Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/C1nwkBcLuK_sePEOZCmxfguTdvE.roa
File:                     C1nwkBcLuK_sePEOZCmxfguTdvE.roa (raw, json)
Hash identifier:          TFeLxWNKREuIqJFK7ZlLUj53T3kK3lNYAd4/hrWCFJg=
Subject key identifier:   0B:59:F0:90:17:0B:B8:AF:EC:78:F1:0E:64:29:B1:7E:0B:93:76:F1
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       65
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/C1nwkBcLuK_sePEOZCmxfguTdvE.roa
Signing time:             Tue 30 May 2023 16:04:27 +0000
ROA not before:           Tue 30 May 2023 16:04:27 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:3d00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:04:27 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=0B59F090170BB8AFEC78F10E6429B17E0B9376F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:13:4f:10:9f:7f:9d:f0:dc:43:ac:35:6c:67:
                    82:4e:32:a4:11:3a:68:32:6f:3b:6a:65:d0:e0:c4:
                    c8:34:96:b5:1f:61:b0:ac:7e:a1:f2:09:90:1d:34:
                    f7:03:27:32:5f:25:44:7e:3e:25:7b:c1:8d:2e:8e:
                    a4:35:3f:64:ef:72:c8:d1:44:74:68:b0:1d:68:3d:
                    de:39:db:de:02:e8:8c:53:fe:f1:57:72:a1:00:3f:
                    5f:be:0d:14:58:7a:c3:1f:f1:f6:e1:d5:fd:48:f4:
                    3e:de:26:b2:74:2e:c1:bf:b3:4e:05:2e:2d:b5:dc:
                    01:dc:e9:f2:6d:7b:62:65:2b:80:6c:e2:59:73:6e:
                    7e:8c:79:5b:22:8f:b2:78:3e:22:21:44:26:36:b7:
                    6a:48:44:bd:d1:ac:a4:66:55:01:23:73:4f:89:f7:
                    9a:e4:ba:e6:27:f0:ea:1b:94:93:5f:7e:8f:58:8a:
                    f5:d5:5b:0d:3d:1b:15:d2:c4:25:18:19:22:7b:e5:
                    b5:15:15:80:77:97:52:a5:c5:e9:e2:1e:50:90:d0:
                    e7:23:be:34:13:50:57:0f:11:24:71:8f:8c:81:d2:
                    de:80:fa:ad:dc:70:76:d8:ea:36:ed:1b:c1:08:83:
                    24:4e:00:61:db:f1:5a:53:14:20:72:bf:15:01:14:
                    0c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:59:F0:90:17:0B:B8:AF:EC:78:F1:0E:64:29:B1:7E:0B:93:76:F1
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/C1nwkBcLuK_sePEOZCmxfguTdvE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:3d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         3e:d3:65:52:5b:c5:03:8d:35:3e:5d:63:e3:e2:27:02:ab:59:
         12:33:23:b5:1c:e0:5b:f9:37:65:f3:4c:1b:ef:e4:c7:24:41:
         2c:f4:0a:b8:ba:a3:e2:07:b3:b9:13:b6:fd:13:2d:d9:38:b5:
         87:d8:d8:36:d8:93:1f:b9:5f:5f:b5:24:2f:27:4b:00:b0:4c:
         91:6f:a7:c8:73:1e:c8:e6:27:d9:85:09:9e:a4:91:80:8c:95:
         ed:eb:5e:83:6f:b6:fa:24:97:4c:96:73:d6:b5:04:57:87:df:
         67:5e:ef:98:da:5a:3b:d0:cf:69:e0:77:dc:1f:cd:72:3a:f2:
         23:5e:d5:79:66:ac:0c:89:5d:e2:db:e5:29:5d:d6:fc:2b:ea:
         5a:fe:bb:fd:80:a4:75:4d:ca:0c:d2:25:ca:eb:35:ae:a4:ab:
         1c:73:bb:4f:8d:4b:dc:9d:19:87:de:af:53:ea:23:c6:f9:bf:
         04:97:ab:25:16:f1:3f:15:bf:3c:48:3f:05:f4:ea:4e:c6:6e:
         26:2c:db:79:21:55:49:44:5d:00:02:74:66:34:09:5c:0c:24:
         5d:0e:98:70:f7:6b:41:85:ec:57:09:e1:0a:b9:08:25:f0:15:
         50:91:e8:98:24:42:c2:03:12:2a:35:34:f5:cc:a9:d6:8c:7f:
         2d:8d:f9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org