Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/8AJSoLluGpmWV59kNHRHnxb_e70.roa
File:                     8AJSoLluGpmWV59kNHRHnxb_e70.roa (raw, json)
Hash identifier:          BR3Ugz6o3/yGmSDFLuoh/EJccFo+XBR5AKwwB/uV6Bo=
Subject key identifier:   F0:02:52:A0:B9:6E:1A:99:96:57:9F:64:34:74:47:9F:16:FF:7B:BD
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0184
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/8AJSoLluGpmWV59kNHRHnxb_e70.roa
Signing time:             Tue 30 May 2023 17:34:25 +0000
ROA not before:           Tue 30 May 2023 17:34:25 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:de00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 388 (0x184)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:34:25 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=F00252A0B96E1A9996579F643474479F16FF7BBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e6:ef:13:04:b5:4f:62:09:7f:63:07:51:be:
                    dc:fc:b8:d0:a4:7c:f1:2e:13:a7:9e:10:b0:38:94:
                    80:15:5b:07:da:8f:9f:ce:44:f9:2b:f0:4f:fe:f7:
                    31:91:4f:a6:27:d1:22:8f:45:97:0f:01:83:f7:1e:
                    b8:3f:40:36:fd:72:28:6a:76:7d:ff:64:c7:3e:a6:
                    78:d5:41:91:f9:27:a2:3a:be:cf:4d:52:a4:2b:ba:
                    ce:30:ec:32:1f:2f:aa:1f:66:27:2e:14:11:68:89:
                    c0:1f:a6:e6:67:d7:bf:70:7d:17:1a:82:28:19:0c:
                    3f:12:6d:a5:65:82:62:a5:65:9b:92:8d:87:d4:dd:
                    21:4a:38:ad:4f:15:07:03:e7:df:9d:dd:d9:11:9c:
                    97:a2:48:ec:3d:bb:5c:4f:5b:29:86:5f:b4:21:c8:
                    f8:11:41:67:d2:09:cf:35:b5:be:49:10:65:52:26:
                    67:f3:ee:ab:41:92:c4:14:9d:76:7d:c4:73:83:24:
                    4d:40:f5:a3:94:65:23:b8:82:47:74:9d:4d:24:f7:
                    6c:ec:20:e9:36:b7:a7:19:d5:68:0f:79:f5:07:47:
                    71:fa:cb:e9:5e:b6:c9:2e:0f:78:9f:ea:78:3f:d9:
                    28:44:af:7f:93:2a:2c:80:51:04:a2:21:46:51:83:
                    b8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:02:52:A0:B9:6E:1A:99:96:57:9F:64:34:74:47:9F:16:FF:7B:BD
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/8AJSoLluGpmWV59kNHRHnxb_e70.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:de00::/40

    Signature Algorithm: sha256WithRSAEncryption
         49:13:6e:41:2a:b3:4d:45:bf:1d:50:ff:c3:23:61:38:67:4e:
         f9:af:ca:12:4e:86:34:4f:cf:b8:10:46:ce:b7:52:53:c4:59:
         d6:e3:02:34:1e:fc:a1:ab:cb:95:b8:ef:fb:dc:53:e9:76:a2:
         d6:1f:a2:fd:f1:09:cb:49:d2:0d:ed:39:27:2e:31:9b:6f:a7:
         dd:3b:28:e8:99:f2:18:a4:cd:6e:bf:7a:ae:39:1a:86:d3:b2:
         10:b4:d5:9a:24:d4:c9:ee:17:e0:8e:a1:3f:6a:99:7f:fb:6d:
         72:26:65:0f:35:65:9d:92:c2:df:83:7d:06:40:a2:1a:47:67:
         49:13:f1:0e:5c:ea:5e:26:b5:64:c4:94:67:91:b9:96:bf:06:
         47:ed:91:66:f7:e7:cc:02:ff:67:d5:32:dd:aa:51:79:57:24:
         f1:1a:96:d1:f5:a9:64:cd:75:6d:b8:72:7b:7b:55:a8:c9:02:
         7e:44:b9:84:5e:56:ca:12:86:b9:b9:5d:b2:5e:03:58:e7:6f:
         da:38:ee:c3:85:b6:21:1e:ca:cb:5c:be:af:6f:7f:2e:bc:10:
         31:7d:97:f9:70:43:93:c0:32:4f:82:68:07:67:c1:64:40:9b:
         0a:0b:20:f7:fa:bd:7c:16:a7:3b:72:cc:82:ba:9f:b9:02:b0:
         6f:e6:ba:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org