Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Biaw-ZxuAmjPjd0Q31cRUBybgqY.roa
File:                     Biaw-ZxuAmjPjd0Q31cRUBybgqY.roa (raw, json)
Hash identifier:          gq7avR/qWIW1bxRrdfbj6Q6A9YUjtvu+NNnRQwccHJ0=
Subject key identifier:   06:26:B0:F9:9C:6E:02:68:CF:8D:DD:10:DF:57:11:50:1C:9B:82:A6
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01B2
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Biaw-ZxuAmjPjd0Q31cRUBybgqY.roa
Signing time:             Tue 30 May 2023 17:36:28 +0000
ROA not before:           Tue 30 May 2023 17:36:28 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:db00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 434 (0x1b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:36:28 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=0626B0F99C6E0268CF8DDD10DF5711501C9B82A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:42:52:ed:08:8e:af:65:dd:b8:30:9b:b3:0b:
                    fd:10:34:6b:b8:c5:5d:c3:b2:27:b9:46:70:3d:56:
                    13:4e:d9:44:4b:b2:80:2e:72:a4:e7:2c:74:05:15:
                    1b:ca:42:46:22:1f:17:4d:31:aa:ee:21:4b:e1:a9:
                    78:43:87:0d:ac:fe:c9:aa:42:a3:7d:f7:61:ba:36:
                    88:3e:3b:e9:05:c9:9a:28:97:da:53:d7:f4:92:7f:
                    50:d3:99:33:df:2d:16:35:70:5a:82:5c:ab:b0:1e:
                    88:a8:f5:49:73:ac:94:bf:46:96:df:79:04:1b:1b:
                    13:cb:43:a8:5e:17:d8:3f:d1:c4:fb:6c:1a:10:fd:
                    23:d5:f7:3e:07:50:60:b5:d4:9c:e3:95:ca:28:a1:
                    6b:ca:0d:ac:2d:ea:ea:d2:25:d7:08:7f:ff:da:bb:
                    2f:c7:04:2b:0a:cb:85:e9:59:1a:2a:fe:cc:92:b1:
                    c5:0e:51:14:44:3d:d1:c7:80:e3:39:82:48:37:ae:
                    37:00:67:5f:d4:1a:9b:81:c5:92:42:d3:58:da:3c:
                    3c:1d:e9:34:f2:05:15:df:bf:93:1e:e7:f3:0e:dc:
                    74:40:76:2f:24:cd:c7:f7:17:37:eb:5e:1d:06:cf:
                    e0:c9:c4:c7:94:80:b1:14:12:db:d2:dd:91:39:8a:
                    ea:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:26:B0:F9:9C:6E:02:68:CF:8D:DD:10:DF:57:11:50:1C:9B:82:A6
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Biaw-ZxuAmjPjd0Q31cRUBybgqY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:db00::/40

    Signature Algorithm: sha256WithRSAEncryption
         3c:6e:5a:e4:70:b8:80:52:9c:c1:19:be:41:01:64:68:e1:7b:
         3c:8a:25:02:35:41:38:1d:92:dd:23:ea:be:82:12:8a:3c:6b:
         10:af:08:03:de:55:e7:16:f2:d9:1f:70:ed:12:e0:c2:ed:6f:
         e1:11:66:4e:fd:51:93:d2:34:54:11:0b:98:9a:ea:4a:76:86:
         f4:cf:e0:15:8f:74:31:49:f2:35:c9:c9:74:aa:07:6a:1b:75:
         de:42:f4:39:a0:f4:6c:1c:e6:b1:e6:cd:c6:e5:8e:73:da:15:
         07:95:46:17:ce:f1:50:d8:af:91:33:0f:cf:e4:e3:23:34:3a:
         3c:80:f2:1a:ab:96:cd:97:00:6c:ec:96:85:e7:04:f1:b3:d3:
         9a:22:bb:1a:af:e0:8a:ab:83:6a:ea:25:2c:a2:e5:1c:fa:57:
         03:60:47:0e:3f:30:97:79:6b:44:ee:02:30:dc:c4:c7:40:04:
         6f:79:4f:69:4b:18:4f:d0:70:13:3e:ca:ef:7a:10:81:8f:28:
         14:2d:70:c0:3a:6b:47:fc:a1:8a:88:2b:71:8c:a3:29:c0:21:
         42:60:b6:21:b4:e8:65:31:ab:d0:e5:a3:83:58:ec:98:ff:f6:
         59:87:87:39:3c:3e:95:36:ce:10:7b:40:80:d8:1c:dc:bc:ee:
         73:df:c5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org