Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/AI2tVaLHapUYb36iIAH3u662wV8.roa
File:                     AI2tVaLHapUYb36iIAH3u662wV8.roa (raw, json)
Hash identifier:          2uMyhvpcucZq94/6/0crLYwnI+4mCdAhdT7RnHWe/6k=
Subject key identifier:   00:8D:AD:55:A2:C7:6A:95:18:6F:7E:A2:20:01:F7:BB:AE:B6:C1:5F
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       015E
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/AI2tVaLHapUYb36iIAH3u662wV8.roa
Signing time:             Tue 30 May 2023 17:32:30 +0000
ROA not before:           Tue 30 May 2023 17:32:30 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:60:f00c::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 350 (0x15e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:32:30 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=008DAD55A2C76A95186F7EA22001F7BBAEB6C15F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4c:d8:bb:a3:4f:e9:ac:3f:d6:a6:e2:c3:08:
                    b9:6e:8a:cf:ce:27:bb:9b:dc:6f:b8:79:71:6e:b8:
                    ee:3f:e9:4f:eb:4d:09:ba:da:73:9f:ba:29:ab:bd:
                    4e:9e:68:85:ea:c8:2a:86:ef:f5:14:2f:51:4a:39:
                    ed:17:02:c1:14:26:f7:8d:74:5c:c6:89:2e:78:29:
                    f9:5b:2d:c8:cd:7a:8d:5c:be:83:68:4e:0d:9a:78:
                    54:83:a3:0a:74:b0:1a:0b:d3:c0:b1:ab:97:1d:a6:
                    a5:7a:b1:05:95:83:d6:ee:6b:3e:8d:bd:16:a4:23:
                    7c:14:93:f4:01:82:6f:17:57:89:68:9c:a4:5e:99:
                    d7:22:04:30:01:0b:ad:89:33:3c:82:74:55:32:d2:
                    6f:4f:82:fd:65:56:08:01:07:12:05:0b:00:de:a5:
                    ee:88:a5:2b:02:c6:82:0c:ca:ce:32:35:9b:24:1a:
                    91:c8:53:ba:7f:21:b2:29:d9:4a:c0:98:fc:98:a5:
                    6c:01:a5:5a:28:e6:0e:0c:3c:e2:95:ba:21:20:f4:
                    cb:b1:7b:60:0c:22:e1:3f:db:71:1c:41:ab:37:a3:
                    3e:4a:d4:12:7b:a6:af:74:0c:d6:dd:66:15:59:d3:
                    cc:d8:83:4a:42:b0:4a:fe:f4:e8:7f:7f:d5:77:48:
                    a1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:8D:AD:55:A2:C7:6A:95:18:6F:7E:A2:20:01:F7:BB:AE:B6:C1:5F
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/AI2tVaLHapUYb36iIAH3u662wV8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:60:f00c::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:bf:9c:a4:26:85:c4:63:b0:53:25:cf:4f:64:f1:e8:fd:12:
         85:2a:b7:b0:6c:78:60:e3:a0:07:dd:2b:57:03:5e:67:4b:c2:
         f5:29:16:32:bd:49:85:16:46:b7:66:b7:c8:42:da:42:75:c6:
         f6:ee:7f:8b:41:df:2a:8d:c5:32:0c:2d:68:41:87:49:f2:c3:
         12:9f:9a:56:37:92:59:44:ed:31:a2:32:a8:0e:03:6a:c6:cb:
         5d:3a:11:7c:f2:6b:5b:ce:ec:bf:d4:7d:7c:4a:5a:c8:67:17:
         d9:b7:e8:87:c5:09:62:9e:2d:5f:63:8f:ff:c3:30:3c:1e:44:
         e4:05:18:6b:36:56:1a:4a:e7:81:a9:6f:8e:55:82:64:09:ef:
         4d:a1:19:af:eb:1a:56:5c:d6:64:4e:32:ac:6d:69:96:9d:50:
         b4:0d:c2:bb:43:d3:fe:81:98:b8:b6:13:75:4b:d3:37:ec:9a:
         d8:fe:21:61:2a:a7:08:35:76:4a:72:f8:94:8a:dd:ee:f6:58:
         b6:1b:a1:21:62:7c:19:b1:27:00:e4:e3:bc:e0:f8:7b:94:97:
         37:e0:b7:12:52:97:c5:db:ee:6d:77:95:8b:2d:8a:d0:76:5c:
         c5:a1:c5:3b:2f:19:7c:5c:4a:b4:b9:a6:64:4e:99:0b:5f:ec:
         22:eb:db:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org