Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/G9JN3l189WLIMQM6EuQAMZIpVUI.roa
File:                     G9JN3l189WLIMQM6EuQAMZIpVUI.roa (raw, json)
Hash identifier:          yeZ35Yai3B7nRYq6Fuz3Plnmk2gHIFFDjRaPGkM6hS0=
Subject key identifier:   1B:D2:4D:DE:5D:7C:F5:62:C8:31:03:3A:12:E4:00:31:92:29:55:42
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01B0
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/G9JN3l189WLIMQM6EuQAMZIpVUI.roa
Signing time:             Tue 30 May 2023 17:36:27 +0000
ROA not before:           Tue 30 May 2023 17:36:27 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:bb00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 432 (0x1b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:36:27 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=1BD24DDE5D7CF562C831033A12E4003192295542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d6:4c:4c:4f:c7:d7:2e:9b:dc:57:2e:8f:af:
                    fe:0d:ec:af:22:8f:98:d9:2c:34:62:39:2e:22:37:
                    d5:b3:17:67:3a:ff:69:5c:d7:9e:8f:dc:23:b9:1a:
                    ef:5e:b3:a3:5d:c3:7b:d6:06:27:52:17:08:f7:3e:
                    1f:cc:08:fd:cd:a3:1b:0f:7e:70:82:2a:16:5e:cd:
                    83:9f:fc:f9:f3:a3:42:41:bc:e3:64:3a:07:c5:bc:
                    50:22:eb:c2:eb:59:1b:3c:d5:d7:93:a4:e2:88:cd:
                    66:fd:c6:4a:0d:80:64:34:5c:79:7c:c3:8e:95:fb:
                    b1:37:d9:3c:56:d7:a5:ae:e8:b9:61:84:29:e4:ed:
                    ed:c7:e4:3e:2e:17:04:61:57:63:ff:6a:d5:05:75:
                    1b:7d:1c:ee:8b:9b:05:bf:62:95:df:1c:1e:55:de:
                    47:9f:a6:1e:6c:58:9d:1c:71:0f:f2:71:36:a1:5c:
                    ce:54:2d:71:6f:76:4b:9d:5a:c9:25:9e:89:6a:f6:
                    08:4b:7f:54:e1:57:fc:00:05:0c:a9:1a:6a:5c:91:
                    de:fa:86:8e:bd:21:45:c3:2d:27:c2:e2:a4:fc:db:
                    0c:53:90:30:a9:96:19:3e:c7:59:20:c8:91:95:ab:
                    db:08:27:fb:14:b3:ce:e3:1c:93:d3:19:8e:ac:3e:
                    bb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:D2:4D:DE:5D:7C:F5:62:C8:31:03:3A:12:E4:00:31:92:29:55:42
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/G9JN3l189WLIMQM6EuQAMZIpVUI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:bb00::/40

    Signature Algorithm: sha256WithRSAEncryption
         38:8f:97:e7:56:21:d3:d5:71:7c:99:89:f9:43:9b:22:f9:87:
         58:e0:9e:cd:2d:81:55:fa:3b:b2:75:5a:4c:f1:c4:88:14:30:
         8e:be:c5:10:16:c9:77:f0:6c:6a:dc:07:21:0b:f6:93:e1:81:
         0c:22:20:17:34:b1:fb:a1:67:c5:01:7e:0e:11:d1:c8:1b:57:
         6e:93:d1:49:e3:55:40:37:f9:e1:a7:06:a2:5d:4a:9a:cd:46:
         ea:8a:21:8c:7b:9e:4c:93:3c:96:f4:e4:c2:5e:f1:f0:15:3c:
         be:24:61:03:19:1b:7e:62:4e:d9:f1:cc:e6:14:b1:d9:63:53:
         fe:41:0d:c6:83:d9:14:5a:2f:71:72:8c:db:db:82:26:d7:5d:
         9a:91:26:15:73:d0:37:ab:31:ef:99:90:2d:98:22:09:33:50:
         c5:75:0c:7f:cd:ce:43:6f:5e:e0:dc:65:8f:b3:dd:bd:07:71:
         11:b6:c4:77:ff:c6:14:d7:96:cc:d6:d0:2a:c1:a8:88:d8:1b:
         b7:06:72:c1:f1:9a:f0:ee:4f:99:65:66:1c:ad:08:71:b4:5d:
         07:be:d3:db:64:dc:8a:d5:ba:7e:ee:5a:f7:a2:34:c8:d5:c9:
         c5:a0:85:d1:48:5f:8e:40:cf:a6:86:0b:fd:f6:ec:90:7f:af:
         d4:78:2d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org