Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/7_R6xAiXWBvR6rmGtT38FokXPmo.roa
File:                     7_R6xAiXWBvR6rmGtT38FokXPmo.roa (raw, json)
Hash identifier:          KXDxywbFzCQ1iQPPsPQAnYVj+Co6d/+sY0961ZOTJfU=
Subject key identifier:   EF:F4:7A:C4:08:97:58:1B:D1:EA:B9:86:B5:3D:FC:16:89:17:3E:6A
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0142
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/7_R6xAiXWBvR6rmGtT38FokXPmo.roa
Signing time:             Tue 30 May 2023 17:30:08 +0000
ROA not before:           Tue 30 May 2023 17:30:08 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:7100::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 322 (0x142)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:30:08 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=EFF47AC40897581BD1EAB986B53DFC1689173E6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:75:17:56:29:a1:9d:a2:de:fb:7c:24:14:03:
                    20:18:09:ee:24:9d:9e:f7:c5:7a:ef:ec:e2:c5:39:
                    a8:62:88:d1:ee:56:6d:b7:6d:b9:b3:eb:98:47:d3:
                    50:10:3b:fd:65:4d:26:7b:27:d3:52:07:74:70:68:
                    3a:bf:f1:4b:bd:43:e1:1b:d7:ad:68:28:fa:49:a0:
                    73:53:8c:d3:f7:f9:d5:03:07:2f:0b:3a:46:64:0d:
                    4e:a8:c4:cc:93:3b:14:4e:4d:cd:3a:dc:19:98:27:
                    28:b1:04:f7:79:53:b1:09:27:cd:7d:bd:c1:38:5d:
                    2e:fb:61:1b:8c:95:ab:4a:b5:ce:75:af:77:87:cc:
                    11:8b:a7:10:a5:dd:3a:8a:b4:5a:e5:a1:07:a8:50:
                    1d:0f:62:12:b1:dd:b4:ca:94:64:9d:3d:ed:36:b1:
                    de:a9:5e:3c:41:3f:d3:a8:bd:21:f6:3f:3e:41:4e:
                    c9:fe:cf:f9:5f:ad:98:c9:65:1a:51:89:30:eb:f9:
                    f6:ab:7e:ea:4a:96:dc:60:ce:4c:d7:fa:15:33:8b:
                    94:78:8c:3d:9c:1f:2d:24:78:93:e2:31:7e:b7:85:
                    4a:91:fe:92:ae:23:eb:5d:37:aa:36:dc:45:c5:5f:
                    60:2f:6f:f4:ee:f0:4c:3f:ac:2c:ea:22:1e:0b:b4:
                    38:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F4:7A:C4:08:97:58:1B:D1:EA:B9:86:B5:3D:FC:16:89:17:3E:6A
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/7_R6xAiXWBvR6rmGtT38FokXPmo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:7100::/40

    Signature Algorithm: sha256WithRSAEncryption
         6f:f3:c5:46:e6:25:9e:5d:be:ef:82:2c:32:85:94:08:95:7d:
         75:fa:7a:48:3c:9b:71:00:d2:ef:85:06:9e:da:67:50:d1:68:
         5a:c2:88:c7:94:69:2b:d2:42:03:48:0e:2d:f0:31:ee:cc:47:
         52:01:29:db:27:2c:ba:57:89:67:46:af:cb:d8:f3:6d:81:4c:
         2e:b0:4f:00:db:43:ef:c2:9e:ee:34:ec:93:a0:b4:72:43:b1:
         87:6b:f8:4c:fc:f9:a7:d3:b5:09:4a:59:bc:95:b4:72:91:ce:
         34:01:da:c0:4a:21:c3:d1:4b:8b:a6:c2:29:9a:a4:ff:d3:77:
         fe:57:e2:3b:db:21:ed:d9:e9:74:38:25:0b:4c:6b:2b:d4:de:
         7e:8e:9a:7e:29:96:a9:b6:dc:a5:a0:f0:38:16:82:5d:ab:8b:
         1f:4f:d8:d7:59:b2:5c:ad:b8:c3:b0:1a:34:67:47:35:20:ac:
         52:37:28:7f:7f:e1:45:93:ab:2b:dc:28:aa:f3:2d:05:cb:5f:
         d9:78:16:f4:67:22:e3:21:07:d1:16:5b:20:fb:79:3f:45:2f:
         6f:47:ba:a7:c0:0c:7d:5b:64:fc:16:75:89:b9:70:7a:3b:db:
         5c:d8:56:b2:42:f1:5b:68:07:6c:2e:38:8f:4e:1d:dd:44:c9:
         2a:68:b0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org