Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/52RgZseeGJUJ_OchRzSvhBRax2c.roa
File:                     52RgZseeGJUJ_OchRzSvhBRax2c.roa (raw, json)
Hash identifier:          nCx87lUvlKPttgwND0LgkAkKSH+cRDMl5SPzfHeqDeY=
Subject key identifier:   E7:64:60:66:C7:9E:18:95:09:FC:E7:21:47:34:AF:84:14:5A:C7:67
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0192
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/52RgZseeGJUJ_OchRzSvhBRax2c.roa
Signing time:             Tue 30 May 2023 17:34:30 +0000
ROA not before:           Tue 30 May 2023 17:34:30 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:a00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 402 (0x192)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:34:30 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=E7646066C79E189509FCE7214734AF84145AC767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bd:a8:ae:71:a5:74:19:92:42:f3:1b:f9:e5:
                    13:41:01:cc:4f:22:bc:12:25:6c:ff:54:a0:a5:5e:
                    08:f5:26:59:4f:76:f5:15:5d:15:10:5a:8a:ca:e0:
                    35:37:88:1b:34:ce:2b:25:1a:39:39:0b:60:79:6a:
                    13:66:fb:02:ee:66:47:81:1e:b1:87:af:f8:7a:93:
                    97:3f:05:35:a4:13:5a:f5:bc:e7:07:b1:a2:d4:9c:
                    46:54:67:2e:4f:ac:b6:6f:fe:cf:bf:2d:d6:6e:74:
                    9a:be:08:c8:82:da:d4:3e:99:40:45:d7:ac:03:2e:
                    48:1c:e9:cd:29:44:ea:d4:1e:45:de:49:37:8d:7f:
                    f0:ac:31:f0:70:0e:fb:cd:1c:0b:ec:6b:10:78:32:
                    c2:aa:c7:b2:a0:28:2b:14:2e:79:44:dc:24:37:9e:
                    df:d6:7c:aa:73:58:0c:30:7b:db:1e:a4:13:3e:a6:
                    eb:b9:4d:5c:cb:0d:58:dc:2d:1c:dd:7c:3d:36:80:
                    8e:b7:a3:07:a7:81:07:3e:f0:1b:cb:46:a9:9c:7e:
                    08:b7:c6:a7:4d:e8:5f:e3:ae:0b:88:ac:fd:55:ff:
                    0d:02:e2:eb:a8:bb:47:b7:6b:d8:bb:04:7a:04:e7:
                    38:8a:db:8d:ec:83:44:29:54:54:c9:ea:99:b4:74:
                    df:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:64:60:66:C7:9E:18:95:09:FC:E7:21:47:34:AF:84:14:5A:C7:67
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/52RgZseeGJUJ_OchRzSvhBRax2c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         79:7d:dc:f0:d3:ff:a4:56:78:69:78:a9:c8:a3:6d:83:8e:d5:
         8e:29:17:01:8b:80:d5:80:f6:7a:a8:91:07:da:b9:38:ca:32:
         4e:31:db:09:19:37:64:1d:bc:6f:a0:97:c3:7d:85:69:97:6f:
         90:9f:34:00:6e:bb:48:36:e5:09:df:1e:cf:f0:c9:16:52:44:
         73:93:ea:69:51:a0:13:53:ab:4c:62:e4:5f:5b:9d:54:e9:a3:
         4a:19:28:6a:07:63:42:bf:b8:91:88:c7:8b:79:e0:4b:18:db:
         47:c2:3a:c7:da:3b:3e:fa:59:22:a9:19:10:e4:46:8a:1c:e3:
         b5:d7:c8:b4:1d:e5:b4:86:5e:ef:e6:82:0b:f9:9c:e6:bb:38:
         4f:5c:0e:72:4c:71:8e:45:aa:53:71:4d:6f:ee:f3:47:6c:c6:
         47:d4:6b:40:14:2b:85:f6:5d:e3:8e:78:d6:38:93:c6:a1:3b:
         d9:35:21:52:16:e7:c5:30:d9:f3:36:d3:84:b9:96:a5:99:d9:
         fd:b4:56:96:b0:0c:66:6a:b6:a8:1b:ba:96:97:c5:27:aa:70:
         db:04:d3:9f:3c:de:57:62:15:d1:47:f6:1e:2e:60:12:a2:25:
         4b:1f:33:a0:c4:11:d8:16:6c:01:e3:30:e1:70:dc:e3:a4:76:
         0a:3d:48:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org