Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/D2wBV-Nu42qm2CU7nGQwdqql-b0.roa
File:                     D2wBV-Nu42qm2CU7nGQwdqql-b0.roa (raw, json)
Hash identifier:          qFkwO6UH6bt9DzqJOE9C9jm6HB+amkiJwj5nkFiy0Vw=
Subject key identifier:   0F:6C:01:57:E3:6E:E3:6A:A6:D8:25:3B:9C:64:30:76:AA:A5:F9:BD
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0178
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/D2wBV-Nu42qm2CU7nGQwdqql-b0.roa
Signing time:             Tue 30 May 2023 17:34:20 +0000
ROA not before:           Tue 30 May 2023 17:34:20 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:8900::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 376 (0x178)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:34:20 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=0F6C0157E36EE36AA6D8253B9C643076AAA5F9BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:5a:a1:82:e5:05:e7:3d:d1:c3:8e:9c:36:80:
                    6a:21:37:8a:d6:a9:8c:ee:cf:21:e0:b6:01:73:4e:
                    81:d0:11:65:ac:c0:98:78:78:17:4c:94:01:aa:ec:
                    ae:51:32:37:64:02:eb:4f:a4:60:90:e4:9d:28:71:
                    54:9e:89:94:30:94:58:8f:74:08:de:6d:16:23:1a:
                    e7:b6:31:84:f4:26:90:53:fa:5d:28:5d:ee:dd:6c:
                    cd:23:54:df:b4:cc:50:fe:fb:6f:69:88:2f:19:f9:
                    95:79:17:93:80:b8:46:fc:70:00:2d:87:5a:3c:ed:
                    37:59:17:b5:f3:7c:be:e7:db:d8:37:7e:96:3f:22:
                    ba:1b:0c:48:50:3a:42:05:fe:86:d7:a2:6d:42:bf:
                    07:2a:97:fc:80:eb:a3:a2:eb:d4:ba:9a:16:e8:41:
                    fe:7a:90:4c:5a:b5:a5:6d:d1:ce:c1:ec:b4:71:50:
                    6c:bc:41:75:6c:f5:bf:a4:4d:2e:36:28:a5:46:ee:
                    89:8a:a4:32:2d:3b:93:fa:77:51:a8:f9:a1:44:fb:
                    71:a0:ed:5e:20:50:a1:b5:9b:76:c4:a0:6c:4c:ab:
                    dd:b0:fc:30:39:aa:03:36:fb:6b:62:e2:4d:aa:ea:
                    12:ff:94:f6:23:01:4c:0c:21:e4:74:05:cc:b5:25:
                    f8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:6C:01:57:E3:6E:E3:6A:A6:D8:25:3B:9C:64:30:76:AA:A5:F9:BD
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/D2wBV-Nu42qm2CU7nGQwdqql-b0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:8900::/40

    Signature Algorithm: sha256WithRSAEncryption
         7d:f0:33:df:50:69:fc:21:35:26:4f:1e:08:81:37:a8:1a:be:
         66:c7:49:ac:39:51:42:97:16:11:ed:e6:9e:54:d2:7a:ee:24:
         28:b5:0f:aa:71:39:2a:de:e1:cf:6c:e4:31:e2:63:d3:7b:49:
         58:10:fc:1d:f2:d7:78:4c:66:e3:46:47:2c:13:83:1f:dd:07:
         41:7a:19:7f:b6:99:c1:82:54:36:9b:d0:bf:88:47:47:95:e0:
         4d:b9:d0:14:70:9f:02:f1:d8:ed:88:88:ad:e3:8d:3b:cd:db:
         8d:37:88:f8:4b:ef:e8:1f:e7:6a:d8:cc:40:69:10:ea:0c:4c:
         b6:07:a9:c9:a4:e1:28:2c:24:e9:42:6e:f5:cc:71:07:f9:61:
         be:05:87:b1:58:db:50:79:b7:b5:9a:49:62:79:d6:51:dc:ae:
         b5:9f:25:7a:b5:2b:91:a7:bb:8c:57:09:e2:94:8e:e0:f9:e1:
         1f:f2:ac:89:91:f9:9f:80:09:27:4d:8f:ca:aa:4a:78:5b:14:
         1f:ee:32:b1:c3:f7:b2:62:15:34:e7:89:9c:d1:28:2e:a3:f9:
         74:94:c7:6c:65:64:32:67:1b:15:b3:36:a0:51:89:39:b2:39:
         ee:94:cd:37:28:dd:c3:bc:5c:ce:db:83:bd:42:40:5c:c1:e7:
         54:ee:a0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org