Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/4TC9Mt_6r7-jyTTZ0BRKSaEPB6Y.roa
File:                     4TC9Mt_6r7-jyTTZ0BRKSaEPB6Y.roa (raw, json)
Hash identifier:          5uRwGUsRRqaTQMhDAIdmjPbyv7+LXl8jGrcu8M0USXo=
Subject key identifier:   E1:30:BD:32:DF:FA:AF:BF:A3:C9:34:D9:D0:14:4A:49:A1:0F:07:A6
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       DD
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/4TC9Mt_6r7-jyTTZ0BRKSaEPB6Y.roa
Signing time:             Tue 30 May 2023 16:10:25 +0000
ROA not before:           Tue 30 May 2023 16:10:25 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:b800::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 221 (0xdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:10:25 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=E130BD32DFFAAFBFA3C934D9D0144A49A10F07A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6f:40:a1:68:0b:61:86:b4:29:57:4a:7e:5a:
                    c0:9a:7a:ba:ac:e6:c2:ff:04:d3:79:c2:57:a1:2b:
                    d2:40:7e:2e:00:b0:e4:6e:e1:1e:15:bd:c5:03:54:
                    b4:51:2a:13:1e:d4:e5:a0:01:b3:d0:f1:39:e9:a1:
                    e4:fc:b3:97:32:c2:c7:47:0b:19:d0:bd:f1:29:37:
                    aa:b9:6b:1d:59:8c:15:aa:93:c0:06:5f:58:5e:79:
                    f7:08:aa:57:55:8e:05:12:00:01:76:65:c4:87:af:
                    a3:12:a3:52:b8:0b:9e:7c:b6:8c:75:46:cb:9a:fc:
                    f7:6f:5e:fb:75:b8:20:ea:2b:af:3c:09:10:9e:59:
                    ea:53:41:9f:a0:b3:f0:d8:88:cf:81:52:ff:1a:f3:
                    26:e0:68:64:c4:97:e2:30:c0:fb:3a:1f:55:b0:41:
                    be:e9:02:67:4b:fc:47:8f:08:0d:fb:23:52:11:6d:
                    80:6a:f9:1e:93:66:cc:f8:a5:73:8f:6e:2d:68:a8:
                    8f:3d:41:4d:90:b9:03:62:bc:a7:dd:f4:52:83:cf:
                    49:12:b8:a9:af:98:2f:c8:68:2f:bf:f7:e9:22:1a:
                    ad:06:cb:c2:81:aa:19:c0:79:ed:82:1e:50:29:08:
                    4a:de:52:1d:5e:5e:bd:c2:de:c6:2e:fa:94:9c:6b:
                    66:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:30:BD:32:DF:FA:AF:BF:A3:C9:34:D9:D0:14:4A:49:A1:0F:07:A6
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/4TC9Mt_6r7-jyTTZ0BRKSaEPB6Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:b800::/40

    Signature Algorithm: sha256WithRSAEncryption
         50:90:e7:7d:40:15:83:2d:3c:d1:31:67:14:cb:a8:1c:e5:2e:
         a2:c9:88:b0:5a:4f:eb:31:40:3d:89:f5:f2:27:f4:ea:76:6e:
         eb:f6:22:64:63:94:8d:22:17:57:0e:d7:8b:0a:d2:4b:aa:5b:
         bf:f1:ab:5b:5a:4d:24:d5:cd:13:69:2c:35:1a:f3:1c:4c:9d:
         3c:76:a8:ec:06:bc:b2:0c:af:7b:6e:dc:b1:5b:eb:c7:09:7f:
         e3:6a:f7:37:d8:8e:eb:ca:3c:84:e8:5f:a4:4d:de:2a:13:ab:
         13:30:30:92:9e:2d:57:10:c8:d0:a0:5a:da:da:14:d3:b9:62:
         19:3c:8c:ae:03:e7:5e:41:81:d9:63:d0:de:37:ee:8b:5b:29:
         d5:54:69:6b:8e:27:99:84:1a:a3:eb:76:a0:44:8e:46:39:0b:
         4a:36:88:ca:4a:8b:4b:72:12:e0:ab:6f:f5:05:f5:4e:49:d3:
         29:9d:87:00:1c:34:87:3e:c6:b5:d5:08:9e:28:2a:60:68:e4:
         b1:96:6a:77:30:f6:0d:f8:04:5f:2f:39:60:90:b8:7c:fa:e3:
         4b:8c:2f:30:60:26:da:ae:26:80:43:82:3b:3a:34:44:1d:0f:
         54:c0:fb:cc:f0:fa:32:4d:04:51:4d:22:2a:e2:e7:bb:d7:98:
         4b:86:05:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org