Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9aR_Zc3nkFnN0hpx_RHVWJWVXz0.roa
File:                     9aR_Zc3nkFnN0hpx_RHVWJWVXz0.roa (raw, json)
Hash identifier:          MvffA5rpIDVZqJYkXNtlzkzf1ZsDFp8sjKQy+1RGLH4=
Subject key identifier:   F5:A4:7F:65:CD:E7:90:59:CD:D2:1A:71:FD:11:D5:58:95:95:5F:3D
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       44
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9aR_Zc3nkFnN0hpx_RHVWJWVXz0.roa
Signing time:             Tue 30 May 2023 16:04:17 +0000
ROA not before:           Tue 30 May 2023 16:04:17 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:c500::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:04:17 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=F5A47F65CDE79059CDD21A71FD11D55895955F3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c6:70:87:4f:89:ea:b5:c7:3d:12:cc:84:3c:
                    9e:f5:85:74:be:47:d4:9f:55:18:d5:c8:dc:90:5b:
                    d9:18:bb:cf:c9:d8:22:0b:37:f7:3d:bb:c8:0d:77:
                    69:73:11:ea:83:c1:e0:a8:6b:1e:96:95:0b:7f:d2:
                    a5:68:a6:25:d0:88:5c:8a:cc:f0:a9:a3:e9:11:e5:
                    89:06:84:e3:19:ef:ef:37:eb:89:f4:c0:ce:73:47:
                    cf:a4:5a:d6:38:0a:73:80:1e:b5:3b:29:77:d8:b1:
                    02:a6:82:d2:d5:11:36:5d:80:45:53:8d:3f:2f:0f:
                    76:11:f4:ae:3a:e3:96:5c:9a:ef:88:d4:47:cf:a3:
                    09:10:b0:17:32:32:0f:ad:8d:d4:7c:64:3a:62:f9:
                    ca:9d:99:c9:77:b6:f5:a5:80:9f:7d:f8:69:9d:af:
                    8a:ba:a3:ea:73:43:35:cb:1c:2e:2e:d2:16:94:e7:
                    9f:3c:e4:e8:65:61:ac:f6:76:29:fc:a5:d9:3f:e5:
                    c6:84:5e:73:30:4c:e4:3d:3e:bc:60:89:f8:0c:06:
                    e0:b9:db:7e:4c:c8:e3:62:ba:fb:a0:d4:d4:4d:b6:
                    b2:be:9a:5f:dd:1b:92:80:01:46:17:c9:fd:b1:86:
                    eb:48:06:a8:a9:13:1b:5c:5e:2b:71:7c:44:44:38:
                    61:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A4:7F:65:CD:E7:90:59:CD:D2:1A:71:FD:11:D5:58:95:95:5F:3D
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9aR_Zc3nkFnN0hpx_RHVWJWVXz0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:c500::/40

    Signature Algorithm: sha256WithRSAEncryption
         8a:1a:55:6f:8b:a0:db:dc:fd:48:2e:18:47:6d:39:9c:98:03:
         c6:e4:3b:d3:de:52:8e:05:b6:4f:f7:8a:33:d8:fd:a1:7e:69:
         93:cc:29:75:fe:24:a2:5d:94:4c:9d:88:8f:59:15:90:a3:4a:
         9b:05:a4:f1:95:45:ec:27:9f:2a:9f:43:e0:59:c7:f3:02:6c:
         f2:b0:f8:19:15:61:08:1a:d6:e7:b7:e0:ae:cc:bc:f1:ea:c4:
         6e:c1:9c:ac:26:a5:b8:38:1a:7d:e2:31:d1:19:51:13:81:3b:
         a2:6c:8d:7b:af:ec:a1:a3:13:97:ff:57:f2:d5:85:2c:b4:c8:
         d8:cd:ae:61:14:a0:03:7a:6b:85:1a:2a:e4:7f:22:bb:09:ef:
         e5:61:2a:bc:be:8c:75:42:da:4e:7c:24:b5:96:78:ec:f2:26:
         dd:5d:a4:4d:e5:d7:8b:48:38:6f:57:89:d2:77:79:4b:90:af:
         6e:f4:97:bc:64:c1:9c:03:34:20:4a:08:ea:88:a3:24:8a:41:
         35:e8:5f:2f:5d:ed:9e:de:4c:9b:04:b2:cf:00:00:e3:cf:b5:
         87:fe:8e:1b:60:dd:bd:7c:13:92:b7:52:69:41:6f:52:3a:b6:
         23:a3:a8:b6:d2:db:cf:46:71:07:d7:50:c1:69:9f:42:dd:ee:
         0f:d0:c9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org