Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/DUpzeOGnBYks9b6SkxIkme23NUU.roa
File:                     DUpzeOGnBYks9b6SkxIkme23NUU.roa (raw, json)
Hash identifier:          3PqcQX2F1lsMww3v9HR7SHpU4t0m2HK3hH6gH00HWMM=
Subject key identifier:   0D:4A:73:78:E1:A7:05:89:2C:F5:BE:92:93:12:24:99:ED:B7:35:45
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       6C
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/DUpzeOGnBYks9b6SkxIkme23NUU.roa
Signing time:             Tue 30 May 2023 16:06:18 +0000
ROA not before:           Tue 30 May 2023 16:06:18 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:2700::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:06:18 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=0D4A7378E1A705892CF5BE9293122499EDB73545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8b:9d:57:42:d7:16:9f:f4:1c:8b:d2:eb:e5:
                    49:8d:77:bc:b1:cf:bc:a3:40:d9:c7:f4:51:3e:a2:
                    1c:ce:4f:af:64:f9:12:82:da:1e:52:58:73:de:92:
                    47:40:48:6f:e6:a8:fa:d3:e4:4a:f9:53:3b:c9:12:
                    60:b3:4e:c8:33:4a:c6:a3:d0:5a:80:e1:8c:87:70:
                    0b:36:30:c8:87:20:0a:cc:e1:ad:81:b4:d8:e0:fd:
                    4d:8d:7e:f1:50:05:99:3b:23:1d:c6:e1:1e:96:ac:
                    e0:65:7b:a2:f5:27:40:ac:57:c6:1c:d2:96:0a:11:
                    5f:23:3e:19:3c:16:40:9b:18:57:66:10:7a:3f:fb:
                    bc:1b:5c:17:d4:59:9e:65:f9:a0:d2:47:89:39:1b:
                    bd:06:97:e9:d3:28:15:1f:b1:be:12:78:e7:ad:97:
                    73:5c:6d:57:66:f7:e3:3b:7f:13:71:01:ed:52:bd:
                    11:65:f0:f0:35:8e:15:a4:9c:69:75:8a:dc:bf:0b:
                    38:92:2e:99:cb:f2:bf:26:b2:9f:c6:79:01:d0:c0:
                    f2:22:75:99:3e:44:58:a5:9a:3a:37:78:41:9d:33:
                    49:ab:f8:4b:22:0f:30:13:c7:e1:18:f9:72:1a:d2:
                    8f:14:91:01:62:17:e1:66:f7:85:ec:2b:ed:75:1a:
                    6a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:4A:73:78:E1:A7:05:89:2C:F5:BE:92:93:12:24:99:ED:B7:35:45
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/DUpzeOGnBYks9b6SkxIkme23NUU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:2700::/40

    Signature Algorithm: sha256WithRSAEncryption
         15:7a:0e:cf:fb:ab:28:2b:2d:9b:d3:14:53:7d:18:e5:c4:8c:
         03:9a:0d:6c:37:cc:c2:eb:a2:fb:1b:e7:2d:46:19:f1:24:f7:
         7e:b2:f7:10:e9:94:7c:82:58:75:26:5a:13:1f:68:77:6e:d4:
         c5:b1:55:e3:ff:f1:ba:7e:76:a5:90:72:ca:12:23:dc:3e:e8:
         46:60:45:a9:06:d6:81:31:af:f6:8d:e9:8b:3f:74:20:3a:31:
         28:4d:2f:33:39:14:b3:1d:b5:1f:21:43:cd:06:15:6c:2a:93:
         4c:60:4a:ca:b0:ee:a6:0d:8f:3c:31:7e:4e:56:f5:ac:ab:af:
         70:10:d2:2b:be:46:26:2d:8e:58:ce:b2:13:99:b8:ec:16:87:
         4e:7f:05:1b:14:9b:cd:0b:31:a5:5a:9e:3c:39:62:eb:80:11:
         5d:b4:ee:b9:a0:48:80:7e:ce:f0:45:5b:6d:f5:a1:d0:45:9f:
         20:d6:00:7b:77:fe:cd:87:47:2d:e1:39:98:72:44:54:7b:0a:
         30:4a:4a:e7:f3:4f:6b:08:d2:d6:35:68:0b:cf:36:11:79:53:
         e3:3c:97:8f:29:ae:92:02:6d:a2:2f:42:53:00:a6:7b:10:f0:
         89:46:6f:c5:d1:3d:97:28:e3:a1:3e:28:c6:f0:4d:8f:87:b2:
         7f:04:60:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org