Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Bcdfsa3fAbL_2pCapbMBUOIoEcI.roa
File:                     Bcdfsa3fAbL_2pCapbMBUOIoEcI.roa (raw, json)
Hash identifier:          QgFaFwl5+bXnrAIRvA5MT5itPLMGNqX+MDm3kIUXOAc=
Subject key identifier:   05:C7:5F:B1:AD:DF:01:B2:FF:DA:90:9A:A5:B3:01:50:E2:28:11:C2
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       B2
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Bcdfsa3fAbL_2pCapbMBUOIoEcI.roa
Signing time:             Tue 30 May 2023 16:08:24 +0000
ROA not before:           Tue 30 May 2023 16:08:24 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:5d00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178 (0xb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:08:24 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=05C75FB1ADDF01B2FFDA909AA5B30150E22811C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:95:50:7b:5c:96:0c:18:8c:cc:ec:05:36:ad:
                    63:bf:58:03:3f:14:98:5b:eb:7a:1d:d5:86:c0:d2:
                    65:ca:dc:69:c9:a8:35:21:56:00:03:31:dd:e7:89:
                    3a:4b:e2:6e:56:e1:61:65:bc:5a:8b:30:a6:3c:69:
                    a2:b0:43:82:e3:f3:49:18:5a:d5:c7:af:58:93:ac:
                    d5:57:20:f6:97:48:3e:01:31:32:29:ba:45:90:28:
                    8d:b6:2b:d0:5c:ec:e5:8d:aa:52:bb:37:dc:ab:0c:
                    48:08:f3:10:97:3d:0f:e2:16:64:0f:79:12:c5:a1:
                    72:a0:0b:a3:d4:8b:32:7a:6d:e9:da:33:5c:69:d0:
                    96:62:17:5d:68:fb:6b:d0:1b:a1:54:ab:51:e6:a0:
                    bf:20:a2:1a:04:39:16:35:ba:19:13:66:23:51:dc:
                    a6:b9:ba:99:b6:c7:47:fb:6d:62:9a:ca:73:70:f0:
                    22:92:63:2a:42:43:d7:28:b6:c2:c8:8d:fc:2f:25:
                    c5:01:68:0c:f0:7f:79:92:5f:26:f2:b3:a7:0a:b4:
                    97:3b:f3:f5:a3:93:35:5b:04:e3:d1:99:d2:4b:d4:
                    03:36:b6:40:0d:14:8b:4d:94:f2:02:34:b3:24:62:
                    e4:7c:8a:f5:1b:25:5b:62:7b:80:39:7c:6a:0e:36:
                    f0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C7:5F:B1:AD:DF:01:B2:FF:DA:90:9A:A5:B3:01:50:E2:28:11:C2
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Bcdfsa3fAbL_2pCapbMBUOIoEcI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:5d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         11:03:a8:5e:aa:42:e0:f1:1d:1a:a4:e1:77:2e:c0:e4:30:8d:
         93:ee:e5:b8:25:87:4c:1b:ea:11:5d:5a:7d:9e:cf:ef:d2:a5:
         5c:5a:dd:72:f1:8c:92:ac:64:7f:bd:08:12:0c:de:ae:3e:6a:
         b2:b6:d2:b3:63:65:25:0d:4a:70:bf:77:cb:f9:63:c5:10:48:
         4f:4d:ea:d4:ec:27:29:16:2d:e7:5d:9f:db:c0:b4:51:aa:47:
         12:c0:3c:93:a2:6e:dd:eb:0a:82:49:2c:b2:f6:af:61:a0:9d:
         d5:7d:8d:94:ef:f0:98:79:1a:fd:d1:28:5f:86:f2:79:f3:c7:
         66:c3:79:f9:4c:65:8b:dd:f3:4c:b7:9c:41:6b:06:82:83:2c:
         26:ac:3f:f8:9f:01:39:00:37:55:b9:0c:70:d6:9c:1e:72:ad:
         42:ba:ed:9e:59:1c:4d:2b:24:ea:34:62:e5:16:06:ec:cd:f6:
         4e:4d:76:0c:8c:01:d4:63:ce:cf:8e:f7:0d:2b:60:63:b3:21:
         ea:5a:a0:b1:5d:81:df:58:ed:25:69:10:4d:2d:52:41:aa:fa:
         57:83:1b:5e:25:83:12:88:10:d9:b2:5d:54:5a:ce:6d:7d:a5:
         97:fc:86:77:ee:03:9f:cd:2f:e7:3a:13:ae:44:e8:b5:f4:00:
         54:d5:bb:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org