Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/7C3RzSva2QE7uxDB-IeSS1ZZug0.roa
File:                     7C3RzSva2QE7uxDB-IeSS1ZZug0.roa (raw, json)
Hash identifier:          7NalvMwQfNyqAFPN1fElBQtQ5vPJhHo5ZkDgZzlu3F8=
Subject key identifier:   EC:2D:D1:CD:2B:DA:D9:01:3B:BB:10:C1:F8:87:92:4B:56:59:BA:0D
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       CD
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/7C3RzSva2QE7uxDB-IeSS1ZZug0.roa
Signing time:             Tue 30 May 2023 16:10:18 +0000
ROA not before:           Tue 30 May 2023 16:10:18 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:2500::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:10:18 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=EC2DD1CD2BDAD9013BBB10C1F887924B5659BA0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5b:b2:55:e2:1c:87:f0:ea:17:ef:cc:c4:52:
                    24:cc:89:ea:84:95:0a:cc:4e:16:d2:90:5f:72:0c:
                    1f:38:f9:48:eb:f5:d2:f5:2a:7b:f3:f8:bf:9d:64:
                    72:50:cf:8c:0a:3e:a0:5d:89:92:f1:c3:69:4f:03:
                    42:eb:92:96:93:c9:22:a7:c5:0c:01:61:f3:c6:97:
                    49:3b:be:75:da:c9:de:23:0c:1f:de:ab:6f:17:15:
                    38:7f:75:ca:aa:8a:7b:f1:4b:e3:97:bf:ea:c5:a4:
                    20:93:39:23:ab:aa:d3:62:3b:9d:e2:41:16:69:88:
                    99:9e:c2:e0:74:8e:4b:fc:cc:97:65:df:a8:96:a8:
                    96:80:fc:21:89:d9:dc:37:02:b7:26:af:c6:fa:f6:
                    d2:3e:49:62:56:c8:25:31:c8:96:31:81:04:cf:e0:
                    bb:f7:a4:04:83:80:0c:d4:87:e4:9e:1e:54:84:3c:
                    0f:60:47:e3:5b:6d:da:7f:98:bb:9a:e5:4d:7a:06:
                    21:86:51:95:b6:c8:03:5e:fc:fc:15:07:37:2d:0e:
                    75:3e:51:a0:93:7c:8b:c6:3d:4d:4e:a0:9e:35:61:
                    70:72:68:64:69:f2:59:3b:0b:57:f8:1e:7b:f6:59:
                    c8:85:47:0b:15:f5:cf:8f:a2:31:cd:07:04:28:f1:
                    16:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:2D:D1:CD:2B:DA:D9:01:3B:BB:10:C1:F8:87:92:4B:56:59:BA:0D
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/7C3RzSva2QE7uxDB-IeSS1ZZug0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:2500::/40

    Signature Algorithm: sha256WithRSAEncryption
         84:0d:ac:08:86:29:66:25:04:ed:e4:52:57:9d:8e:ae:70:2f:
         93:d9:3f:aa:6a:ce:87:48:db:30:43:57:8d:3a:48:fc:5d:35:
         f2:c8:f5:ad:6c:ac:10:bb:32:df:62:1e:f8:49:62:e6:eb:73:
         a7:2f:cf:12:e5:e1:ce:f4:cc:60:ce:f4:58:d1:28:3a:51:e5:
         0b:0e:d3:74:70:b1:f9:4e:0f:b7:a5:63:6a:38:45:4c:d0:70:
         87:f8:4a:bd:7f:c0:d2:10:ca:b4:70:b7:f3:4e:dd:20:fc:06:
         7a:ba:7f:14:d9:fd:e2:b8:60:28:41:57:6f:c0:a4:db:1a:d1:
         a5:c7:7e:5f:27:27:93:e2:ec:d7:73:10:43:ed:49:a7:5e:8f:
         ab:75:eb:64:10:69:50:5a:e3:34:b5:fe:8d:a3:5f:24:36:aa:
         0b:5a:8a:93:50:ba:18:94:18:5e:c7:6b:de:66:29:80:4c:a3:
         14:be:37:f6:b8:20:bb:38:70:f8:6a:85:1a:21:3c:f3:31:93:
         ae:fd:a3:a1:dd:50:4d:c6:b2:2a:af:93:84:59:fb:1d:40:06:
         d5:88:8b:a5:a3:02:22:a0:a9:d2:b8:cb:6a:45:d4:e2:bb:b9:
         2b:e5:83:e4:ff:26:9c:f0:24:6c:04:e6:96:3e:43:31:af:20:
         2d:a5:ca:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org