Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/7SdylTi8x8hdx_HOnkGVb72TjSw.roa
File:                     7SdylTi8x8hdx_HOnkGVb72TjSw.roa (raw, json)
Hash identifier:          LtNkDkPUdfDXOKzJOrs9I0Q5lTvRV3gyK8YsIVSBRc8=
Subject key identifier:   ED:27:72:95:38:BC:C7:C8:5D:C7:F1:CE:9E:41:95:6F:BD:93:8D:2C
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       012C
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/7SdylTi8x8hdx_HOnkGVb72TjSw.roa
Signing time:             Tue 30 May 2023 17:29:57 +0000
ROA not before:           Tue 30 May 2023 17:29:57 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:5400::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 300 (0x12c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:29:57 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=ED27729538BCC7C85DC7F1CE9E41956FBD938D2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ba:ff:ed:f3:07:43:8a:d7:88:3d:65:ef:8f:
                    7d:1b:c4:27:a2:db:66:69:21:c1:7f:51:36:7b:8c:
                    31:40:4f:13:79:7e:28:95:9e:cf:1f:c7:72:06:0d:
                    9c:b8:25:2e:b3:b2:18:85:8a:33:4d:eb:cb:89:c8:
                    4f:d1:58:e4:1a:b4:a8:b8:50:f2:01:72:eb:b4:c4:
                    2e:af:be:0b:1e:a6:34:80:14:2b:84:76:9e:d7:df:
                    27:61:f4:66:6c:11:3e:6f:88:92:b2:6d:f7:70:c1:
                    d2:24:9a:1d:7a:95:be:73:1c:bc:72:6f:54:df:e3:
                    a6:b8:08:2c:d9:c5:c5:de:15:75:12:35:d0:0d:20:
                    02:cf:ce:fa:84:20:ea:ca:80:ab:52:72:5e:43:9b:
                    86:47:e2:d3:bb:cf:fa:a4:39:23:d7:c9:fd:56:d6:
                    e8:62:98:a1:92:de:c5:72:3a:09:48:61:3d:92:7a:
                    6a:2b:b6:a3:bb:1b:5f:2d:82:52:c2:bb:47:f4:e7:
                    8a:36:14:f5:59:72:ae:a3:5c:52:c7:e7:55:59:63:
                    1e:ba:b4:08:3b:d8:69:ec:69:d7:8f:64:c7:9b:bf:
                    e1:ec:2b:be:35:cb:81:12:2e:7b:13:f6:ea:c4:01:
                    1e:8c:aa:45:85:10:c2:b9:d3:d6:d3:b5:df:05:2e:
                    29:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:27:72:95:38:BC:C7:C8:5D:C7:F1:CE:9E:41:95:6F:BD:93:8D:2C
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/7SdylTi8x8hdx_HOnkGVb72TjSw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:5400::/40

    Signature Algorithm: sha256WithRSAEncryption
         37:90:8f:30:11:42:92:fb:a2:c6:63:93:ba:a5:cf:4b:70:12:
         d4:ce:f7:f9:a0:13:8c:01:2d:8b:89:db:22:c7:a0:eb:0d:bb:
         77:c9:93:3d:7c:1c:50:18:97:62:f3:c0:d5:9e:b3:12:91:31:
         dd:67:3d:40:01:71:e0:22:77:9a:fa:71:91:11:f4:8d:58:07:
         3c:fd:d2:d3:4e:24:74:9f:6b:f5:17:eb:8d:ac:65:1a:d2:91:
         d9:ac:74:89:15:c4:2e:3f:54:ab:79:5f:5c:8d:f9:2d:33:7b:
         95:cf:7e:0f:30:80:2a:fa:b5:43:52:b9:8a:d6:c7:12:74:c8:
         ac:74:8e:03:7a:6b:aa:82:b7:ab:85:d7:b1:ea:02:e6:1d:90:
         a2:e5:8b:24:4e:d3:39:39:28:fd:ab:0c:41:07:e6:61:12:5a:
         7b:af:21:dd:db:bc:ce:66:c6:ef:4a:61:23:1a:cd:54:ac:49:
         fb:ab:53:5c:bc:4b:fb:05:9e:30:00:2a:d6:5a:96:60:f5:e3:
         a7:a4:71:95:74:e2:e6:f9:5c:e0:b9:6a:a4:93:7e:e4:cf:df:
         af:56:47:d2:7e:37:25:86:94:88:7c:be:02:94:98:e3:b6:b9:
         e5:e9:15:bf:10:b7:01:1f:40:81:6a:45:5e:3b:4d:db:c1:d0:
         5a:d9:97:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org