Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/FgBvURr8oQ4980uPPR38g02MzI4.roa
File:                     FgBvURr8oQ4980uPPR38g02MzI4.roa (raw, json)
Hash identifier:          86pHWZi8W5VQeBjU/xDIHD9ONEhJwazutlkyNCCp9q8=
Subject key identifier:   16:00:6F:51:1A:FC:A1:0E:3D:F3:4B:8F:3D:1D:FC:83:4D:8C:CC:8E
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0224
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/FgBvURr8oQ4980uPPR38g02MzI4.roa
Signing time:             Tue 30 May 2023 17:42:21 +0000
ROA not before:           Tue 30 May 2023 17:42:21 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:3b00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 548 (0x224)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:42:21 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=16006F511AFCA10E3DF34B8F3D1DFC834D8CCC8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:42:da:b7:28:01:36:33:68:00:b8:b1:bf:0e:
                    22:90:b0:26:5a:b1:78:0b:a4:81:86:13:c5:42:ba:
                    8b:8c:f2:4c:d5:98:17:69:a0:42:59:4e:7f:47:7e:
                    4d:1c:6b:ab:0a:18:f8:6d:d2:0d:bf:6c:d3:83:b4:
                    cd:53:ca:c2:28:79:90:9f:61:cf:b1:26:4a:27:1b:
                    59:9d:cf:7d:97:45:41:c3:04:92:6a:b6:25:21:74:
                    9e:17:7e:c1:52:2a:d2:93:ea:88:80:83:43:19:3e:
                    ec:07:05:c8:09:82:02:fb:17:a6:6f:58:0f:9f:90:
                    eb:00:15:a6:33:9f:8f:aa:aa:c9:f6:16:c6:fc:0b:
                    0d:b8:c1:45:43:5c:cf:92:0c:21:25:c3:b4:0f:d2:
                    ed:7e:38:82:b1:01:36:4e:0b:e5:c7:f5:66:dc:28:
                    69:91:19:07:7c:06:a9:cf:81:a2:8e:70:4f:88:10:
                    2f:8c:56:03:44:97:77:9d:87:bf:8f:07:5e:ce:05:
                    81:17:1c:9a:5e:94:33:82:62:72:15:e0:2e:40:70:
                    9f:95:08:92:4e:2c:c7:b2:b7:8a:30:d3:cc:fa:d2:
                    fc:d6:1c:62:ac:a4:21:51:dd:80:72:6c:9a:b2:98:
                    83:f7:8a:29:90:ee:46:9b:6c:74:fe:5f:21:15:af:
                    78:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:00:6F:51:1A:FC:A1:0E:3D:F3:4B:8F:3D:1D:FC:83:4D:8C:CC:8E
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/FgBvURr8oQ4980uPPR38g02MzI4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:3b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         81:07:86:87:19:4b:66:a6:23:db:b2:67:53:c3:65:32:a2:08:
         ce:22:61:57:bd:8e:f7:3f:b9:88:08:ea:98:52:4e:32:7e:3c:
         70:79:0e:9b:48:ae:c9:43:e7:b0:91:ee:2e:a8:05:77:ca:99:
         a5:4c:f3:9c:49:da:ea:54:e8:39:80:46:54:29:00:4f:18:90:
         84:4d:2d:ad:31:88:75:73:f4:03:bf:c2:53:75:f2:a2:9d:9a:
         87:b9:2d:15:1b:c8:72:55:9b:ea:f2:aa:3b:06:83:2e:d8:d4:
         82:e4:38:2b:71:ef:d4:7d:ed:8f:3f:26:8b:32:b7:d7:8c:f1:
         6c:b5:14:f3:77:35:7e:f5:00:cf:78:93:f8:69:55:64:9e:e8:
         82:d0:0e:72:ee:67:7b:e1:ae:b8:fa:b8:12:9c:54:ff:26:82:
         59:80:f8:78:99:b5:1c:54:f9:b8:a9:6a:1c:96:6f:15:1d:55:
         e7:00:6c:fb:90:5c:3b:3e:29:24:8e:7a:12:ec:db:b2:6a:7a:
         03:56:aa:69:a4:13:bf:6f:2e:c0:e8:6a:10:54:af:80:f5:98:
         e7:f4:b0:0d:19:92:76:a3:f5:bb:a3:e1:ad:43:61:89:c3:4c:
         37:72:39:ee:bb:7d:21:31:9a:f7:cc:5e:69:fb:c1:70:ec:dd:
         19:bf:80:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org