Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/B-uJhMYsgyqXFhIBECV49vNF7K8.roa
File:                     B-uJhMYsgyqXFhIBECV49vNF7K8.roa (raw, json)
Hash identifier:          SnBOf0UXjAW207VMYPN4tFWXlTAqMinIRYAyDivvmow=
Subject key identifier:   07:EB:89:84:C6:2C:83:2A:97:16:12:01:10:25:78:F6:F3:45:EC:AF
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0167
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/B-uJhMYsgyqXFhIBECV49vNF7K8.roa
Signing time:             Tue 30 May 2023 17:32:34 +0000
ROA not before:           Tue 30 May 2023 17:32:34 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:d400::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 359 (0x167)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:32:34 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=07EB8984C62C832A97161201102578F6F345ECAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:9c:82:6e:ba:63:8b:75:96:3b:f5:35:9b:35:
                    3f:52:d5:b4:4e:3b:0e:94:13:8d:d2:6c:5e:8c:77:
                    01:6d:55:12:db:9c:ca:52:06:23:a5:64:73:1c:8f:
                    14:ef:1c:2f:8a:3b:87:1e:e6:2a:2c:e7:c2:4c:5b:
                    d9:d0:81:a8:e2:50:45:07:7b:25:1c:14:6e:ab:05:
                    47:b5:a8:ec:f5:a7:28:97:01:f1:b2:99:34:b3:f7:
                    49:0d:a2:a2:6f:dc:5b:e3:d8:e9:5e:d6:f4:32:1b:
                    ce:35:76:f5:d5:c3:f8:4d:1c:fe:a9:95:ce:33:56:
                    6c:1d:1f:ce:02:8b:4f:60:e5:28:1e:15:69:d3:0e:
                    c2:0a:dc:63:9b:89:a2:0d:45:49:f5:27:8a:f7:00:
                    37:ba:39:7c:a9:23:e7:65:e3:cd:21:f1:90:65:fa:
                    04:c4:17:15:9c:e6:a5:fe:d8:2a:62:08:f2:ea:2b:
                    1c:c5:0a:d2:e2:b5:69:bf:ce:9b:00:c7:c6:3e:4c:
                    25:df:17:09:97:2d:ad:eb:a4:55:36:d1:24:21:5a:
                    eb:de:de:d2:33:d7:d5:d6:97:71:6f:a1:b7:3c:65:
                    7d:ac:bc:4a:08:86:c1:c9:df:90:ed:28:c8:28:06:
                    8a:de:c0:ac:8a:cf:0a:eb:5c:d2:c9:19:50:54:92:
                    fd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:EB:89:84:C6:2C:83:2A:97:16:12:01:10:25:78:F6:F3:45:EC:AF
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/B-uJhMYsgyqXFhIBECV49vNF7K8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:d400::/40

    Signature Algorithm: sha256WithRSAEncryption
         48:06:a1:f7:d3:ac:8c:1f:55:a1:dc:65:0e:90:a1:1c:f0:a9:
         4a:a1:e5:f8:77:c9:ef:a6:ca:cf:1d:47:d4:f8:34:77:92:77:
         5b:9e:68:51:10:44:6a:43:3b:b9:45:73:b7:40:0b:18:28:98:
         87:03:0d:95:99:ff:8e:75:14:35:2d:03:53:df:e4:db:fb:65:
         3f:e9:11:b1:69:71:0b:8b:cd:cc:5c:27:e2:06:26:00:8f:54:
         80:4b:8f:26:60:e5:10:eb:60:51:e5:cb:c7:7c:fb:7d:f9:50:
         94:02:ea:67:b2:eb:88:ef:d3:29:d9:f7:d9:80:fe:d3:65:f4:
         a2:9e:d5:8f:f9:6a:5a:73:7a:65:ae:52:09:fc:21:52:84:41:
         4f:c0:bf:02:0a:a4:0a:b9:af:c9:ca:44:8b:69:67:f0:c9:d9:
         52:43:00:4d:3e:c6:b4:6a:2e:3a:cd:69:56:65:10:2c:f3:c1:
         8d:de:ce:74:37:00:9f:dd:d5:4d:33:ac:7a:38:2f:c7:33:67:
         83:30:be:ee:21:a3:77:12:b5:4b:d9:c5:8b:ea:10:cd:66:7a:
         83:e3:ee:4b:cc:e0:98:4d:ad:ee:db:ed:4b:a5:86:17:0e:fa:
         70:86:2d:43:8f:fe:d5:fc:ea:4b:b8:28:a9:f9:4c:d8:16:b2:
         38:3c:1a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org