Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/7CFcC5ItXIRh62Zen4pfjJmd_y8.roa
File:                     7CFcC5ItXIRh62Zen4pfjJmd_y8.roa (raw, json)
Hash identifier:          LkMZc+9hsfdfDHgxyTuy+EOdGwKSCNDb1hQsh/Z3uPM=
Subject key identifier:   EC:21:5C:0B:92:2D:5C:84:61:EB:66:5E:9F:8A:5F:8C:99:9D:FF:2F
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       42
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/7CFcC5ItXIRh62Zen4pfjJmd_y8.roa
Signing time:             Tue 30 May 2023 16:04:16 +0000
ROA not before:           Tue 30 May 2023 16:04:16 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:1800::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:04:16 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=EC215C0B922D5C8461EB665E9F8A5F8C999DFF2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f4:52:42:6f:a7:86:fa:9f:98:51:25:df:15:
                    8b:56:3c:bb:08:4a:eb:3c:70:06:c9:f6:1c:82:51:
                    01:37:00:2f:68:64:fc:70:8e:4a:93:51:4a:bf:9f:
                    8b:9b:fc:78:86:75:24:60:ea:ec:c5:cb:01:e6:b7:
                    29:d1:ac:0f:b1:10:66:15:56:f0:b0:ad:3e:e6:da:
                    95:61:dd:59:36:4c:32:74:ff:af:4b:58:19:b6:27:
                    98:dc:1e:62:62:57:b0:e8:ea:f3:ea:af:ab:0a:52:
                    a0:9d:b2:21:24:13:d1:3c:1e:11:52:96:87:51:b7:
                    dd:99:51:6c:c2:0e:89:56:53:8f:0d:9c:f6:bd:02:
                    8d:9e:b4:b3:43:19:1b:94:79:95:85:58:e9:9c:23:
                    c7:a7:21:8e:c5:81:6b:14:43:be:e2:de:d2:2d:7e:
                    b0:35:ba:fc:9f:be:6d:9a:7a:f9:11:77:e4:a8:16:
                    97:34:d2:22:dd:eb:79:d5:0e:77:b4:cd:b7:07:35:
                    ea:5c:69:52:57:0d:08:b9:ac:99:a1:83:72:ab:4b:
                    99:19:f3:4a:51:9f:78:d7:99:f5:77:50:e1:8d:cf:
                    b0:4a:72:51:f2:f7:a2:5d:9e:b5:c1:f2:24:6b:1b:
                    dd:38:a4:b3:2f:b6:08:ee:9f:9c:56:c0:a0:8c:43:
                    d6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:21:5C:0B:92:2D:5C:84:61:EB:66:5E:9F:8A:5F:8C:99:9D:FF:2F
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/7CFcC5ItXIRh62Zen4pfjJmd_y8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:1800::/40

    Signature Algorithm: sha256WithRSAEncryption
         81:bb:38:cf:56:85:e0:85:08:31:70:71:4a:05:94:93:11:bd:
         51:95:77:7b:e9:f2:9d:3d:2a:d4:f9:d5:83:c0:e8:0f:92:0d:
         3d:33:55:3c:f1:c8:cf:a9:8c:b2:86:87:df:19:e1:ba:f5:41:
         98:fe:14:82:d2:aa:10:cd:dc:cd:ca:ce:91:41:a5:ac:99:ad:
         bd:de:20:6d:8b:db:a7:24:a4:90:d2:76:6d:b0:98:fb:eb:81:
         e6:d9:c7:ec:7d:9a:53:5c:cc:8a:ed:c2:92:1c:e9:23:a0:fe:
         de:1d:cd:6e:97:a2:10:e4:90:dd:0d:ee:f9:a1:a0:a5:da:d0:
         d2:56:a8:d6:e0:7e:fc:1b:a6:94:4e:59:81:dd:db:5e:2a:38:
         b3:10:36:a1:2e:77:cc:cf:db:6f:af:1d:12:4d:fe:24:5d:3f:
         ec:c6:aa:22:d1:9d:75:2f:5e:42:9f:71:07:8b:6c:6b:0f:18:
         eb:7d:e9:1f:ba:a1:17:76:25:9e:dd:ef:e3:06:cc:d1:c1:34:
         09:f2:a4:7c:69:a6:1c:f1:be:19:11:22:bf:47:1b:4a:f3:dd:
         3b:f8:51:2f:2b:a8:88:35:e4:8a:d5:f1:dd:75:18:f0:90:29:
         c6:76:d8:fa:00:c9:81:a7:ed:56:5c:31:2a:53:74:84:fa:12:
         21:f7:41:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org