Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/BFvXRKCKCt2VfhSQe64C9QFxWlE.roa
File:                     BFvXRKCKCt2VfhSQe64C9QFxWlE.roa (raw, json)
Hash identifier:          jV7x4u7YRVY5Jfnj6irmxvK/X5Q3rr9+00S1KA9c5sI=
Subject key identifier:   04:5B:D7:44:A0:8A:0A:DD:95:7E:14:90:7B:AE:02:F5:01:71:5A:51
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       E3
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/BFvXRKCKCt2VfhSQe64C9QFxWlE.roa
Signing time:             Tue 30 May 2023 16:12:21 +0000
ROA not before:           Tue 30 May 2023 16:12:21 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:5100::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 227 (0xe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:12:21 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=045BD744A08A0ADD957E14907BAE02F501715A51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:14:ce:2e:62:b8:83:ff:39:ef:ed:55:b9:c6:
                    38:f9:07:bc:7d:1a:a7:03:12:db:45:06:6f:99:93:
                    1c:4f:23:fc:82:79:00:9f:fa:4e:29:3f:44:91:81:
                    6d:ff:b2:04:66:b2:fd:e7:81:fa:dd:49:13:d2:96:
                    0b:4c:65:23:82:19:ad:0c:66:bb:51:8d:18:2d:33:
                    bf:5d:63:7a:3d:2a:6c:de:37:1f:6e:3e:d3:c9:6a:
                    34:74:92:5b:bd:ed:7d:26:bf:89:bb:b6:0d:72:2e:
                    e0:90:bd:85:9a:79:bf:79:93:f4:25:6c:e3:24:ad:
                    0d:03:d8:6d:27:b9:64:8b:ce:01:48:b9:8e:dc:7b:
                    44:a1:53:0d:fe:d6:6c:71:76:11:18:ae:61:83:9a:
                    ee:a7:90:d1:e0:6e:5e:de:6b:0c:fc:d2:82:cb:19:
                    38:74:52:a2:1c:1f:9a:d9:e8:e8:6a:47:e6:22:18:
                    a0:6b:3c:52:28:be:3e:cb:9a:c0:c9:bb:37:1e:db:
                    6d:df:a3:1c:5a:cb:4e:cf:b4:22:04:e5:3d:20:71:
                    ce:ab:11:97:5d:53:d7:8c:69:18:62:2a:0b:05:77:
                    8e:21:7f:81:e3:f3:e3:d2:72:d6:71:b8:36:dc:11:
                    37:01:4f:c5:0a:5b:62:fc:da:11:a5:e3:e3:5d:67:
                    a5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:5B:D7:44:A0:8A:0A:DD:95:7E:14:90:7B:AE:02:F5:01:71:5A:51
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/BFvXRKCKCt2VfhSQe64C9QFxWlE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:5100::/40

    Signature Algorithm: sha256WithRSAEncryption
         26:65:73:c3:b9:0a:90:9c:c4:12:aa:80:37:d9:71:ed:92:ff:
         64:0b:30:75:f3:fd:4a:5e:30:c3:0f:b6:37:cc:b0:46:ca:99:
         63:4e:a5:67:4d:69:1b:a7:d3:bf:2f:d6:d3:73:c6:9f:5d:fb:
         71:59:34:5a:4c:22:8b:87:a6:56:24:2a:47:f8:68:3c:f5:9a:
         01:7d:7c:23:cd:d8:ca:b1:55:84:49:8d:a5:a3:e3:94:b5:91:
         45:8e:1d:57:37:f4:59:7d:f9:28:8f:4f:5f:1f:7a:d6:a8:8f:
         4c:13:41:42:ac:ca:c6:3d:52:00:9f:0a:09:61:4f:a9:da:a0:
         bd:b5:0f:b8:32:16:40:86:ef:b1:11:9b:f5:e6:89:ad:2d:e9:
         7d:d5:fb:cc:09:a2:5b:80:42:49:7c:c4:1f:db:01:fd:72:1b:
         4e:1b:b8:6c:27:b5:be:6b:aa:ab:bb:26:30:7a:55:48:9b:fd:
         17:66:3e:5e:56:58:59:d6:e3:33:75:39:e9:e8:d9:92:bf:a8:
         15:40:eb:1e:b7:a9:d7:6d:ac:96:70:9a:74:98:c3:5e:fd:62:
         94:c4:f1:a0:68:79:1f:3a:25:de:cb:4d:03:51:7d:53:d4:2e:
         a8:d4:94:80:7d:d5:c9:37:3d:4e:36:33:4c:d0:dd:3f:48:44:
         e9:93:bf:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org