Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/DRB-QiI87JDpBi-4kDe3W5WlpqA.roa
File:                     DRB-QiI87JDpBi-4kDe3W5WlpqA.roa (raw, json)
Hash identifier:          Pj3hcE4B0tap2NyeJP5qRAwxHkzJT3l5WUEbOvvV4yg=
Subject key identifier:   0D:10:7E:42:22:3C:EC:90:E9:06:2F:B8:90:37:B7:5B:95:A5:A6:A0
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       82
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/DRB-QiI87JDpBi-4kDe3W5WlpqA.roa
Signing time:             Tue 30 May 2023 16:06:25 +0000
ROA not before:           Tue 30 May 2023 16:06:25 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:ef00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130 (0x82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:06:25 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=0D107E42223CEC90E9062FB89037B75B95A5A6A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ea:33:71:95:00:72:c0:bb:75:51:fd:72:0e:
                    13:4b:33:81:38:26:bc:15:bb:43:84:5e:cd:e7:5f:
                    e2:92:0a:c1:4b:ab:6e:6d:87:7c:b4:1c:ae:a3:b7:
                    86:d4:f6:3a:9b:96:ac:f8:03:77:9b:c8:bc:e8:dd:
                    35:9e:d3:d7:9f:ed:25:b8:1c:51:2e:29:db:1f:61:
                    b8:72:82:06:20:4b:4a:fd:fa:70:9f:d0:e3:d7:6c:
                    14:24:40:40:6f:e0:3d:ad:72:e3:6a:a3:00:05:6c:
                    27:fe:ab:2c:6b:aa:11:aa:3a:b7:28:77:a4:08:de:
                    9a:73:6a:da:8e:27:d8:27:52:7f:48:7c:54:bd:c4:
                    db:94:3e:50:19:5d:31:fd:fa:7b:73:f3:32:37:dc:
                    40:1a:7c:1a:2e:37:5b:a3:2c:e1:29:f7:67:6b:8f:
                    39:97:6c:1a:a4:53:c4:49:c0:d8:cc:c0:91:ad:11:
                    45:72:b9:84:b6:c2:17:e0:3e:22:90:d3:c9:79:fd:
                    92:51:80:f9:95:69:00:38:a6:40:64:26:b7:f3:e0:
                    e4:10:57:0f:23:71:67:d4:d3:bd:8d:84:f7:91:a2:
                    1f:60:6a:ef:8c:f1:1b:de:78:c4:89:3a:e4:f8:a0:
                    1b:b4:1c:53:74:38:4d:f6:57:ab:9e:59:2e:cc:72:
                    70:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:10:7E:42:22:3C:EC:90:E9:06:2F:B8:90:37:B7:5B:95:A5:A6:A0
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/DRB-QiI87JDpBi-4kDe3W5WlpqA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:ef00::/40

    Signature Algorithm: sha256WithRSAEncryption
         75:e3:13:37:62:68:43:56:f6:e5:a4:7c:65:a3:d5:63:0f:42:
         3e:e6:41:f9:d4:51:e1:cd:6f:8a:3d:f2:9c:d0:5e:ee:f0:b4:
         49:90:c3:d4:95:ec:12:c4:43:24:94:52:be:d8:1d:8d:43:e0:
         c7:b3:a4:9a:ae:8e:be:03:69:10:2a:e6:99:5f:1c:e3:22:b7:
         59:8a:07:bd:6c:79:58:b3:05:3d:39:eb:e8:d6:0c:5c:a8:ce:
         53:4b:5d:ff:27:7c:35:96:22:27:ff:78:5f:45:93:26:4f:c2:
         b5:12:77:4b:d2:06:91:79:e7:8b:38:38:00:23:a7:a6:b9:29:
         49:d6:f9:77:b5:00:62:ba:4b:db:e0:53:70:88:70:5c:78:0c:
         cf:20:fe:f8:47:38:8b:88:5f:14:ec:49:e1:55:61:58:78:52:
         51:96:d6:46:cd:51:b3:09:bf:3f:e1:d4:2d:a8:68:54:f0:d5:
         31:3d:ec:4c:d8:a4:29:d1:4c:53:d2:b6:62:f3:df:c9:04:a9:
         94:1b:3c:f6:8f:6f:e9:c7:69:36:ad:76:54:a4:d2:9b:9a:1f:
         aa:e7:86:89:65:ec:3c:0a:18:ad:e1:57:a0:59:ce:fc:cd:98:
         87:20:33:6c:87:74:02:dd:2a:25:fd:31:44:93:1d:98:5e:c2:
         e8:6a:b4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org