Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9p8ksO5BzgyI9sWnwmSGYsk5dis.roa
File:                     9p8ksO5BzgyI9sWnwmSGYsk5dis.roa (raw, json)
Hash identifier:          TDkkUB62Lm461sXVGV6r0TF6d/4rZGl+zKVokET0jFE=
Subject key identifier:   F6:9F:24:B0:EE:41:CE:0C:88:F6:C5:A7:C2:64:86:62:C9:39:76:2B
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       81
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9p8ksO5BzgyI9sWnwmSGYsk5dis.roa
Signing time:             Tue 30 May 2023 16:06:25 +0000
ROA not before:           Tue 30 May 2023 16:06:25 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:d000::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:06:25 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=F69F24B0EE41CE0C88F6C5A7C2648662C939762B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:22:2c:c0:99:40:5b:6e:f1:f9:c3:74:3a:6f:
                    8d:66:72:ca:1e:8e:c6:eb:fa:70:59:f6:99:24:54:
                    04:da:20:7e:65:36:3a:ed:69:1d:28:58:bc:fc:30:
                    bc:11:3b:24:bb:81:e2:cd:14:b5:a0:39:07:cb:af:
                    1e:2c:6b:22:3c:75:36:e1:a0:ce:3d:d9:ee:bc:62:
                    e8:c6:5d:20:a8:4b:fe:f1:d9:22:9a:1c:a2:38:c6:
                    f2:1e:3c:a9:17:01:20:ae:4a:4e:d9:92:97:64:37:
                    80:13:af:54:bd:37:a1:e8:99:7b:d7:41:b7:db:60:
                    b2:3b:b3:53:7b:43:46:7b:5a:2f:f3:fc:64:49:d8:
                    69:a8:43:56:32:96:27:d1:a4:9e:d1:aa:2e:b9:40:
                    c1:1f:7f:0a:01:a6:dc:13:e8:05:88:e8:94:43:ad:
                    53:d5:86:b5:84:26:1f:b6:85:ae:78:81:6b:97:68:
                    69:da:e8:21:c9:cc:7b:58:d2:9c:dc:8c:c1:00:15:
                    87:f7:94:86:6c:c0:44:48:c7:a5:df:29:d4:f0:ae:
                    18:f6:c6:00:0c:fb:a6:ae:82:5d:dc:75:c3:c2:4d:
                    61:c3:a7:62:10:30:a9:6b:36:0a:cd:c3:c5:c9:11:
                    d9:87:8f:c9:65:0f:8c:0c:7e:76:29:0e:27:22:2a:
                    cb:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:9F:24:B0:EE:41:CE:0C:88:F6:C5:A7:C2:64:86:62:C9:39:76:2B
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9p8ksO5BzgyI9sWnwmSGYsk5dis.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:d000::/40

    Signature Algorithm: sha256WithRSAEncryption
         be:13:fc:7f:16:03:73:97:81:e5:e7:1d:91:87:b1:90:f0:da:
         a4:1d:9e:83:c5:13:c6:8f:61:f1:8a:13:87:cd:7c:b3:24:7b:
         f2:eb:8e:df:e7:17:37:fc:9f:a6:c6:1f:40:63:73:bd:85:c7:
         f4:cf:72:c6:99:64:f5:76:be:22:51:72:a9:e4:42:6c:68:72:
         74:b7:b2:b7:25:96:91:38:b4:00:9c:34:71:45:3a:76:d1:98:
         3f:aa:1a:58:f9:5e:db:f8:7f:7d:a7:bd:5e:35:35:00:31:8e:
         00:47:3c:31:1f:4c:f3:c6:11:77:28:bd:6e:e7:0f:38:e7:f9:
         6d:ec:52:fe:77:96:43:d3:2f:8b:51:4f:3e:e8:bb:ae:44:1d:
         a8:f5:dd:8a:02:24:11:01:0a:17:07:cb:25:57:1a:37:86:43:
         48:3d:ee:fa:99:69:0b:b3:a5:2d:bc:5d:25:ee:2c:c6:df:69:
         cf:8c:52:ce:91:79:f1:30:f9:af:78:d4:de:98:92:96:a1:3e:
         02:fa:33:ac:fd:3b:49:22:30:f9:1d:9a:c6:8b:65:1a:9e:99:
         d7:cf:c0:ed:f2:b8:e6:2a:ed:19:f1:e4:90:2c:09:2f:97:d1:
         5e:c9:90:87:be:42:06:14:15:09:5d:cf:bb:38:8e:62:1e:9d:
         28:26:c9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org