc:5d:b0:59:e5:4c:b9:e7:
                    9a:3d:e7:2d:79:12:9e:88:7d:2d:43:9d:32:ca:f0:
                    91:fc:a8:82:d3:63:f3:de:02:b2:67:85:fa:c7:5e:
                    84:5d:04:52:16:22:ef:78:c7:e4:8b:1c:98:fa:64:
                    0f:19:39:f0:74:52:3f:7b:9f:31:bd:68:8c:18:b0:
                    be:9e:4c:8a:e2:20:b2:a8:a1:fc:5d:0a:3b:e3:53:
                    aa:dc:a8:f4:3f:95:37:10:b8:c5:76:b3:51:06:c7:
                    18:0f:2e:8d:19:2e:63:c3:15:f4:37:01:eb:8d:30:
                    ea:a8:91:c4:22:d3:c8:9f:3b:1a:54:71:28:b8:b1:
                    77:66:ae:70:32:ad:12:ad:65:e1:44:40:60:61:c3:
                    d2:14:1c:72:80:90:49:62:cf:6c:ab:6e:4c:53:cc:
                    0a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:CA:5D:C4:E9:98:39:B1:C2:63:C3:90:EE:17:5A:4D:44:1E:FE:C0
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/4MpdxOmYObHCY8OQ7hdaTUQe_sA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:3800::/40

    Signature Algorithm: sha256WithRSAEncryption
         92:af:ba:bf:d9:b4:f6:5b:c8:b8:cb:2e:c8:82:dd:42:d2:72:
         9c:9e:39:e1:cf:ff:e0:d8:fd:5e:66:44:3b:76:7d:13:aa:04:
         5d:be:69:46:b7:1b:93:3d:36:45:ba:4b:05:e8:3d:0e:ee:df:
         fc:1e:a4:73:56:81:dd:7c:bf:9d:08:f7:42:6c:60:dc:8d:23:
         12:8a:f5:b7:73:d8:0a:c7:07:10:d4:4c:ce:11:8e:83:06:d0:
         82:87:3d:12:c7:c0:23:02:0f:75:1e:e9:f3:ca:23:05:f7:37:
         2b:02:49:50:f1:9b:e9:23:ea:a0:53:4f:98:25:e3:6e:10:e7:
         a3:9f:36:7b:31:14:93:86:90:a7:11:79:18:19:91:08:af:7c:
         b2:c2:8e:7d:16:46:a1:05:2e:7f:ca:4e:3e:6d:68:0f:25:e5:
         10:7d:38:4f:43:c7:88:59:e9:8c:d3:76:a7:e8:55:b9:a5:b3:
         0c:2c:26:58:29:90:aa:21:16:47:9a:89:64:f4:79:46:68:0a:
         c2:92:13:56:b1:42:c5:cc:2b:3b:04:0a:36:f6:fc:02:38:c9:
         af:d0:6a:4e:d9:36:63:29:6c:2f:96:d1:60:82:a2:ef:1a:ba:
         ac:59:e9:2c:82:74:34:4b:ed:23:20:6a:d6:5a:95:6b:ca:36:
         86:fc:f9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org