Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/EcTi_4b2DrSRE4g-bB4Ma4bXBuw.roa
File:                     EcTi_4b2DrSRE4g-bB4Ma4bXBuw.roa (raw, json)
Hash identifier:          LB169Ulqz1J1hCO+zVn6n424RfVKnjbEFapgc5dJWbc=
Subject key identifier:   11:C4:E2:FF:86:F6:0E:B4:91:13:88:3E:6C:1E:0C:6B:86:D7:06:EC
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0219
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/EcTi_4b2DrSRE4g-bB4Ma4bXBuw.roa
Signing time:             Tue 30 May 2023 17:40:30 +0000
ROA not before:           Tue 30 May 2023 17:40:30 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:e00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 537 (0x219)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:40:30 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=11C4E2FF86F60EB49113883E6C1E0C6B86D706EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:05:92:3f:a8:d5:d8:d1:cf:a3:01:7b:09:e5:
                    d8:07:c6:2e:fd:83:e4:d8:20:d8:f0:b2:33:12:b1:
                    5a:17:c6:7e:a3:4a:ed:61:30:1a:85:b9:b3:3e:6c:
                    ce:6c:32:ec:0e:0e:9e:a3:8f:7c:89:80:94:45:6f:
                    13:8e:e8:d8:ea:3f:a0:ef:5d:9e:ad:fa:fd:f0:4b:
                    e3:2a:6d:88:d5:9c:b8:f7:d5:1c:f1:a6:a3:a9:38:
                    49:c3:24:4c:f1:2c:47:44:23:f4:16:8b:40:5e:ab:
                    84:4e:65:69:d0:8e:5c:2f:9e:27:2c:57:4f:dd:fb:
                    5b:a4:10:4c:01:20:37:d0:88:97:3c:f4:6a:60:f8:
                    9b:f0:ef:e9:20:28:3a:fa:a8:4e:3c:79:d8:8e:05:
                    04:10:26:74:ad:e8:36:cd:25:34:b0:d0:46:ba:44:
                    60:ab:b2:d0:13:8f:a5:5c:30:43:8e:17:78:f1:1f:
                    73:3c:db:1a:0c:c0:fb:3b:75:a2:a0:d8:d6:84:24:
                    62:60:0a:a4:ec:2b:ca:cc:60:44:cc:a0:aa:5c:14:
                    35:da:53:a4:f1:a4:4b:25:d5:13:eb:06:01:48:d8:
                    e1:0b:86:e3:67:6b:bf:3e:2c:30:af:53:85:8f:9f:
                    4f:8c:7b:4c:9c:38:cd:76:6e:b7:b1:59:59:cc:5f:
                    1c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C4:E2:FF:86:F6:0E:B4:91:13:88:3E:6C:1E:0C:6B:86:D7:06:EC
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/EcTi_4b2DrSRE4g-bB4Ma4bXBuw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         4f:88:8a:7c:68:d0:16:96:a6:c8:a2:ec:25:1a:bf:66:3e:df:
         66:8e:f8:52:d9:77:53:63:ce:15:3d:6a:ec:ea:be:d0:28:04:
         02:1b:c4:e2:81:d6:32:01:6b:a5:71:fb:52:fe:a5:ee:d3:49:
         8f:5a:d1:0b:e2:82:65:76:fb:aa:0c:30:00:d6:82:5a:90:05:
         12:c7:ae:ea:ed:34:fb:6c:25:7f:ad:a6:8c:9c:b5:ef:b8:4b:
         f1:07:55:c6:ec:02:2e:6b:d2:2b:62:e2:54:58:2d:59:b6:28:
         80:a1:17:6a:47:9f:ec:a5:17:52:98:96:46:d3:61:a6:40:3c:
         fb:80:5f:f4:40:5f:16:fe:19:ee:08:66:62:d7:85:df:c4:1f:
         bf:4c:ae:d0:9f:84:20:30:1e:1a:9d:8d:cf:33:a2:b4:6f:a3:
         5a:b1:a8:99:9e:05:94:81:47:c5:c9:06:e5:cc:cb:bc:b3:75:
         75:2a:6b:e0:00:13:1f:15:73:71:24:bf:3c:d6:03:2c:f9:45:
         9b:15:a4:4e:57:bc:75:83:18:71:46:8d:7b:b4:14:3c:bc:ec:
         e5:a1:1d:86:ed:fa:29:5f:db:b5:d5:32:27:ab:42:cf:a1:76:
         11:34:ec:e0:e4:8d:2f:ab:03:b6:cd:4d:5f:6d:e3:34:a7:c4:
         e7:12:c0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:49 2024 by rpki-client on console-fra.rpki-client.org