Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/HNe2uG4ocSeUB0gfR6gVzgvOAsk.roa
File:                     HNe2uG4ocSeUB0gfR6gVzgvOAsk.roa (raw, json)
Hash identifier:          VEY2b0/yq0JIOw1DMxkVMvHmz+ZCYeiFn3j5gNRf2VA=
Subject key identifier:   1C:D7:B6:B8:6E:28:71:27:94:07:48:1F:47:A8:15:CE:0B:CE:02:C9
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0141
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/HNe2uG4ocSeUB0gfR6gVzgvOAsk.roa
Signing time:             Tue 30 May 2023 17:30:07 +0000
ROA not before:           Tue 30 May 2023 17:30:07 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:3700::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 321 (0x141)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:30:07 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=1CD7B6B86E2871279407481F47A815CE0BCE02C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f3:e3:80:3f:79:40:29:a4:29:43:5f:e5:cf:
                    c6:11:94:ea:43:a0:51:28:94:2e:2f:02:12:1a:27:
                    ae:c0:1e:de:d7:20:97:51:5a:13:e6:81:ef:2a:a3:
                    d7:c1:18:bd:68:d4:96:bc:ed:08:35:d0:68:00:8c:
                    91:c2:c3:7e:45:62:1d:8a:72:da:2c:4e:45:9d:c1:
                    6c:ff:80:d0:83:08:6b:21:25:ce:6c:ff:b3:a5:52:
                    db:b0:5c:3f:77:d4:25:6e:24:0f:0b:65:c2:7f:85:
                    83:34:4b:a5:ba:99:f2:07:62:ff:e2:9f:ba:3e:e2:
                    9e:4b:2a:38:e2:83:b2:3f:94:6e:0f:68:93:12:f8:
                    cf:5f:f2:7b:b7:25:f1:7d:e8:b1:6f:79:2a:aa:b9:
                    e2:71:84:2a:6c:2a:3d:f1:2d:49:44:c8:d7:1d:c0:
                    d9:19:a6:d8:b9:10:25:87:ca:71:32:a2:80:b2:b3:
                    8a:b7:ad:25:6f:03:3a:ad:e5:aa:20:b1:e8:c5:06:
                    48:b1:b0:b7:3b:75:55:5c:b9:9f:51:f9:8c:ed:07:
                    b4:08:f5:c8:ff:0e:51:86:9b:69:3c:9a:42:db:69:
                    e3:de:ae:10:c5:5a:91:6b:41:1f:01:39:2f:99:51:
                    2f:70:60:3f:7f:ec:98:6a:85:ad:d4:b1:7b:e8:60:
                    37:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D7:B6:B8:6E:28:71:27:94:07:48:1F:47:A8:15:CE:0B:CE:02:C9
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/HNe2uG4ocSeUB0gfR6gVzgvOAsk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:3700::/40

    Signature Algorithm: sha256WithRSAEncryption
         55:f8:b4:9e:18:0e:c3:5f:b0:3d:a1:7a:2e:41:0b:a2:e3:17:
         12:ce:48:84:f2:bc:c3:c7:e7:6c:cd:71:51:9d:31:bd:c1:b4:
         8b:71:21:dd:9b:ad:b2:30:6f:82:4b:f1:c7:5a:66:4a:5a:b8:
         b5:5a:8f:73:fa:f1:90:2d:b6:93:f7:c3:8d:07:e8:2d:7f:f4:
         09:bd:87:87:52:cb:50:e1:63:3d:f9:06:c9:3d:d5:9f:14:6f:
         67:a1:a7:be:a1:7b:80:fa:89:bb:ba:c2:8d:5a:5b:49:3c:c3:
         ae:e8:e4:1e:38:4d:dc:25:fd:82:b6:68:90:cd:3e:73:ca:88:
         b0:3d:25:64:c7:2b:81:13:5a:98:e4:23:06:e8:76:07:fe:11:
         c7:e7:35:8c:f7:1f:8f:c6:16:87:42:74:bd:45:e9:d8:98:7a:
         70:6d:95:ef:03:19:12:e1:0f:6b:f5:af:f3:6b:f7:44:c4:1a:
         62:57:3e:85:5b:b7:03:e1:b4:0b:ce:3f:7b:50:7f:ac:83:68:
         93:7c:be:cd:b8:50:0b:59:d6:52:59:35:77:9c:86:01:d4:e0:
         d5:bc:b2:b8:b4:07:b9:18:ba:f4:89:12:05:ff:b7:23:6b:df:
         55:20:2c:e9:a2:a4:16:b4:c9:7f:1c:f4:32:98:c3:37:a0:15:
         8c:63:27:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:57 2024 by rpki-client on console-ams.rpki-client.org