Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Bp8hNH-qZl0yIajxG6ZmMPhnv_A.roa
File:                     Bp8hNH-qZl0yIajxG6ZmMPhnv_A.roa (raw, json)
Hash identifier:          bmPNQa2zP+MmIW6xekubYUhU7qmoRvshGbiOojNjfBQ=
Subject key identifier:   06:9F:21:34:7F:AA:66:5D:32:21:A8:F1:1B:A6:66:30:F8:67:BF:F0
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       020D
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Bp8hNH-qZl0yIajxG6ZmMPhnv_A.roa
Signing time:             Tue 30 May 2023 17:40:26 +0000
ROA not before:           Tue 30 May 2023 17:40:26 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:7400::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 525 (0x20d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:40:26 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=069F21347FAA665D3221A8F11BA66630F867BFF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c8:0c:f5:c1:1a:62:0a:b2:3f:a8:44:c4:49:
                    53:5a:51:c0:d7:a5:17:33:02:e6:1e:74:bb:85:c6:
                    a9:6b:77:c1:e7:53:96:52:a2:2c:5b:b4:ac:9e:2c:
                    fb:3d:e6:06:2b:fe:c7:7c:6c:89:25:9b:cb:76:06:
                    4e:89:46:55:2d:ac:c1:fa:40:5e:dc:4b:23:d6:bd:
                    57:c9:a7:1e:f7:8f:bb:4d:79:ff:63:c4:a4:c2:63:
                    91:e8:79:fa:22:b4:24:a7:83:9d:6e:cd:96:7e:0f:
                    0b:09:c5:71:b1:c8:ac:b8:b2:62:eb:3f:18:2d:30:
                    c6:c2:c4:b5:18:01:cc:7f:da:7f:02:67:27:92:d1:
                    ba:ee:ed:76:2a:27:5b:ff:81:37:7e:e9:75:f4:a9:
                    2b:03:ce:c5:3e:56:c4:b2:6e:35:d0:00:4f:54:16:
                    b3:51:58:fd:3e:9e:a0:51:c5:80:3a:8a:ed:ca:4e:
                    81:d1:97:89:d5:5b:a6:93:db:ea:86:eb:28:40:6e:
                    50:99:96:56:0d:d7:46:5e:61:df:6c:34:63:d0:6e:
                    d2:78:fa:9e:7d:8f:ae:5d:56:80:6e:2f:5a:3b:1a:
                    7e:f6:af:ef:fb:c7:c4:3e:aa:a0:7c:47:9f:b5:e0:
                    03:f6:1a:2b:f5:9b:34:ec:59:c8:88:93:ec:46:8a:
                    32:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:9F:21:34:7F:AA:66:5D:32:21:A8:F1:1B:A6:66:30:F8:67:BF:F0
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Bp8hNH-qZl0yIajxG6ZmMPhnv_A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:7400::/40

    Signature Algorithm: sha256WithRSAEncryption
         52:4a:86:01:11:7a:af:bd:89:64:2f:5f:a0:23:5c:d0:01:65:
         a5:6d:82:9c:94:8f:16:16:e5:32:1e:42:93:72:56:68:be:c2:
         4f:a4:b0:88:22:01:af:f6:21:8d:76:01:05:3c:9e:72:7b:99:
         1e:95:b5:60:ce:2d:df:f8:4c:97:7c:1d:82:51:48:94:60:2f:
         a8:80:1c:e1:aa:54:cb:7b:21:c3:29:c8:23:33:8a:e3:e9:45:
         81:c0:44:24:88:83:4b:e9:ae:d9:ba:64:d4:5e:cf:47:e5:d1:
         42:0e:81:d4:90:44:e0:ed:8d:94:c2:29:82:83:96:aa:7c:f6:
         df:1f:1a:4e:13:0b:40:eb:ab:63:56:59:eb:3d:24:b7:36:1a:
         82:b2:3d:39:5f:61:30:4f:d7:bf:b9:46:20:3a:b8:bd:5b:08:
         0a:15:ce:10:83:40:12:31:7f:fc:86:27:ff:36:f6:94:ff:82:
         05:20:01:5d:33:ff:84:21:39:ea:38:25:ca:c2:b9:eb:79:34:
         d5:24:8e:ef:26:ad:f6:4e:04:f1:c9:89:cc:cb:16:24:6d:3f:
         af:ed:cb:fc:f7:8c:dc:94:55:6c:52:78:89:e6:a5:f4:5d:81:
         cf:8f:d4:0b:cf:f6:21:91:85:b3:9c:46:fa:ca:56:69:4b:05:
         bc:64:e3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org