Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9cGN72UzNS-i2nksqDt5hYXR3O4.roa
File:                     9cGN72UzNS-i2nksqDt5hYXR3O4.roa (raw, json)
Hash identifier:          cOHyd51vakhwqAPehh6f9ul0zAPvRC2q0RIHPSq5w1E=
Subject key identifier:   F5:C1:8D:EF:65:33:35:2F:A2:DA:79:2C:A8:3B:79:85:85:D1:DC:EE
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0228
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9cGN72UzNS-i2nksqDt5hYXR3O4.roa
Signing time:             Tue 30 May 2023 17:42:23 +0000
ROA not before:           Tue 30 May 2023 17:42:23 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:3300::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 552 (0x228)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:42:23 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=F5C18DEF6533352FA2DA792CA83B798585D1DCEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:f9:88:24:a4:26:4b:6a:f7:3f:09:f1:b6:24:
                    6b:aa:b1:b3:d1:e8:5b:d0:19:ed:44:65:dc:5c:d4:
                    fb:9e:0e:76:68:b4:29:17:62:6a:83:12:78:bf:5f:
                    54:6c:48:88:08:25:32:51:7f:20:08:8f:1b:2b:b6:
                    7b:5e:98:1d:58:f9:b9:3a:31:b3:7d:e2:75:a0:bd:
                    bd:75:75:9a:d9:41:d5:69:d5:67:23:61:ff:b5:4a:
                    2b:d9:f8:df:18:e6:75:bf:21:61:73:22:e0:e4:0e:
                    0d:96:fb:55:47:c2:41:57:0a:d3:a3:c2:cd:ed:40:
                    28:0f:01:77:63:a3:35:fb:55:52:ff:bd:ec:81:35:
                    49:2f:60:7a:9f:c0:31:46:01:f6:78:5a:54:d9:46:
                    29:10:a3:d8:2d:0c:a9:9a:f3:de:8a:06:5d:84:db:
                    19:1d:a6:44:61:96:67:71:3c:14:b1:28:42:3d:48:
                    e0:97:ac:37:ce:0a:31:84:ae:dd:9b:c4:b7:f8:82:
                    f1:c4:05:39:f9:3a:0c:5d:0e:af:74:4c:f1:ad:9e:
                    d2:be:ff:f0:1c:5b:79:5f:eb:74:f2:ae:e3:a0:df:
                    57:53:b5:9d:cb:c8:7d:59:e7:c8:15:a0:8d:35:32:
                    41:7c:72:ed:e4:d3:58:12:a3:93:ae:a5:0a:ed:45:
                    da:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C1:8D:EF:65:33:35:2F:A2:DA:79:2C:A8:3B:79:85:85:D1:DC:EE
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9cGN72UzNS-i2nksqDt5hYXR3O4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:3300::/40

    Signature Algorithm: sha256WithRSAEncryption
         82:71:62:22:19:19:1f:f9:3e:fc:e9:3d:1c:5d:21:fc:a3:80:
         cf:bf:d7:ae:b0:90:f5:49:38:89:09:dc:f7:28:98:2a:ab:6b:
         6a:47:af:de:2c:a6:3a:fc:c6:84:0a:88:49:7d:89:d9:69:30:
         86:1d:08:95:99:fd:f0:15:74:f3:25:4d:1c:51:c6:50:1b:c7:
         58:eb:9a:a7:15:01:25:7b:1a:1b:d2:25:85:a3:cf:e4:77:a6:
         46:2c:0e:2e:1a:bd:04:c8:7f:c8:fa:0e:57:f4:4f:83:f9:25:
         8c:27:4e:4f:df:6a:a8:1e:ac:35:f5:76:5a:01:36:79:36:ca:
         d3:07:b8:80:41:03:62:7b:6a:f0:93:06:54:84:4e:d5:ec:e0:
         de:0b:42:92:cd:4c:c4:6d:89:0d:0c:0d:be:da:28:4d:29:1c:
         74:0b:11:b8:65:3a:c6:e7:bd:3c:5c:a2:f8:45:5e:b6:48:64:
         d6:af:d0:d0:0e:c4:05:ac:8b:5c:7a:35:39:ed:84:33:59:b7:
         bb:df:b8:a7:5b:e1:d4:b5:58:f2:74:99:42:26:2e:16:49:f8:
         60:fb:17:e8:01:59:8e:3f:83:20:37:83:b5:45:68:fa:06:f5:
         ee:2b:66:a2:00:ce:b0:28:89:31:0f:d9:84:7d:29:0f:7b:11:
         2b:16:6b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org