Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9SJtv_oWDuF-3WR26-SX0KLzw-w.roa
File:                     9SJtv_oWDuF-3WR26-SX0KLzw-w.roa (raw, json)
Hash identifier:          +MHI/k6z/fGCNC6fWmr8pVeyE+kNtMIuhU5XDvxQFOE=
Subject key identifier:   F5:22:6D:BF:FA:16:0E:E1:7E:DD:64:76:EB:E4:97:D0:A2:F3:C3:EC
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0188
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9SJtv_oWDuF-3WR26-SX0KLzw-w.roa
Signing time:             Tue 30 May 2023 17:34:26 +0000
ROA not before:           Tue 30 May 2023 17:34:26 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:2900::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 392 (0x188)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:34:26 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=F5226DBFFA160EE17EDD6476EBE497D0A2F3C3EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:69:4c:2e:07:ac:81:8b:ad:19:76:f5:7e:15:
                    ee:98:41:b3:2a:23:af:48:c6:89:76:c3:f9:ec:0d:
                    3e:f6:42:9d:7a:01:ef:28:89:54:1f:38:61:12:37:
                    04:37:c8:b7:d4:08:e1:2f:b1:85:11:7c:c3:03:21:
                    a8:ab:09:0c:af:f9:54:ba:7a:b8:13:5e:a5:59:64:
                    55:73:3b:38:53:0c:cb:a1:9c:e9:50:bc:ee:93:49:
                    58:0f:94:29:08:c9:9e:83:e9:70:30:f6:c8:08:8e:
                    43:3e:4b:c0:f3:7a:53:0c:15:7f:1c:8e:5d:23:8e:
                    d8:a6:ba:75:a2:1e:46:ba:7c:73:eb:a6:2c:68:cc:
                    1e:fb:04:59:de:ef:11:2f:eb:bc:83:7f:ef:eb:47:
                    76:d2:8c:b3:29:29:29:42:0f:24:ef:99:1e:01:63:
                    5e:fb:ca:45:60:23:20:1c:f8:45:05:ee:86:65:5b:
                    7c:b2:71:10:f4:c1:15:a8:e3:3e:55:15:5d:6b:d7:
                    cb:d5:de:03:f4:19:ec:af:14:8f:8e:f5:0e:ff:fb:
                    1d:05:c2:85:28:54:9c:73:d6:c5:77:51:9e:28:be:
                    0f:a6:9b:f0:a3:82:e3:ba:95:cd:ea:28:53:c2:a1:
                    5b:30:54:32:e5:2a:e2:fb:67:ed:c5:6c:fe:5c:85:
                    0c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:22:6D:BF:FA:16:0E:E1:7E:DD:64:76:EB:E4:97:D0:A2:F3:C3:EC
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9SJtv_oWDuF-3WR26-SX0KLzw-w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:2900::/40

    Signature Algorithm: sha256WithRSAEncryption
         84:7b:13:98:3b:7b:75:fd:80:97:3e:7a:bd:ed:4e:84:4f:8d:
         f5:a0:c0:4d:ca:8f:61:01:c2:b3:2b:bc:8c:0a:d6:f0:df:5c:
         6c:53:5d:19:b5:f7:14:9e:ff:c6:26:87:e3:8b:d1:69:e9:62:
         4e:1a:a8:10:63:41:f1:44:eb:30:f1:a7:a9:92:10:9a:51:f4:
         ab:81:59:3b:8c:21:5c:7a:11:87:74:65:d5:66:a0:83:05:66:
         3d:2b:fb:97:87:83:3d:39:5f:91:17:7f:14:74:32:36:21:12:
         8e:34:96:92:85:d3:5d:0d:5b:52:7c:6b:ca:cd:00:64:09:91:
         ef:b8:86:b1:a4:56:18:3b:b4:94:17:88:24:65:95:75:5b:c8:
         c3:48:d7:01:1e:24:05:c6:00:06:21:40:d2:2e:6d:66:0f:d9:
         6b:26:7f:2a:e0:fc:87:e3:9f:d0:d8:e1:84:41:3c:e7:74:e4:
         e5:c6:7f:bf:9b:df:0e:58:41:6c:98:ac:2b:84:dd:bd:2b:b1:
         a9:1e:87:ec:5e:10:ab:9d:4f:3d:c3:1f:72:12:4b:fe:94:69:
         d5:be:03:08:ce:de:93:7d:4f:a1:78:ce:34:6d:20:a1:5d:65:
         a2:39:05:b6:d6:c0:2f:21:ef:2b:46:40:be:1a:58:dd:f5:2d:
         8c:0c:5a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org