Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/4ePiWLEuMZT9OAc7umvsa9Kwyec.roa
File:                     4ePiWLEuMZT9OAc7umvsa9Kwyec.roa (raw, json)
Hash identifier:          /dRArf+qrHPBIzYFsTaWP5Eu2orBCxtrdH0OvmXquXw=
Subject key identifier:   E1:E3:E2:58:B1:2E:31:94:FD:38:07:3B:BA:6B:EC:6B:D2:B0:C9:E7
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       56
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/4ePiWLEuMZT9OAc7umvsa9Kwyec.roa
Signing time:             Tue 30 May 2023 16:04:22 +0000
ROA not before:           Tue 30 May 2023 16:04:22 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:7600::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:04:22 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=E1E3E258B12E3194FD38073BBA6BEC6BD2B0C9E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c7:56:c9:62:fc:07:20:99:6e:de:b9:65:b2:
                    85:6a:33:fb:f0:e6:4f:7c:53:b0:7d:95:59:b2:04:
                    b1:eb:4b:38:1b:1e:45:1a:b9:64:a6:11:86:a2:48:
                    3e:ce:47:0f:86:36:65:4a:40:72:b0:34:8d:1d:82:
                    74:62:cf:e3:34:46:29:12:04:12:92:c3:29:2b:ed:
                    97:00:e9:44:88:6b:34:f7:60:ac:da:cf:66:60:13:
                    b1:c7:94:e4:2b:e8:c0:26:83:a5:ab:13:f6:75:a9:
                    90:10:79:4f:69:5a:dd:52:a6:ed:d2:8c:e4:d3:e5:
                    bd:58:08:86:48:55:45:44:1f:16:ef:32:66:5f:52:
                    40:15:8b:7e:c0:ed:44:be:c3:e6:78:09:38:8b:2e:
                    7c:b0:09:e8:a5:b3:d8:1b:1f:9d:b9:02:fe:8b:3e:
                    e3:ae:35:cc:07:c8:30:5a:e5:47:11:ac:3a:60:b5:
                    bb:f5:a2:ef:ec:46:92:14:54:d3:29:da:ef:7b:d5:
                    e4:af:63:e2:12:97:86:e3:f4:83:f0:97:3b:ce:9b:
                    82:f2:5f:f3:f4:be:41:c9:20:b1:e4:16:e3:63:9a:
                    83:9e:dc:56:f3:3c:23:96:d2:c9:69:81:b0:6c:6d:
                    68:b4:af:8f:5b:f9:7c:cc:4e:e6:17:8d:bd:ee:f5:
                    7b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E3:E2:58:B1:2E:31:94:FD:38:07:3B:BA:6B:EC:6B:D2:B0:C9:E7
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/4ePiWLEuMZT9OAc7umvsa9Kwyec.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:7600::/40

    Signature Algorithm: sha256WithRSAEncryption
         1b:94:74:17:f9:d4:3d:9a:4e:9c:0c:38:c8:c3:ee:19:9c:28:
         6f:e4:b2:17:e2:0a:66:eb:d7:13:6f:c8:74:38:39:36:7e:b3:
         ca:8d:7d:99:49:ea:67:44:bd:5d:01:5b:61:3d:49:63:df:44:
         2f:65:11:49:92:c9:4c:fd:08:ce:bf:cf:1c:d5:e7:b4:77:18:
         a4:e0:6b:49:3d:ed:21:2f:fb:be:df:ab:c4:9d:a7:d0:e9:90:
         70:73:12:95:e7:f7:18:2e:51:e9:ba:81:78:ca:43:43:95:d3:
         bc:eb:bd:1b:e4:ea:50:93:01:bd:64:99:44:9f:86:f8:df:3f:
         26:59:e8:27:28:c0:7f:b7:4b:bb:58:c9:c9:3e:61:50:a8:8a:
         4b:62:49:ea:4d:3f:65:a4:19:6e:6b:a7:dc:c5:f3:f1:fc:f3:
         f3:8e:6d:d0:47:cd:ca:75:c8:d6:68:58:6c:bc:bb:dc:60:59:
         91:04:bc:55:4a:b3:2e:3f:22:68:b1:05:c2:f0:12:6f:d0:27:
         79:35:dc:bd:c5:f9:84:c7:2b:59:3c:64:8b:83:90:52:51:29:
         ac:92:fa:0e:28:bc:3d:9c:b8:fb:5a:52:c0:7c:e1:75:d9:e7:
         46:b9:75:49:0c:a8:17:24:eb:1d:2f:3b:5b:fd:3e:81:24:e3:
         7d:e0:29:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org