Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/BYinpHyiiGFNsvBayphv7QcGsqw.roa
File:                     BYinpHyiiGFNsvBayphv7QcGsqw.roa (raw, json)
Hash identifier:          FU0KPJEPSWBC41/91Qc0BC5kkjohwHcvXt10/Ti5wyY=
Subject key identifier:   05:88:A7:A4:7C:A2:88:61:4D:B2:F0:5A:CA:98:6F:ED:07:06:B2:AC
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       016F
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/BYinpHyiiGFNsvBayphv7QcGsqw.roa
Signing time:             Tue 30 May 2023 17:32:37 +0000
ROA not before:           Tue 30 May 2023 17:32:37 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:5f00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 367 (0x16f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:32:37 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=0588A7A47CA288614DB2F05ACA986FED0706B2AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4b:1f:a5:a9:bc:3a:70:4e:47:06:47:b5:bf:
                    b2:78:71:77:c7:56:8d:85:42:44:00:d0:e6:6d:44:
                    1e:6d:8c:0a:d5:32:7f:ba:a0:39:17:ef:34:75:a1:
                    15:5f:ed:53:2e:2a:0b:48:ba:22:60:00:46:98:9f:
                    36:4d:9f:fb:7a:17:21:d0:07:37:96:45:24:f9:83:
                    9e:ab:70:00:d9:46:a2:5b:42:64:ec:2a:d4:07:74:
                    08:bd:55:8a:8f:bd:85:ee:93:5c:bb:56:6d:e4:82:
                    ae:70:67:ed:1a:08:82:c1:d5:2c:1a:d8:e8:f2:79:
                    b5:3a:46:39:3d:a7:bd:eb:b2:0b:7e:de:ba:33:4d:
                    e5:f4:9a:22:d4:af:39:b5:34:60:3a:f0:cc:e4:b0:
                    d3:25:61:f7:45:5c:00:88:eb:e6:34:ff:0d:b5:d7:
                    a6:76:cc:5d:55:f8:14:65:c0:28:b1:aa:39:98:bb:
                    df:f5:a5:6f:2f:ab:24:f9:e6:85:22:c3:61:02:bd:
                    98:7f:dd:50:9f:c3:b0:c3:37:5b:6f:57:9c:23:2f:
                    60:7c:f5:9a:f3:38:37:ec:a5:99:61:84:6a:c0:b9:
                    0f:a3:e3:a9:0d:28:43:8e:bb:5b:be:52:06:fd:c0:
                    8d:a4:8e:07:f0:ca:c3:bc:d9:d7:39:16:a0:a1:af:
                    0f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:88:A7:A4:7C:A2:88:61:4D:B2:F0:5A:CA:98:6F:ED:07:06:B2:AC
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/BYinpHyiiGFNsvBayphv7QcGsqw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:5f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         55:37:e2:6b:d3:ff:cc:a7:6a:f0:a0:aa:31:9a:dc:a6:41:60:
         f2:57:58:ac:22:1c:c6:43:1a:4e:3e:fb:74:29:20:37:0e:06:
         34:9f:c0:eb:bd:49:9c:8a:9e:06:d8:fa:66:52:e5:f2:e2:a7:
         d2:d6:3b:b8:d3:a3:76:44:8a:45:f0:e0:1b:e7:12:44:15:80:
         fe:34:39:e3:55:7a:e6:7d:12:41:e4:c0:b4:2e:eb:5c:10:4e:
         49:98:48:19:3b:65:f1:ac:10:c4:f2:be:db:da:bd:b6:a4:57:
         38:59:35:29:be:a2:d2:c7:27:18:bc:99:b4:4f:c9:8d:c6:91:
         b8:74:c5:ca:c7:0e:bf:1b:cb:ab:c3:ae:86:32:ff:95:3a:1f:
         b0:32:72:52:d1:39:5e:b9:58:c4:b8:a7:c4:84:fb:d4:66:22:
         20:be:0b:da:af:26:3c:79:56:df:f3:38:d2:f4:3c:96:1f:8d:
         32:e2:f2:3a:f8:b3:32:08:93:59:95:5c:91:3a:e7:3e:dc:f3:
         33:a7:50:3d:ba:e6:3d:96:ec:ca:bd:2f:e0:3e:f4:08:0f:b0:
         21:9c:db:fb:f6:d1:f0:e3:76:a5:a7:90:0c:f4:a1:5c:f7:cb:
         01:7b:e8:80:2d:1d:6d:0c:3b:92:7f:76:12:dd:3b:20:38:55:
         03:63:a2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org