Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9p66hBjbzuodHthjRbt8oro4a6I.roa
File:                     9p66hBjbzuodHthjRbt8oro4a6I.roa (raw, json)
Hash identifier:          EJ4gUQ2Qjq7xPm4u1ZrjaG0rVLkzag2tqekQOrXWL/A=
Subject key identifier:   F6:9E:BA:84:18:DB:CE:EA:1D:1E:D8:63:45:BB:7C:A2:BA:38:6B:A2
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       3F
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9p66hBjbzuodHthjRbt8oro4a6I.roa
Signing time:             Tue 30 May 2023 16:04:15 +0000
ROA not before:           Tue 30 May 2023 16:04:15 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:8a00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:04:15 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=F69EBA8418DBCEEA1D1ED86345BB7CA2BA386BA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cb:23:2d:84:83:c6:fd:4a:7d:a8:77:c5:5d:
                    d6:b7:0e:67:eb:1d:90:2b:ea:de:21:e2:88:a1:c0:
                    a5:2b:15:19:cd:19:be:fb:46:a6:ba:a0:6b:ad:e7:
                    15:07:a4:bd:9e:81:00:0f:44:58:f9:33:b0:84:67:
                    0d:28:88:d3:41:66:7b:67:69:84:f0:88:b4:ae:e2:
                    81:7d:a5:64:99:2d:90:e1:67:95:d2:33:0a:dc:dd:
                    2a:06:2f:a1:00:c5:fc:35:7e:09:48:db:de:50:38:
                    6a:cd:c5:61:46:fc:02:6f:1b:a8:e3:e7:26:11:ea:
                    93:ac:6d:06:ad:d6:a0:1f:40:70:3b:5d:4d:41:f5:
                    52:93:02:0d:02:c0:1c:b8:94:4f:4e:87:f6:7c:e6:
                    6f:34:2c:10:41:c0:51:b9:c8:06:6c:72:26:9f:31:
                    b1:80:3c:18:df:15:72:b8:0a:d5:a1:a9:a2:b2:92:
                    a5:ac:15:cb:1a:33:ba:db:33:1a:7b:c1:98:b3:d0:
                    10:c0:75:71:c4:e6:48:5a:94:c7:5b:6f:d9:54:d5:
                    b4:04:fd:16:43:22:10:e4:78:9b:13:83:13:cf:c7:
                    00:09:78:f9:29:25:4d:30:05:7c:15:e2:f3:e8:3c:
                    03:2f:6f:b1:1f:65:cc:20:2e:17:38:45:70:05:b1:
                    1a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:9E:BA:84:18:DB:CE:EA:1D:1E:D8:63:45:BB:7C:A2:BA:38:6B:A2
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9p66hBjbzuodHthjRbt8oro4a6I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:8a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         08:67:2a:aa:28:49:12:f8:ab:73:72:7d:d8:5c:90:de:11:4d:
         46:2f:d8:64:6c:00:e4:7f:26:e1:e3:ae:21:4a:27:ca:48:c4:
         fe:4a:8f:bf:5b:06:70:8b:80:fd:34:87:0c:0b:84:a1:8e:a2:
         c7:20:2a:e5:3e:9e:42:c4:81:6e:d9:ad:b2:5b:8a:fd:37:f7:
         27:9e:d3:1c:ce:d3:db:9f:81:b3:ee:77:e9:c8:33:7c:8d:a8:
         a1:d7:24:ca:77:3c:87:f9:37:6f:0c:f6:e9:61:ef:2c:3c:02:
         aa:49:98:0f:01:0d:fa:4d:af:af:6b:59:ea:d8:d4:c9:7a:ab:
         4c:54:e7:aa:6b:c8:23:73:1b:98:d0:c8:1c:9e:e3:0f:9b:db:
         b6:29:fc:c4:3a:e3:62:46:cf:49:f3:bd:11:a1:d9:cb:1a:8f:
         d0:d4:f9:42:7d:11:44:e1:c4:5c:11:22:6e:4a:e7:eb:94:f3:
         f2:37:49:95:f8:9f:d3:bd:3e:2a:02:a7:96:2c:08:d8:03:53:
         2b:42:19:77:16:04:fb:8d:23:f4:ba:39:9f:ce:da:c1:c0:77:
         3a:48:ab:20:af:05:a6:ab:a1:38:8a:f9:a0:d5:52:92:e6:62:
         23:5f:92:51:41:5d:7d:32:44:ac:cc:98:54:8f:80:30:19:4f:
         c4:77:d9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org