Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/72ByGqC6ibdfY_LWM-XE2Qru4tU.roa
File:                     72ByGqC6ibdfY_LWM-XE2Qru4tU.roa (raw, json)
Hash identifier:          6Ba4FtceuvnxLvgppSVRFqS024u53nEW19SNOK0y9rg=
Subject key identifier:   EF:60:72:1A:A0:BA:89:B7:5F:63:F2:D6:33:E5:C4:D9:0A:EE:E2:D5
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       010E
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/72ByGqC6ibdfY_LWM-XE2Qru4tU.roa
Signing time:             Tue 30 May 2023 16:12:35 +0000
ROA not before:           Tue 30 May 2023 16:12:35 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:3000::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 270 (0x10e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:12:35 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=EF60721AA0BA89B75F63F2D633E5C4D90AEEE2D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d4:14:7a:60:32:a5:36:bc:96:4a:8f:94:e7:
                    0a:e1:46:55:8f:b9:d7:5d:0e:89:fd:e1:d6:43:d9:
                    cd:9a:44:a9:8a:7a:f4:7b:27:9b:de:aa:a2:fa:4a:
                    49:24:ed:34:9c:41:d2:b2:27:72:ca:08:29:ed:17:
                    4a:ef:77:1b:14:63:1e:a4:65:00:ae:25:9e:93:ae:
                    05:2f:9d:dd:15:8c:42:a4:01:cc:0e:60:31:09:ce:
                    93:3b:73:fc:41:95:4e:4c:28:db:1f:bc:1b:a3:6c:
                    77:cb:e4:5b:ca:bb:2f:83:4e:6b:24:fd:de:88:3a:
                    f2:f0:66:59:3c:5e:06:93:ec:6c:d7:2b:50:81:f7:
                    1e:6c:a1:93:84:21:4c:78:f6:b9:8b:ce:0e:00:06:
                    87:ed:a9:01:2f:07:64:be:44:39:e6:fe:27:c2:c7:
                    96:2c:0d:62:96:39:ef:9d:26:91:f4:43:0d:84:45:
                    d8:a1:e5:c6:ae:f9:43:c1:a1:3a:dc:18:ce:50:a9:
                    3d:a8:3b:a6:e8:23:6d:19:c9:dc:b1:b1:67:08:e7:
                    27:fc:79:c0:58:34:e7:ca:02:d8:4f:f0:e3:dd:ee:
                    6c:7d:16:b0:f2:ff:55:44:13:97:40:fa:c7:f3:49:
                    25:b8:c1:10:df:af:83:2d:8b:56:59:78:ad:a1:4e:
                    83:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:60:72:1A:A0:BA:89:B7:5F:63:F2:D6:33:E5:C4:D9:0A:EE:E2:D5
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/72ByGqC6ibdfY_LWM-XE2Qru4tU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:3000::/40

    Signature Algorithm: sha256WithRSAEncryption
         be:8a:02:f5:f6:05:64:f2:d3:de:07:3c:c7:f4:94:6e:8e:e5:
         e2:d9:a7:fa:06:92:81:76:88:77:24:50:b4:4d:c7:ff:80:a6:
         a9:c7:d5:72:16:dd:57:83:81:d3:02:77:ea:c6:d4:3c:50:fe:
         49:ae:62:a7:50:18:be:bc:0a:0f:f8:3a:10:45:f7:7b:20:ef:
         fb:17:31:a1:ab:94:b7:98:7e:c7:04:16:52:cd:5a:7c:01:43:
         dd:88:7e:8f:d4:86:12:ef:3f:8c:de:70:6f:30:66:38:a5:dd:
         87:b3:f6:8c:44:69:bf:10:ae:62:6e:cc:a5:13:21:1d:47:49:
         3b:d5:36:25:81:f7:92:b9:81:89:27:83:f8:65:1c:18:49:02:
         50:b0:91:f6:4a:22:4d:4a:c0:68:2e:0e:45:0f:6d:d0:ca:57:
         ab:3d:3f:6b:d9:81:a3:ef:d6:76:95:d1:13:f0:91:b8:d1:37:
         ef:ff:63:92:7a:5b:ff:e7:29:e1:d1:12:6d:49:27:bc:a6:cb:
         b3:7a:bb:3d:38:4a:e5:a2:17:c5:15:4b:47:0a:62:56:50:af:
         ae:8b:7b:80:c6:fe:5d:a1:d7:a7:34:2c:ac:88:fa:b7:67:ad:
         38:5d:b1:4a:52:f8:b5:b5:00:db:2c:21:9a:34:2d:59:a5:50:
         78:1b:eb:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org