Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/B5321F1DmgiwDEEZnGXCI9IgFa8.roa
File:                     B5321F1DmgiwDEEZnGXCI9IgFa8.roa (raw, json)
Hash identifier:          C5RVgLUGiCiYr/1Nsi3TOlqjDEyOVenJ9QozmiWFdzM=
Subject key identifier:   07:9D:F6:D4:5D:43:9A:08:B0:0C:41:19:9C:65:C2:23:D2:20:15:AF
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01AA
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/B5321F1DmgiwDEEZnGXCI9IgFa8.roa
Signing time:             Tue 30 May 2023 17:36:25 +0000
ROA not before:           Tue 30 May 2023 17:36:25 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:1400::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 426 (0x1aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:36:25 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=079DF6D45D439A08B00C41199C65C223D22015AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b3:f6:1f:24:d6:cf:45:45:42:55:3c:b0:6b:
                    a0:72:c9:4f:41:87:88:ab:82:55:f2:85:34:5e:b4:
                    23:8c:6e:3f:4d:f4:7e:9e:65:f2:85:1e:23:db:4b:
                    27:69:ed:74:73:a8:97:a2:61:3c:e5:5c:ec:e1:c6:
                    90:bf:06:56:5e:c2:bd:5c:e8:a2:a4:d1:d9:a3:2b:
                    43:09:73:28:41:5b:1e:5a:a5:17:0f:f2:ba:c4:07:
                    5c:75:24:b4:11:23:c9:76:52:55:d1:dc:b1:43:e9:
                    a0:7b:37:5a:8e:fc:34:18:bb:06:4f:bd:0a:f6:b7:
                    75:5b:52:7b:45:80:3a:6f:34:41:53:1d:d2:02:9e:
                    2c:3d:5d:2e:03:de:4d:40:09:01:3d:9f:58:5c:4a:
                    87:f5:41:1f:d5:45:58:9e:fe:55:6f:df:46:ec:c1:
                    a7:a2:5f:5a:0c:73:85:b4:ee:60:cf:b6:b7:c4:30:
                    06:9e:35:cf:44:95:45:c4:04:d1:b6:96:c2:81:77:
                    64:df:f6:0e:83:cc:a1:ab:25:d5:81:a8:cc:5a:32:
                    3b:23:b4:c5:33:8a:49:e9:eb:ab:7f:14:a9:ef:c2:
                    21:13:60:6c:db:c1:79:5f:d4:5d:c4:7e:3e:bd:24:
                    21:9f:b3:00:c9:14:b3:af:e4:17:27:f3:16:87:6e:
                    2b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:9D:F6:D4:5D:43:9A:08:B0:0C:41:19:9C:65:C2:23:D2:20:15:AF
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/B5321F1DmgiwDEEZnGXCI9IgFa8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:1400::/40

    Signature Algorithm: sha256WithRSAEncryption
         85:6d:12:85:a0:ab:85:0d:62:85:ab:d7:24:0e:68:63:5e:65:
         86:1a:90:d8:fc:9c:62:13:7d:f4:eb:ea:c1:07:e5:8c:e9:99:
         b5:27:c7:3c:24:45:1e:d7:5c:84:e0:31:37:dd:12:94:f0:cc:
         27:8b:7e:5f:a6:76:dd:ee:bf:12:bb:25:f7:a0:09:93:14:b6:
         1a:31:ef:7a:a4:5a:9d:f8:32:17:37:ee:ae:4c:a2:75:e7:fe:
         ee:89:6c:1e:f0:6e:a6:f2:1f:8d:07:3f:e5:38:c6:45:35:b2:
         d6:37:c7:aa:cc:ff:65:df:09:51:ac:9f:1f:5e:29:f9:9e:c2:
         b6:91:ee:79:4e:f2:61:06:cb:43:0c:45:c4:8f:33:5b:39:9c:
         b7:ae:ff:2f:e2:8b:b3:9a:06:13:ed:96:3c:47:84:32:bd:f6:
         26:e6:ce:95:31:56:80:03:09:57:bc:5f:70:7c:f2:8c:3a:91:
         fd:c9:56:06:e3:1e:75:37:73:8b:bb:f6:47:2c:db:c3:22:a3:
         60:67:ec:58:71:45:c3:a2:61:5a:6b:bc:41:01:fb:7e:48:46:
         46:02:5c:f8:af:75:06:d6:eb:64:f0:44:ad:47:70:71:3b:66:
         4e:1f:0c:58:9d:68:50:c1:4a:72:f2:06:b4:9d:ad:e5:13:46:
         32:17:e9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org