Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9vw3CzK0R9R5HXmakEhurWhDLuM.roa
File:                     9vw3CzK0R9R5HXmakEhurWhDLuM.roa (raw, json)
Hash identifier:          IUh1dBedopOvpQ1UOtRiZH2fgESuDuTlrEaR96saFIY=
Subject key identifier:   F6:FC:37:0B:32:B4:47:D4:79:1D:79:9A:90:48:6E:AD:68:43:2E:E3
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0237
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9vw3CzK0R9R5HXmakEhurWhDLuM.roa
Signing time:             Tue 30 May 2023 17:42:27 +0000
ROA not before:           Tue 30 May 2023 17:42:27 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:ed00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 567 (0x237)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:42:27 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=F6FC370B32B447D4791D799A90486EAD68432EE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:16:38:5b:ae:eb:2b:81:62:cb:8c:65:70:50:
                    b4:f0:3c:3a:8e:d6:6d:4b:0a:c8:eb:13:fb:9b:f3:
                    d8:b6:5c:3e:76:2f:2e:14:a3:fe:a1:54:1a:c6:c3:
                    47:96:38:9e:37:f4:12:59:e0:12:15:7b:a6:68:8e:
                    0c:2a:9c:57:c0:d1:93:a3:1d:a8:9a:8c:e3:4b:1e:
                    96:83:ef:40:e5:58:0a:01:1c:6a:ce:f5:0f:30:3d:
                    b6:7f:04:8e:23:4c:89:68:ed:6f:8e:43:06:47:e7:
                    34:c2:09:5b:a4:88:62:c9:e5:e3:19:da:e7:cf:24:
                    49:11:0d:ce:11:f2:15:d4:25:c5:09:80:dd:51:40:
                    cd:48:1d:a7:fd:98:e3:fe:a2:44:30:cd:7d:90:b3:
                    8e:18:0d:8e:dd:b6:8d:eb:2e:10:5e:4b:bb:0f:52:
                    81:8d:20:58:f5:eb:ff:4f:48:3e:31:ad:70:d0:d3:
                    8e:ac:f5:c5:49:bb:0b:aa:97:59:e7:0a:86:05:cc:
                    a5:2e:79:13:dc:cd:80:a5:e7:84:a4:b7:93:50:f6:
                    59:8d:33:15:0b:b6:ae:c8:32:fb:72:89:f4:a1:cd:
                    07:fd:6d:2b:d6:69:c7:de:35:a5:7b:e4:d4:e2:62:
                    4b:f0:31:29:18:a9:b8:51:c6:ee:80:de:8b:1c:92:
                    32:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:FC:37:0B:32:B4:47:D4:79:1D:79:9A:90:48:6E:AD:68:43:2E:E3
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9vw3CzK0R9R5HXmakEhurWhDLuM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:ed00::/40

    Signature Algorithm: sha256WithRSAEncryption
         c8:db:03:09:ed:20:da:d9:e7:f2:7b:85:32:e7:14:6e:bd:c7:
         e6:20:ab:2b:48:d6:0e:87:e8:59:f8:ce:b2:e4:0e:6f:64:15:
         62:4f:f9:53:b7:00:e0:47:de:c1:ec:27:10:d8:49:f9:d3:01:
         94:77:7d:fa:88:fb:e3:d6:e4:9c:0b:d7:5e:c8:37:43:36:10:
         8f:04:58:3e:e4:3e:13:90:4a:94:ab:60:b2:ab:02:ca:c8:5b:
         5c:c9:5c:0b:e9:b4:2c:90:f1:92:53:a6:fe:2c:29:bd:b0:54:
         57:10:0b:de:1d:20:3f:06:a7:72:14:a3:e1:4c:3a:61:ac:ba:
         4b:9d:4b:38:bf:c4:16:58:44:eb:d0:ac:87:0d:03:24:ec:68:
         b9:c9:55:a0:c6:cb:97:85:d3:57:9c:6e:5a:98:21:d0:cd:7a:
         60:d8:07:b6:9f:18:82:d2:9b:e9:ad:2b:f7:fd:5b:b9:12:a3:
         75:a0:32:7a:c7:1f:1f:58:8c:71:85:00:a3:ff:5d:1c:2f:6e:
         10:62:a3:b7:e0:17:11:67:3e:d8:d2:c7:a7:c7:0c:0a:0d:78:
         d8:a1:f2:5c:20:a1:ba:7c:56:95:5d:c5:9a:c1:71:be:13:73:
         c7:8c:8d:40:fc:79:b2:15:72:b7:a3:d7:ae:f8:fc:be:45:eb:
         ea:29:a2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org